Cursed Knowledge

Summary

Cursed KnowledgeCursed knowledge we have learned as a result of building Immich that we wish we never knew.6/4/2025Zitadel Actions are cursedZitadel is cursed because its custom scripting feature is executed with a JS engine that doesn't support regex named capture groups.5/30/2025Microsoft Entra supports PKCE, but doesn't include it in its OpenID discovery document. This leads to clients thinking PKCE isn't available.5/5/2025Image dimensions in EXIF metadata are cursedThe dimensions in EXIF metadata can be different from the actual dimensions of the image, causing issues with cropping and resizing.4/1/2025YAML whitespace is cursedYAML whitespaces are often handled in unintuitive ways.9/20/2024Hidden files in Windows are cursedHidden files in Windows cannot be opened with the "w" flag. That, combined with SMB option "hide dot files" leads to a lot of confusion.8/7/2024Carriage returns in bash scripts are cursedGit can be configured to automatically convert LF to CRLF on checkout and CRLF breaks bash scripts.8/7/2024Fetch inside Cloudflare Workers is cursedFetch requests in Cloudflare Workers use http by default, even if you explicitly specify https, which can often cause redirect loops.7/21/2024GPS sharing on mobile is cursedSome phones will silently strip GPS data from images when apps without location permission try to access them.7/3/2024PostgreSQL NOTIFY is cursedPostgreSQL does everything in a transaction, including NOTIFY. This means using the socket.io postgres-adapter writes to WAL every 5 seconds.7/3/2024npm scripts make a http call to the npm registry each time they run, which means they are a terrible way to execute a health check.6/28/202450 extra packages are cursedThere is a user in the JavaScript community who goes around adding "backwards compatibility" to projects. They do this by adding 50 extra package dependencies to your project, which are maintained by them.6/25/2024Long passwords are cursedThe bcrypt implementation only uses the first 72 bytes...