Browser-Based HEIC Decoding With libheif WASM and a Library Bug

·4 views

iPhones save photos in HEIC by default, which often fails to open on Windows machines, upload forms, or older content management systems. The common workaround is an online converter that uploads images to a server, but the author shows that the browser itself can decode HEIC, falling back to a WebAssembly build of libheif where needed. The pipeline first checks the file header to detect HEIC even when files are misnamed, then loads the decoder lazily with a retry-safe promise. A bug in libheif-js 1.19.8 made the primary-image check throw on real phone photos, which the author worked around by calling the underlying export directly. Memory limits, a 64 MP cap, and device-aware worker concurrency are used to keep mobile tabs from crashing during batch conversion.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Solar Power Overtakes Nuclear Generation Worldwide for the First Time

Solar has now produced more electricity globally than nuclear power, marking a first in the energy sector. The milestone is reported by pv magazine Global, which tracks renewable energy developments. The shift reflects the rapid expansion of solar capacity across many countries in recent years. The article's source text provided only a link and basic Hacker News metadata, so further details such as exact figures and timeframes could not be verified here.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Palo Alto PAN-OS Flaw CVE-2026-0322 Exploited in the Wild Despite Requiring Credentials

Palo Alto Networks disclosed CVE-2026-0322, a management interface vulnerability in PAN-OS that lets an authenticated attacker with network access execute code as root on the firewall. CISA added the flaw to its Known Exploited Vulnerabilities catalog and gave federal civilian agencies until October 17 to remediate after limited in-the-wild exploitation was observed. The flaw is rated CVSS 8.6 and classified as a code injection weakness, and Palo Alto says upgrading or restricting access are the only remedies. Researchers warn that stolen administrator credentials from infostealer logs or credential reuse could effectively remove the authentication barrier. Palo Alto has published three attacker IP addresses tied to the observed activity and recommends patching to the listed fixed builds.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Hire Humans Still Has Zero Revenue as It Hunts Its First AI Agent Customer

A builder's weekly diary reports that the Hire Humans marketplace, where AI agents can post physical-world jobs for people, has two open paid jobs but no agent customers yet. One listing from an AI agent named Zander offers payment for a morning photo of Hudson River Park in New York. The author says revenue remains at $0 and the team's focus has shifted from building the platform to distribution. The campaign includes free directory listings, checking whether AI chatbots mention the service, and publishing content across several sites. The author notes the platform keeps 85% of job value for paying members and 60% for free accounts.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Team Tests a 125B Coding Model on One Rented RTX 5090, Finding Concurrency Limits

A team ran the open-source Strata engine serving a 125-billion-parameter mixture-of-experts coding model on a single rented RTX 5090 with 32 GB of VRAM. Throughput stayed roughly flat as users were added, so the card's limit is concurrent sessions rather than total tokens. A solo user reached about 144 tokens per second with speculative decoding, but per-user speed fell to around 38 tokens per second with four concurrent users and 19 with eight. Two setup problems surfaced: a container CPU quota that throttled worker threads and a low VRAM reserve that caused GPU memory paging, both resolved by config changes. The authors note that the quality benchmark figure comes from the model card rather than their own testing.

0 comments Read more at DEV Community