SShortSingh.
Back to feed

Developers Build Privacy-First Skin Screening App That Runs Entirely in the Browser

0
·1 views

A tutorial published on DEV Community demonstrates how to build a skin lesion screening application that processes medical images entirely within the user's browser, without uploading data to any external server. The app uses Transformers.js to run a pre-trained Vision Transformer model for image classification, accelerated by WebGPU for near-native GPU performance. WebLLM is integrated to generate plain-language explanations of classification results using an on-device large language model. The approach eliminates the traditional backend pipeline, instead downloading model weights once and running all inference locally within the browser sandbox. The project targets privacy-conscious developers and requires Chrome 113 or later with WebGPU support, along with basic familiarity with React.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

ShinyHunters Exploits Critical Oracle PeopleSoft Flaw to Deploy Web Shells via WAF Bypass

Threat group UNC6240, linked to ShinyHunters, has been actively exploiting a critical pre-authentication remote code execution vulnerability (CVE-2026-35273, CVSS 9.8) in Oracle PeopleSoft Enterprise PeopleTools 8.61 and 8.62, according to a September 25, 2026 report by Google Threat Intelligence Group and Mandiant. Attackers bypass web application firewalls by percent-encoding the letter 'P' in the target URL path as '%50', causing WAF string-matching rules to miss the request while the backend WebLogic server decodes and processes it normally. JSP web shells have been confirmed on dozens of compromised systems, with some intrusions also involving fileless command execution that leaves no shell files on disk. Following initial access, attackers deployed multiple post-intrusion tools including SIDEEYE for credential theft, Neo-reGeorg for internal SOCKS tunneling, and MeshAgent for remote management on Linux hosts. Oracle has issued a security advisory, and organizations running affected PeopleSoft versions are urged to apply patches and review WAF rules to detect encoded URI variants.

0
ProgrammingDEV Community ·

Re-Enabled GitHub Actions Repos Trigger Malicious Code Re-Execution in CI Pipelines

Two GitHub Actions repositories — actions-cool/issues-helper and actions-cool/maintain-one-comment — were re-enabled on September 16, 2026, weeks after being disabled following a supply chain attack discovered in May 2026. The repositories were restored while still carrying malicious tags from the original compromise, meaning no new attacker activity was needed to resume the threat. Security firm Socket confirmed through execution logs that workflows referencing issues-helper re-ran the malicious payload upon the repositories being restored. GitHub's dependency graph shows approximately 15,000 repositories relied on issues-helper, though this figure reflects potential exposure rather than confirmed cases of code execution or data theft. GitHub disabled both repositories again on September 25, 2026, after the renewed risk was identified.

0
ProgrammingDEV Community ·

Claude Code subagent frontmatter tested: which model settings actually take effect

A developer running Claude Code 2.1.278 on macOS tested whether YAML frontmatter settings in custom subagent files — specifically model and effort fields — are actually honored at runtime. Three subagents were examined: a bulk reader pinned to Sonnet, a deep reviewer pinned to Opus, and a preflight reviewer set to inherit its model. Testing was conducted on September 22, 2026, using seven CLI invocations in an isolated throwaway directory to avoid contamination from existing config files. The experiment tracked which model actually responded to each subagent's first API request, whether effort levels survived a parent session running at a different setting, and how Claude Code handled an unrecognized frontmatter key. Findings revealed measurable per-launch token costs and showed that the validator passed through at least one frontmatter field it did not recognize without raising an error.

0
ProgrammingDEV Community ·

Developer builds update notifier for ChatGPT Linux app missing built-in checker

OpenAI recently launched a Linux version of its ChatGPT Desktop app, but unlike the Windows counterpart, it lacks a built-in update checker. A developer who switched from Windows to Linux noticed the gap after missing the GPT-6-Astra rollout for several days due to an outdated app. To address this, they built an open-source utility that monitors the system's package manager for ChatGPT updates and sends notifications when a new version is available. The tool also supports one-click installs and rollbacks, along with a control panel for managing upgrade settings. The project has been published on GitHub for other Linux users facing the same issue.

Developers Build Privacy-First Skin Screening App That Runs Entirely in the Browser · ShortSingh