SlothShot: Offline Tool Finds Screenshots by Their Text or Meaning

·1 views

SlothShot is an open-source Windows app that watches a screenshots folder, reads text in each image with OCR, and lets users search by exact words or by meaning. Its hybrid search combines keyword matching with semantic embeddings, so a query like "docker port problem" can surface a screenshot reading "address already in use." Everything runs locally on the CPU with no uploads, and the demo showed it working with Wi-Fi off on a modest laptop without a GPU. The tool can also optionally rename screenshots based on their contents, using a local model via Ollama or OCR alone. The project is MIT-licensed and was submitted to the Hacktoberfest Open-Source AI Challenge.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Installing Self-Hosted Jitsi Meet on Ubuntu 24.04 for Private Video Calls

A guide explains how to deploy Jitsi Meet, an open-source video conferencing platform, on a self-managed Ubuntu 24.04 server. It highlights advantages over services like Zoom and Google Meet, including no guest accounts and no time limits. The setup covers hostname and DNS configuration, adding the Prosody and Jitsi package repositories, and firewall rules for web and UDP media traffic. It also walks through installing jitsi-meet with a Let's Encrypt certificate, which is needed for mobile app compatibility. Recommended hardware is at least 2 GB of RAM, with 4 GB advised for real meetings.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

PHP Team Warns of Unpatched RCE Flaw, Issues Interim Configuration Mitigations

The PHP security team has warned of a newly disclosed remote code execution vulnerability that does not yet have an official patch. The flaw affects only certain non-default configurations, allowing an attacker to run arbitrary code on the server via a crafted request. In the absence of a fix, the team has published interim mitigations, including disabling risky functions and remote URL inclusion and restricting filesystem access. The alert comes amid other recent incidents, such as a compromised LiteLLM package distributing info-stealer malware and a Railway breach prompting secret rotation. Engineers are advised to audit non-default PHP settings, apply the recommended changes, and monitor for the forthcoming official patch.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Daylight: A Local AI Planner That Schedules Work and Personal Tasks Together

Daylight is a personal assistant that turns a task list into a proposed day, mixing work and personal items while accounting for priorities, time estimates, fixed appointments and breaks. Users set available hours, enter tasks as lines or through a form, and a local open-weight model suggests categories, priorities and durations that the user can review before scheduling. Tasks that do not fit are listed under a "For another time" section with an explanation, and the day can be replanned when plans change. The project is open source under the MIT license, built with plain HTML, CSS and JavaScript, and runs locally with a small Node.js server. Early browser testing led the developer to restrict the model to a simpler output format, since it had invented times and dropped tasks, and the results were informal rather than a formal accuracy evaluation.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Over 52,000 SonarQube pages found exposed on port 9000 in one-day ZoomEye scan

A scan of internet-facing assets on 26 October 2026 counted about 52,068 SonarQube pages on port 9000, using ZoomEye data. SonarQube stores repository tokens, webhook secrets and integration credentials, and holds lists of known code weaknesses that could guide an attacker. The report advises teams to confirm their instances are reachable only from the analysis network and authorized developers. The counts reflect pages observed on a single day, so instances behind SSO proxies may not appear, and the figures do not by themselves show that authentication is weak. Regional breakdowns are based on IP address geolocation.

0 comments Read more at DEV Community