Just A Few Bites Of Code
Code, notebook and live demo are available on my 🤗 HuggingFace Space I made it to the Lesson 10 of the fast.ai course . Its homework was particularly fun and challenging. In a nutshell, the goal is to deconstruct an existing Diffusion model available on 🤗 HuggingFace and rebuild it component by component. This model is capable of generateing an image based on a text (prompt) and optionally an…
The code and demo for this blog is available here on my Hugging Face Space I recently took some great AI training ( here and here ). One of the courses is introduced with this xkcd joke from 2014: It made me think: what task was considered impossible for a computer to accomplish in 2014, and can now be easily achieved using AI? 🤔 2014 was the year Google released reCaptcha v2 which became, by…
I have been learning and exploring Machine Learning lately. As I experimented with various tutorials and Jupyter notebooks, I found that Amazon SageMaker Studio was great for productivity. Simply put, it is a cloud IDE for Machine Learning. There are many great extensions available to enhance the developer experience. For example, the LSP extension enables code auto-completion. In the example…
One of the easiest way to encrypt a MSSQL (or Oracle) database is to use TDE - Transparent Data Encryption . TDE requires the higher end enterprise MSSQL license and requires a DBA to execute SQL commands. Why should you encrypt your database? If a hacker gets into your network, he may be able to steal a copy of the database or parts of the database. If the data is confidential or under HIPAA,…
Below are a couple of video demos which I made for my work as Sales Engineer at Gemalto. Demonstration of the SAS integration with the Microsoft Remote Desktop Gateway and Remote Desktop WebAccess. The most interesting part is when we show how the 2nd factor authentication can be bypassed by clicking directly on a cached RDP file. Demonstration of the SAS integration with Netscaler using SAML,…
If you have Linux servers, you must be familiar with SSH - Secure SHell . It is common for administrators to use strong authentication because they have the control of the entire company network and resources. You can configure tools such as PuttySC , PuttyCAC or SecureCRT to use smart card credentials to SSH to your servers. I made this video to show how it works, enjoy! To configure your server…
I recently had to build a Citrix XenApp lab and I decided to make this video to help others that are just getting started with this software. The video shows how to install and configure step by step: - Citrix License Server - Citrix XenApp 6.5 - Citrix Web Interface Finally we connect to the Citrix environment to access a virtualized application.
Two month ago, I sprained my ankle. Now that my ankle recovered, I feel comfortable running again. My shoes had about 200 miles on them already so I decided to buy a new pair. I went to Texas Running Company and I discovered a very geeky equipment there, and I could not resist to share it on this blog. I am not an expert in running shoes business but from what I understand there are two types:…
Follow the discussion on YCombinator . I like to play chess. It is challenging, it requires strategic thinking and it is a great way to clear up your mind. I also like to take my time to play it. It can take a day, a week or even a month! One day I took a picture of the game I was playing to help me to think about it later in the day. This picture gave me the idea to write an application that is…
Today I had a great half-day training on Metasploit and Armitage organized by our local OWASP Austin chapter and hosted by Microsoft. What I learned today was so interesting that I can't resist to share it here. Raphael Mudge - Designer of Armitage Metasploit is an open source penetration testing framework. It contains a database of exploits, payloads and post modules. The goal of the training was…
As I was writing a function to generate random values, I realized it is hard to tell if the implemented function truly generates random values. A unit test can validate the length and the format of the generated values, but not its randomness. To identify potential implementation flaws in my random generator, I developed the following tool. Keep Last 100 Random Values Keep All Random Values The…
Back in February 2011, Rick Redman from Korelogic came to present his Supercharged Password Cracking Techniques at the Austin OWASP chapter monthly meeting. With these techniques, he was able to crack large password database in a very short time using a tool called John The Ripper . In this article, I want to present what are these techniques and what we can do to secure our identities online. In…
I have wanted to experiment the Google Maps API for a long time. So today I used it to create an animation replaying a hot air balloon trip I did in 2009 in Santa Rosa, California. Before I got into the balloon, I started the Google MyTracks application on my phone. It records your GPS coordinates and altitude periodically. I used this data, Google Street View and Maps API to create the following…
On average 1 billion tweets are being posted per week. This gigantic amount of data represents a great opportunity to analyze live trends and opinions... if you can filter out the data you are looking for. I attended a very interesting conference at SXSW that enticed me to try this out. The idea is to pull some data from social media websites (Twitter in this example) and analyze them. I hacked a…
I recently learned it is possible to control Adobe Photophop in JavaScript, so I tried it out! From this article, I hope you will learn how to get started with Photoshop scripting. Photoshop is able to record your manual actions into a JavaScript. To enable this feature: copy the file ScriptingListenerJS.8LI from C:\Program Files\Adobe\Adobe Photoshop CS5\Scripting\Utilities to C:\Program…
GreaseMonkey has been around for quite a while, but it is not known as much as it should! Originally, it started as a browser extension for Firefox but the userscripts are now natively supported in Chrome . In this video tutorial, I will talk about: What GreaseMonkey is How I used it Fews tips regarding the development of userscript The userscript I use as example is available here:…
My colleagues and I published a paper where we discussed our design of a two-factor authentication taylored to lower the cost without compromising the security. Here is the abtract: " This paper describes a simple security architecture that supports two factor authentication for accessing Internet resources. Instead of utilizing the complex traditional OTP frameworks, which can be cumbersome to…
I met Patrick Chanezon, Google developer advocate, at the Google Hackathon in SXSW 2010 . As a former engineer at Sun, he has a clear understanding of the world of smart card. I showed him my team's work, where we married GWT and smart cards in an innovative application. Here is a video where Patrick interviewed me to talk about my company Gemalto , my team's work and explained how GWT helps us to…
JNI (Java Native Interface) allows the communication between a JAVA program and a native program (C, C++). The objective of this first blog post is to give you a quick introduction to this technology. Hopefully, after reading this post and watching the video, you should be able to: set up your own environment with Eclipse and Visual Studio create a program using JNI debug while switching between…