Skip to main content

Posts

Erreurs, Tromperies et Manipulations

Erreurs, Tromperies et Manipulations Le résultat d’une série de bouquins lus au cours de ces 2 ou 3 dernières années. Une actualité centrée sur le Fact-Checking(ou pas) et l’amplification par les réseaux sociaux … et il me prend l’envie de mettre tout ca en perspective. Il y a fort longtemps, j’avais lu Noam Chomsky et vu un documentaire au cinéma. C’est un peu le fondement de toutes ces réflexions : on peut tendre vers l’objectivité, mais jamais l’atteindre. On est toujours plus ou moins consciemment influencé. Tout est relatif. Blablabla ... Intéressant, du bon sens, on pourrait s’arrêter là ? Non, ces notions de base ne donnent pas idée des developments concrets qui affectent notre vie. Alerté par la presse du nombre de publications scientifiques non-reproductibles ou simplement bourrées d’erreurs, j’ai eu l’occasion de lire“Statistics done wrong" de Alex Reinhart. Les outils crachent des chiffres, ils ne disent rien de leur signification ou absence de signification. A force de pe…
Recent posts

July summary - 2019-07

07 JulyDropbox Paper looks really good!There is even an app to link to GitHub https://github.com/maxking/paper-to-gitOnly if it was possible to make it public !? Tech Many surveys this month
Secure CodingThe JetBrains survey shows that static code analysis and code review are lagging behind other practices https://www.jetbrains.com/research/devecosystem-2017/#key-takeawaysRiskyBiz podcast with Colin Domony (VeraCode, A code analysis tool). Discussed the divide between developer's reality and "security people" https://risky.biz/RB443/O'Reilly: "The alarming state of secure coding neglect: A survey reveals a deep divide between developer aspirations for security and organizational practices." https://www.oreilly.com/ideas/the-alarming-state-of-secure-coding-neglecthttps://www.oreilly.com/ideas/2017-ops-salary-survey?imm_mid=0f4434&cmp=em-webops-na-na-vleu17_nurture_em7_ops_salary_surveyInfrastructureDNS and TLD can be a mess. Will have to read about DNSSE…

June summary - 2017-06

06 June Podcasts These are suggestions, I did not listen yet: The Amp Hour http://theamphour.com/Embedded.fm http://embedded.fm/ Techhttp://modeling-languages.com/experimentation-in-dsl-engineering/https://github.com/floyd-fuh/JKS-private-key-cracker-hashcathttp://vertx.io/docs/guide-for-java-devs/Security (I was at SANS Paris ...)SNORT alternative https://www.bro.org/https://trends.google.com/trends/explore?q=snort%20ids,bro%20ids,suricata%20idsPenTesting Execution Standard (community work): http://www.Pentest-Standard.org/Open Source vulnerability scanner and manager http://www.OpenVAS.org/ (Greenbone) (alternative to Nessus)Web Reconnaissance framework (Python) http://Recon-ng.com/https://bitbucket.org/LaNMaSteR53/recon-ngMultiple tools to assist administrators and auditors with assessment, measurement and
enforcement of security baselines https://www.open-scap.org/Global IT community to safeguard private and public organizations against cyber threats.
https://www.cisecurity.org/Thr…

May summary - 2017-05

05 May Productivity, GTDReadability chrome Extension has become Mercury: https://chrome.google.com/webstore/detail/mercury-reader/oknpjjbmpnndlpmnhmekjpocelpnlfdiLots of Workflowy clones!VimFlowy https://VimFlowy.bitballoon.com/Open Source https://github.com/WuTheFWasThat/vimflowy , but beware the synchroExcellent plugin system, very modularDynaList https://DynaList.io/Not OpenSource, but very active! SocialBlanche Gardin (French humorist, modern)Louis CK (US humorist, modern) via Blanche GardinLots of YouTube video, Really excellent !!"How the Self-Esteem Craze Took Over America" http://nymag.com/scienceofus/2017/05/self-esteem-grit-do-they-really-help.html (via Linda Rising) It is not what you are, but what you can be that is important.Funny, that even in France this "American confidence" is seen as a great driver of success."The Complacent Class: The Self-Defeating Quest for the American Dream", by Tyler Cowen http://www.EconTalk.org/archives/2017/05/…

April summary - 2017-04

04 AprilWe knew that ants were farming fungus https://en.wikipedia.org/wiki/Ant%E2%80%93fungus_mutualism. The news is that http://www.popsci.com/ants-farming-fungi it happened 65 millions years ago in dry climate. It is quite fascinating subject, that both species influenced each other, to the point of being dependent. (Via ScienceFriday)American maybe the most liberal, but they are also very critic of the "financial matter". Rana
Foroohar of the Financial Times talks about: "Makers and Takers: The Rise of Finance and the Fall of American Business".  http://www.econtalk.org/archives/2017/04/rana_foroohar_o.htmlNice Math tool: SageMath. It has command line and a web interface. http://www.sagemath.org/ (based on Python, R and TeX, install is about 2Go ...)Always nice from times to times "10 Mistakes That Spell Disaster for Your Career" https://www.linkedin.com/pulse/10-mistakes-spell-disaster-your-career-jan-johnston-osburn MusicA mashup of Coltrane's …

STM32 Nucleo HowTo

The Nucleo is not as popular as the Arduino, but here are some useful resources.

Excellent PDF to start with a STM Nucleo and a few components (Led, push button ...)  http://www.tamberg.org/fhnw/2015/LoRaWANIoTPrototyping.pdf Very basic, but very helpful.

The debug console On Linux just use Minicom. You only have to specify 9600 baud. Other default values should be OK.

Type this in a terminal: 'minicom -b 9600 -D /dev/ttyACM0'.
And you should see the  'printf("Bonjour !\r\n");'  in your C program.
The pins, where to plug stuff Of course it depends on your Nucleo board, but for the  L053R8, look at the Nucleo PinOut section. You have the Arduino and the Morpho headers, then focus on the PinNames.h file. Also keep in mind the warning about D0 and D1 that are not usable, because shared for the USB communication.
Problem is that ST web site is a bit cluttered with tons of informations and it is not easy to find the relevant ones to start.
Next I am still reading …

Midi keyboard AKAI LPK25 velocity problem

I have a cheap AKAI LPK25 MIDI keyboard. I it nice, but unusable due to unreliable sensibility. There is a utility: aseqdump that will dump MIDI messages. aseqdump -l will list the Midi client connected ; "-p client" will dump the specific client MIDI messages
ON PC, the plugin "MIDI velocity adjust" by Robin Gareus is excellent to compensate the poor physical MIDI keyboard.Android does not seem to feature such filter. Neither does Caustic: http://singlecellsoftware.com/node/13935 To measure the problem: $ aseqdump -p24 | tee lpk25.txt | sed --quiet -e 's/^.*Note on .*elocity //p'
 # Type some random string on the keyboard ... $ cat lpk25.txt | sed --quiet -e 's/^.*Note on .*elocity //p' > lpk25.dat $ cat lpk25.gp   
  n=127 #number of intervals     max=128. #max value     min=1. #min value     width=(max-min)/n #interval width     #function used to map a value to the intervals     hist(x,width)=width*floor(x/width)+width/2.0  set boxwidth width*0.9     #cou…