Skip to main content

Posts

Trivy for docker image scanning

  We have seen a lot of security scanning tools like Blackduck, Fortify, SonarQube etc.. these tool scan source code and the built binaries, it is all well and good I think they do the best job in their respective feature kits. in a industry where we are shipping the solutions in containers bundled with the binaries, it is relevant if we had a tool that could scan the final product. That is what Trivy an open source project is offering. it is developed by aqua security. I think it is a brilliant little tool that scans for security issues in a docker image for free!! well what and all it will scan? it scans for operating system libraries that support your application and the application itself. it scans for any misconfigurations, secrets as well. only thing it don't have is a dashboard like sonarqube and blackduck. still it generates text and JSON based reports that can be used to create dashboards in grafana or superset. Operating System Libraries : Trivy scans the base image and a...

Capturing the moon!!

moon on DEC 2024     moon on Jupiter and moon conjunction DEC 2023 Don't worry about the title saying capturing the moon. I am not the Gru from "Despicable Me" or have minions by my side. All I have done is capture the image of the moon in my Android camera with the help of a telescope. The tools I used for this are listed below Celestron 130 eq (equatorial mount) android camera (any device released after 2017 will do) 10 mm eyepiece that came along with the telescope two other things came with it 20 mm eyepiece and 2x celestron omni Barlow lens. the pictures I have used here were captured between 22-dec-2023 and 25-dec-2023. first picture of the moon with my telescope It is not the best image out there but the efforts are honest, I just canceled a road trip plan to buy my first telescope. sent the next few days to understand the mount working and the proper initial setup to track objects. the telescope is largely debated for its ability in many forums, I think if you ar...

The Ethical dilemma!!

  What is it?     Artificial intelligence has come a long way. They can now imitate human responses. chat GPT has now greatly impacted post-covid society which is still recovering from it. From the seminal paper of Alan Turing's " Computing Machinery and Intelligence" to enjoying mindful conversations with a chatbot this is where we need to ask is it required? yes, chasing the low-cost efficient lifestyle; we may say we need it. the hidden meaning is by how much. we already use a lot of technological miracles. They are considered home appliances these days, these home appliances have more computing power than the spacecraft that took humans to the moon. So the next question is......  Why is it? We don't need the technology for our survival. during the cold war, we created weapons that can destroy places that we didn't even want to destroy. most of the geopolitical escalations have been de-escalated because two nations with nuclear power were involved. So what are ...

ML classification comparison for diabetes questionnaire

  A comparison between different classification algorithms on the dataset for the diabetes questionnaire. 

Emulating RIP(Routing information protocol) in GNS3

 RIP(Routing Information Protocol) Being one of the Oldest distance vector routing protocols, RIP is based on the Bellman-ford algorithm.  There are two versions of this protocol, which were published in 1998. We can find the complete documentation on internetsociety.org the file is located at  RIP Official Documentation . GNS3 Many professionals and students use Graphical Network Simulator to experiment with networking paradigms. we are using it to emulate the RIP routing algorithm. Components VPCs - 2 switch - 2 router(c7200) - 3 Topology Topology constructed for this exercise   Commands to set the IP address to interfaces in the router config interface <Interface_Name> ip address <IP_addr> <Mask> no shutdown Commands used for initiating the RIP routing in a server are as follows config router rip network <subnet1_network_addr> network <subnet2_network_addr> if all the commands are entered correctly we will see a result similar to...

AWS CodeBuild Setup (AWS web Console)

AWS CodeBuild is a service provided by AWS for all the project build requirements. it is a module which will be part of AWS CodePipeline service.  This below instructions are aimed for beginners and advance configurations are not covered, users are encouraged to explore while understanding the basics. be aware that for each build you will be billed for the resource you use please check the billing calculator. Step 1: Search for CodeBuild service in AWS web console and click on it. Step 2: select "create build project" for creating new build configuration here you can enter the name for your project and also select the platform which contains your source code you want to build. available options are shown below. sample GitHub connection look something like below picture. Step 3: now we have to setup our environment to be used for our build here we can either choose a AWS managed Docker images or our own images for the build. There are different version of images to select from...

K-means using ‘seed-randint-numpy’

K-means classification K-means, a simple Machine learning algorithm used for classification purposes. Machine learning is an awesome field, full of interesting topics and scenarios to study. While starting in this track one of the basics we study is classifiers, these things can be complex as hell and also easy as watching Tom chasing Jerry on television. I have implemented the K-means with a simple NumPy library of python 3. It’s a good start for someone who is started to learn or teaching this classifier. No Oop used, just some function call which intern makes some more function calls. View the full code in my GitHub repository follow this link K-means notebook