🤖 Mickael Vest
Fontainebleau, Île-de-France, France
943 followers
500+ connections
About
Passionate and versatile, I'm curious and eager to learn. I'm always looking for…
Services
Experience
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Languages
-
French
Native or bilingual proficiency
-
English
Native or bilingual proficiency
-
Spanish
Limited working proficiency
Other similar profiles
Explore more posts
-
Michele Chubirka
(QR) Coding My Way Out of Here: C2 in Browser Isolation Environments https://ift.tt/kKWRBbj Written by: Thibault Van Geluwe de Berlaere Executive Summary Browser isolation is a security technology where web browsing activity is separated from the user's local device by running the browser in a secure environment, such as a cloud server or a virtual machine, and then streaming the visual content to the user's device. Browser isolation is often used by organizations to combat phishing threats, protect the device from browser-delivered attacks, and deter typical command-and-control (C2 or C&C) tactics used by attackers. In this blog post, Mandiant demonstrates a novel technique that can be used to circumvent all three current types of browser isolation (remote, on-premises, and local) for the purpose of controlling a malicious implant via C2. Mandiant shows how attackers can use machine-readable QR codes to send commands from an attacker-controlled server to a victim device. Background on Browser Isolation The great folks at SpecterOps released a blog post earlier this year on browser isolation and how penetration testers and red team operators may work around browser isolation scenarios for ingress tool transfer, egress data transfer, and general bypass techniques. In summary, browser isolation protects users from web-based attacks by sandboxing the web browser in a secure environment (either local or remote) and streaming the visual content back to the user’s local browser. The experience is (ideally) fully transparent to the end user. According to most documentation, three types of browser isolation exist: Remote browser isolation (RBI), the most secure and the most common variant, sandboxes the browser in a cloud-based environment. On-premises browser isolation is similar to RBI but runs the sandboxed browser on-premises. The advantage of this approach is that on-premises web-based applications can be accessed without requiring complex cloud-to-on-premises connectivity. Local browser isolation, or client-side browser isolation, runs the sandboxed browser in a local containerized or virtual machine environment ( e.g., Docker or Windows Sandbox). The remote browser handles everything from page rendering to executing JavaScript. Only the visual appearance of the web page is sent back to the user’s local browser (a stream of pixels). Keypresses and clicks in the local browser are forwarded to the remote browser, allowing the user to interact with the web application. Organizations often use proxies to ensure all web traffic is served through the browser isolation technology, thereby limiting egress network traffic and restricting an attacker’s ability to bypass the browser isolation. SpecterOps detailed some of the challenges that offensive security professionals face when operating in browser isolation environments. They document possible approaches on how to circumvent browser isolation by abusing misconfigurations,...
-
Henrik Høegh
Why you are most likely using Helm wrong when using it in a #GitOps setup What I see a lot of companies who use #Helm do, is to define the version (or tag) of the #docker image in the actual helm chart. Some hardcode it in the #template file, others in the default values.yaml file. And then when they need to release their software component, they create a new release of their Helm chart before releasing their software component. This mean that you have to make a change in two repositories. You'll need a new release of your Helm chart and one of your service. This is wrong in so many ways. If you are using #Flux you produce a #HelmRelease file. This file containers a reference to whatever value file in the chart you want to use as your default values, and you can add your own values that overload the default values. Your helm chart should only have a new release if there are changes to the actual templating part. In this section you can define the image tag / version. Like this :
4 Comments -
Luca Mezzalira
During the Global Software Architecture Summit of this year I delivered a talk about micro-frontends, probably the most popular topic I discussed in recent years. In this session, I delve into the common anti-patterns I've encountered over my 9 years of experience implementing and consulting for companies worldwide on their journey into micro-frontends architecture. What are micro-frontends? #Microfrontends are transforming the way we approach user interface development by enabling autonomous teams, improving scalability, and allowing for greater technology flexibility. However, with these advantages come challenges. In my talk, I discuss how to properly structure your micro-frontends architecture and share insights from the trenches on avoiding common mistakes that can hinder your progress. WATCH THE TALK: https://lnkd.in/exgZRFqd #frontend #web #javascript #js #cloud #patterns #architecture
3 Comments -
CodeCorp .
🚀 𝗡𝗲𝘄 𝗩𝗶𝗱𝗲𝗼 𝗔𝗹𝗲𝗿𝘁! 🚀 I'm happy to share the third video in our series on building Spring Boot APIs from scratch! This video is crucial for anyone looking to connect their Spring Boot application to a MySQL database. Whether you're a beginner or an experienced developer, this tutorial will help you build robust, data-driven applications. 𝗜𝗻 𝘁𝗵𝗶𝘀 𝘁𝗵𝗶𝗿𝗱 𝘃𝗶𝗱𝗲𝗼, 𝘄𝗲 𝗰𝗼𝘃𝗲𝗿: 1. Setting up MySQL database 2. Adding MySQL dependency to your Spring Boot project 3. Configuring database connection in application.properties 4. Creating a JPA entity and repository 5. Testing the database connection 𝗪𝗵𝗼 𝗦𝗵𝗼𝘂𝗹𝗱 𝗪𝗮𝘁𝗰𝗵: 1. Beginners looking to get started with Spring Boot and databases 2. Java developers wanting to enhance their skills 3. Anyone interested in building robust, data-driven applications Join me as we dive deeper into the world of Spring Boot and learn how to seamlessly integrate with MySQL! 📽️ Watch the third video here: https://lnkd.in/g-2wPfFd Contact Us: Instagram: @entercodecorp Telegram: https://t.me/C0deCorp Don't forget to like, comment, and subscribe to stay updated on the latest videos! #SpringBoot #Java #APIDevelopment #MySQL #Database #JavaProgramming #WebDevelopment #Coding #SoftwareDevelopment #TechEducation #LearnJava #ProgrammingTutorial #TechTutorial #API #Developer #SpringFramework
-
César Soto Valero
I've been a heavy user of Unix-based OS distros for quite some time. But recently, I came back to using Windows on a daily basis (the last time for me was during the XP era). There's one thing I really miss though: my bash terminal 😭 ! But with a bit of effort, I've managed to recreate a similar terminal experience on Windows. 💻✨. I wrote a blog post detailing the tools I use to bring my (much-loved) macOS terminal customizations to Windows. Here's the rundown: 🔧 Using WSL and Scoop 🔧 Getting a nicer Windows Terminal app 🔧 Enhancing PowerShell with a custom profile 🔧 Setting up Oh My Posh 🔧 Customizing with better fonts and icons These small tweaks have made me a (somewhat) happier Windows user. There is always hope folks 😊. #productivity #operativesystems #windows
2 Comments -
Gonzalo Vásquez Sáez
Performance-wise, the new protocol has reduced dataplane latency by 11% on average, and by 17.4% at the P90 mark. In addition to making SQS itself more performant, this change benefits services that build on SQS as well. For example, messages sent through Amazon Simple Notification Service (Amazon SNS) now spend 10% less time “inside” before being delivered. Finally, due to the protocol change, the existing fleet of SQS hosts (a mix of X86 and Graviton-powered instances) can now handle 17.8% more requests than before. #AWS #AmazonWebServices #AWSBlogs #Cloud #CloudComputing #Serverless #SQS
-
Ansuman Satapathy
I read the CAG(Cache-Augmented Generation) vs RAG and trying to understand it a bit deeper. How is it different from the below: Gemini Flash/Pro (already having a large context size) and enabling Context Caching on it ? This can also be further strengthened by storing the input/output in Redis and using Sematic Caching from Redis VL
-
Olivier Mertens
🔥 New model #Azure Open Ai Service ! gpt-4-turbo-2024-04-09 in GA ( AVAILABLE) ( yeah when you can make a name shorter...) gpt-4-turbo-2024-04-09 will replace: ✅gpt-4-1106-preview ✅gpt-4-0125-preview ✅gpt-4-vision-preview So one model multimodal with all capabilities from vision ( accept images and text ) and the last updates for the turbo model ✅ Avaibility : gpt-4-turbo-2024-04-09 in Sweden Central and East US 2 ( currently) ✅ Quota : Same as GPT-4 Turbo ( so 150K TPM regional limit see the capture ) ✅ You can select the version in the region ou you have a Azure open Ai capability with selecting the correct rev ( see the capture ) 🙋♂️ Json and function will be available in the coming weeks 🙋♂️Optical Character Recognition (OCR), object grounding, video prompts, and "Azure OpenAI Service on your data with images", integrated with the gpt-4-vision-preview model will not be available with the GA Do you want to deepdive ? https://lnkd.in/g4NBVGJE Quota by region : https://lnkd.in/gUMqgs_6 Pricing token :https://lnkd.in/gTRFDgj8 #Azure #Azure Open Ai Service #Microsoft #LLM #Vision #GPT4 #GA
4 Comments -
Yogesh Yadav
🏅 JavaScript project a Stunning Paris Olympic 2024 Medals Dashboard with JavaScript! It is live now : https://lnkd.in/g_WyuXs3 Every week I will upload a new project. 👍🏻you can join here. 👉🏻 https://lnkd.in/gCmEFiSr In this project, you'll learn to: Fetch live data from the official Olympic API using async and await Create dynamic HTML elements to display data in both table and card views Implement powerful search and sort functionalities to quickly find and organize medal information by country Toggle between table and card views with seamless transitions Bind events effectively for a smooth user experience Whether you're a beginner or looking to sharpen your JavaScript skills, this tutorial has something for everyone. Let's build something amazing together! 🌟 Don't miss out—hit start coding! 💻 #javascript #javascriptdeveloper #javascriptdeveloper #javascripttutorial #javascripttutorial
-
Paramesh Gunasekaran
Why is software architecture hard? Because you can never solve an architecture problem for forever. Because everything in architecture comes as a tradeoff. Because you need to analyse tradeoffs for your situation than to develop a perfect solution. For example: You can always ask Google or ChatGPT on how to develop a library/service in your preferred language of choice. But you can never ask and get a correct answer if you have to develop common functions as a service or library for your microservices. Why? Because it always depends! Programming issues can be fixed with knowledge. But architecture warrants wisdom. This makes architecture issues much harder to pinpoint and rectify. Always try to find the least regretful decision than an eternally right decision. “Don’t try to find the best design in software architecture; instead, strive for the least worst combination of trade-offs.” - Neal Ford and Mark Richards #SoftwareArchitecture #Software #ArchitectureTradeoffs
-
Yves Godart
Hi, I released the 0.3.3 version of psCandy, the eye-candy module for powershell scripts (who says powershell scripts have to be boring ?) This version includes several functions improvements such as visual color selectors, usage of 8 bits and 16 bits colors tags, multiline output (with or without borders), ....... The base classes have also been improved an optimized (especially [List]). https://lnkd.in/eiaDyVgF Docs and examples are also gtowing and improving.
2 Comments
Explore collaborative articles
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
Explore More