David Aparicio

Students, learn to secure your PoCs with OAuth2-Proxy and Anubis

Sat, 06 Jun 2026 08:30:00 +0000

Secure your prototypes with OAuth2-Proxy and Anubis

Wed, 22 Apr 2026 08:30:00 +0000

Secure your prototypes with OAuth2-Proxy

Tue, 03 Feb 2026 08:30:00 +0000

Hacker News Coffee ☕

Wed, 31 Dec 2025 12:00:00 +0000

Secure your applications with DevSecOps

Tue, 02 Dec 2025 13:30:00 +0000

The scary story of DevSecOps (backup)

Fri, 21 Nov 2025 08:30:00 +0000

I have a namesake!!! 😨 Help please! 😱

Thu, 23 Oct 2025 17:50:00 +0000

Help please 😨! I have a namesake!!! 😱

Fri, 27 Jun 2025 14:00:00 +0000

Vibe Coding & Go (meetup)

Mon, 16 Jun 2025 08:30:00 +0000

1st prize at the Dust/Qonto AI agent hackathon

Fri, 11 Apr 2025 23:00:00 +0000

Team

Team 12 composed by: Simon Cleriot, Khaled Khebbeb, Jarek Ecke and David Aparicio.

Pitch

More information on the project and the hackathon Dust “AI agents hackathon winners, enhance your debating skills, AI agents in Ops, marketing, customer success and more”..

Final Demo

Starting at the timebox: 47:33

Interview

Kevin Straszburger (Dust): can you intro yourself?

I’m David Aparicio, Software Engineer graduated from INSA de Lyon and UNICAMP (Brazil). I have worked for Facebook on the MIT AppInventor project as a graduation project. I did a 2-year thesis where I discovered Docker, Kubernetes and DevOps. Then I worked for big players like AMADEUS (2 years) and OVHcloud (5 years). I’m now working as Senior DevSecOps at Sopht, the Green ITOps tool to reduce your IT carbon footprint.

Kevin: how did you hear about the hackathon? Was it your first one?

I didn’t count my hackathon participation, but I think I’m slowly approaching ten. My last prize was in 2014, at Facebook São Paulo, my team won an honorable mention for the project that used Facebook as a tool to find missing people.

what were your intentions when signing up?

First of all, so that I can get to grips with the major shift that is Artificial Intelligence. It’s probably as impactful a technology as the Internet was. And, of course, discover the features that Dust offers for using this technology. And last but not least, it’s a truly outstanding event, meeting exceptional people with extraordinary backgrounds and contagious energy. In a nutshell, I can only recall one memory: the hackathons at Facebook in the movie, the Social Network!

how would you describe your experience?

Before the quick but in-depth Alban Dumouilla’s presentation the same morning, I had no idea what Dust had to offer, given that there’s no trial offer (which is understandable, given the cost of the GPUs that run IAs).

can you describe -with your own words- what you built? (i plan on sharing your demo too, so people will also have access to your video)

Imagine a world where non-technical team members can seamlessly contribute to development projects without waiting for tickets to move into the sprint. Our Dust Agent bridges the gap between the two teams. Let’s break down the silos!

why did you decide to work on this?

This comes from an observation we’ve made in all the companies where we work. Non-tech people can’t develop, they don’t know our tools (like Cursor, Windsurf or Roo Code) so they have to create a ticket, wait, wait and wait for that ticket to leave the backlog to get into a sprint and try a quick resolution.

Let’s give them the means to help developers by communicating to the AI the changes to be made, the bugs to be resolved, so that the AI documents itself in the specifications, processes the request and creates a pull request that will be reviewed by a human developer. If the CI/CD pipeline performs well, all the tests will be carried out, and eventually an ephemeral environment will be available, to help the developer validate the resolution of the problem.

let’s get into the weeds shall we: walk us through your day/ your tech stack/ your demo. be as detailed as you want.

Not being familiar with the Dust tool, I started with Alban Dumouilla’s introductory workshop. After this galvanizing session, I was impressed and went back to my team (all of whom had been unaware of each other just a few hours earlier). Meanwhile, my team had debated the ideas, and only two remained. A very interesting topic, but impossible to finalize in less than six hours, and this second, promising topic, and an MVP may be born before the demo time runs out. An architecture diagram was quickly drawn up, with 4 major blocks. Each chooses its performance domain, in order to deliver as quickly as possible. Indeed, even if the AI models become high-performance, we still need to integrate the systems, resolve the remaining bugs and optimize the whole project (because AI often misses these performance optimization phases).

We were able to start integrating the project an hour and a half before the deadline, making the necessary changes and correcting the few bugs to get the system up and running. Only 35 minutes remained to prepare the demo and, above all, record it. And that’s when the stress suddenly mounts: it’s impossible to use Loom, so we quickly make a backup demo using Google Meet. Everything went smoothly, but Google never sent us the recording of the meeting… Only fifteen minutes to go, we’re looking for a Mac with basic screen recording and a high-performance headset. But it’s slow going, we have to edit the video and upload it to Youtube before we can hope to make the cut. The upload goes well, but the processing takes a long time. It’s as if other teams had the same idea… only a few minutes left… anxiety sets in… Will we be able to submit anything? Or have we done it all in vain… Video link sent, we’ll have to make the video modification as soon as possible! That’s it, it’s over, it’s time to enjoy the hackathon, have a drink and chat with the other participants… Phew, what a story! Ah, we got a notification, Google finally sent the recording.. Too late Mr Sundar Pichai!

with the benefit of insights, what would you do differently? (re: this project and your day at the hackathon)

Looking back, I think we were pretty efficient in less than six hours. I can only congratulate the other team members on this great achievement! Apart from the mishaps with the recording of the demo, which would be our major area for improvement (to avoid unnecessary stress). The other point could be, to iterate quickly, consider using technologies like Microsoft’s TinyGroups, N8N: an agent orchestrator (with MCP) or Manus.im to work with a team of developers, architects and AI designers.

how did this day change your perspective on AI?

The ease of the tool, a few weeks later, I had a company seminar with a three-hour workshop on AI, which I had to lead. In just a few dozen minutes, I had three professional use cases to demonstrate the value of AI: a technical documentation expert from Notion, an assistant who lists customer problems from Slack, and finally, an agent who summarizes what’s happened since we’ve been away from the office (very handy for retrieving important information after a company seminar in the French Alps). This enabled the startup’s employees to come up with ideas for the last remaining hour. Thank you Dust for this valuable hand!

what are you most excited about?

As Microsoft said at TechDays 2011, Computing is becoming ubiquitous: technology is everywhere, like electricity, we no longer wonder how the switch works, how electricity is produced and delivered to our homes. Computing and AI are becoming ubiquitous, but there will always be a need for computer engineers to understand and maintain these tools, infrastructures, and design tomorrow’s The ability to reduce time-space by accelerating our productivity, expanding our knowledge, mastering new technologies quickly, having an assistant, an expert at the ready, and the only limitation is that of our imagination. Can’t wait to embrace this new facet of computing. softwares.

any news/ links you’d wanna share?

I will improve the February AI Agent Hackathon project (maybe add a little bit of Dust.tt), more information coming in: https://www.newspresso.fr/ My website is : https://david.aparicio.eu, my LinkedIn profile: https://www.linkedin.com/in/davidaparicio1/ and finally @dadideo.bsky.social|X|framapiaf.org

Thank you for reading. If you notice an error or typo, please create an issue or MR/PR on the Gitlab file.

If you want to share your unlikely reasons, or leave a comment on Twitter.

Bugfixer (1st place Hackathon Dust AI Agent)

Fri, 11 Apr 2025 23:00:00 +0000

Groundbreaking demo showcasing our innovative AI agent, designed to streamline bug fixes and enhance productivity! 🚀

In this project, we dive into the capabilities of our AI agent, built during the Dust.tt/Quonto AI Agent Hackathon (11 April 2025). This agent is a game-changer for non-technical users like Project Managers (PMs) and Customer Success Managers (CSMs), empowering them to fix functional bugs without involving the engineering team.

Why This Matters:

Time-Saving: Reduce the workload on your engineering team.
Customer Satisfaction: Fix bugs faster and keep your customers happy.
Efficiency: Streamline your workflow and minimize frustration.

Join us on this journey as we make bug fixing smarter, faster, and more efficient. Stay tuned for more updates and innovations! 🌟

Technical Stack Details:

Smolagents
MCP (GitHub)
Python
Dust.tt API
Notion

Team12 composed by: Simon Cleriot, Khaled Khebbeb, Jarek Ecke & David Aparicio.

Project live demo

More information on my blog post or the Dust.tt newsletter.

Father Castor 🐻, tell us a Python story (meetup)

Thu, 13 Feb 2025 18:30:00 +0000

DevSecOps (meetup)

Thu, 12 Dec 2024 18:30:00 +0000

Gosec (meetup)

Tue, 03 Dec 2024 18:30:00 +0000

The scary story of DevSecOps

Thu, 17 Oct 2024 08:30:00 +0000

Darling, I've got "Blinky" our Prod

Thu, 04 Jul 2024 08:30:00 +0000

Return of the DevSecOps workshop

Thu, 04 Jul 2024 08:30:00 +0000

Organization of Tech&Wine

Tue, 18 Jun 2024 08:30:00 +0000

Ambari to Opsgenie

Mon, 29 Apr 2024 00:00:00 +0000

The project “ambari-to-opsgenie” is a Go server that forwards Ambari alerts to OpsGenie. It includes additional features such as integration with Blinky and xbar for MacOS. Users can customize configurations, crypted by SOPS/Age, and integrate it into their systems using specific commands provided in the repository. This open-source project is licensed under the MIT License. For more details, you can visit the repository here.

Install party, Workshop Security

Wed, 31 Jan 2024 08:30:00 +0000

WS Security, THE Install Party 🎉

Wed, 15 Nov 2023 08:00:00 +0000

Workshop Security, Install party 🎉

Thu, 12 Oct 2023 08:30:00 +0000

Organization of Cloud Alpes

Wed, 06 Sep 2023 08:30:00 +0000

Darling, I've got "Blinky" the Prod

Sat, 02 Sep 2023 08:30:00 +0000

WS Security, Install party 🎉

Wed, 12 Apr 2023 08:30:00 +0000

Migration to the cloud, myths and beliefs ☁️

Wed, 22 Mar 2023 18:30:00 +0000

URL Checker

Sat, 18 Mar 2023 00:00:00 +0000

CUC (English pronunciation: [cuc] / λευκός) is a very simple CLI tool to check various HTTP status for example if a webpage is available (200) or not found (404).

It’s delicious like a TUC (cracker), Biscuit of the French company LU, but with a C, for the Console.

Migration to the cloud, imminent departure! Myths and beliefs ☁️

Thu, 02 Feb 2023 16:00:00 +0000

WS Security, where to start? Install party 🎉

Thu, 19 Jan 2023 08:30:00 +0000

Take back control of your Bash!

Fri, 18 Nov 2022 08:00:00 +0000

Security at the early stage of the project

Thu, 13 Oct 2022 08:00:00 +0000

Father Castor 🐻, tell us some OPS stories (BBL)

Tue, 11 Oct 2022 12:45:00 +0000

Take back control of Bash by becoming a CLI ninja! (Dev community)

Fri, 30 Sep 2022 11:00:00 +0000

Secure by design

Fri, 09 Sep 2022 00:00:00 +0000

Namecheck

Wed, 31 Aug 2022 00:00:00 +0000

A very simple command line tool and server to check the availability of a nickname/handle on Twitter and GitHub. This toyproject is used for my demos at conferences like Security from the beginning of the design of a project as well as for the article Programmez! Hors série #8. This Go application is a fork of the opensource project of @jub0bs, also available on GitHub.

Discover OVHcloud with David, Data Ops

Mon, 11 Jul 2022 09:00:00 +0000

Fun fact, It was my first interview recording ;-)

Security at the start of the project

Thu, 30 Jun 2022 10:30:00 +0000

Father Castor 🐻, tell me some OPS stories

Tue, 28 Jun 2022 18:00:00 +0000

Security at the early stage

Mon, 27 Jun 2022 18:00:00 +0000

Take back control of your Bash by becoming a CLI ninja! (meetup)

Thu, 16 Jun 2022 19:00:00 +0000

Help 😨! I have a namesake!!! 😱

Thu, 09 Jun 2022 08:00:00 +0000

Take back control of Bash by becoming a CLI ninja! 😎

Wed, 25 May 2022 17:00:00 +0000

Feedback about DevoxxFR 2022 (Twitch)

Wed, 04 May 2022 19:00:00 +0000

Father Castor 🐻, tell us some OPS stories

Thu, 21 Apr 2022 09:00:00 +0000

Take back control of your Bash by becoming a CLI ninja! 😎

Wed, 20 Apr 2022 09:00:00 +0000

Libre Antenne of 01/04/2022

Fri, 01 Apr 2022 17:00:00 +0000

Father Castor 🐻, tell us a OPS story (Cloud Sud)

Thu, 24 Mar 2022 09:00:00 +0000

Live my life as an Ops

Thu, 17 Mar 2022 13:00:00 +0000

Father Castor 🐻, tell us a story (from OPS)

Wed, 02 Feb 2022 09:00:00 +0000

Father Castor 🐻, tell us a story about OPS

Fri, 21 Jan 2022 08:30:00 +0000

Interruption as a Sageness (DEVOPS D-DAY)

Thu, 18 Nov 2021 16:45:00 +0000

Security at the design stage (Cloud Est)

Fri, 22 Oct 2021 14:00:00 +0000

IaaS, Interruption as a Sageness (meetup)

Tue, 12 Oct 2021 18:30:00 +0000

Father Castor, tell us a OPS story (Cloud Nord)

Thu, 07 Oct 2021 14:30:00 +0000

Cloud Lego - Special Cloud Nord S01E01 (Twitch)

Thu, 07 Oct 2021 12:15:00 +0000

IaaS (Interruption as a Sageness)

Fri, 10 Sep 2021 11:25:00 +0000

5 Tips for submitting your first CFP

Wed, 04 Aug 2021 18:00:00 +0000

Fun fact, It was my first podcast recording ;-)

IaaS, talk only (no slides)

Fri, 02 Jul 2021 14:00:00 +0000

Edition spéciale “les pieds dans l’eau”

En raison du Covid, l’édition 2021 sera une édition spéciale sur un seul jour, en extérieur dans un lac privatisé, afin de garantir le strict respect des normes sanitaires.

Du coup, les deux tracks sur l’eau n’auront sans doute pas de slides, mais les orateurs auront des sujets vraiment passionants ! Changer de track en pédalant, à la nage ou à la rame, ça n’a pas de prix :)

Security at the project design stage

Tue, 17 Nov 2020 21:00:00 +0000

Security at the design stage (quickie)

Fri, 11 Sep 2020 12:20:00 +0000

Kerberos backup

Thu, 13 Feb 2020 19:20:00 +0000

This conference was given as a small version HumanTalks (10 min) (slides)

Security By Design

Tue, 11 Feb 2020 19:30:00 +0000

This conference was given as a big version GDG Cloud & Iot Lyon (1h) (slides) It was a proposal (accepted) for Sophia Security Camp 2019

Agilité et sécurité numériques, Cas concret avec la sauvegarde automatisée de Kerberos

Tue, 08 Oct 2019 18:00:00 +0000

Agilité et sécurité numériques: Cas concret avec la sauvegarde automatisée de Kerberos

David Aparicio

DevOps Cloud and Bigdata

3ème édition Sophia Security Camp (08 Octobre 2019)

Avant propos

L’ensemble de la présentation porte sur ma mission DevOps Bigdata ALTRAN chez AMADEUS

Les opinions sont les miennes et non les visions de mon ancien employeur, ni celles de mon employeur actuel

Disclaimer

David Aparicio

Double diplôme INSA de Lyon / UNICAMP (Brésil)

Facebook Open Academy / MIT AppInventor

2 ans à AMADEUS

Nouveau job à Lyon

Analogie

« Nul n’est censé ignorer la loi »

Ma devise

« Nul développeur n’est censé ignorer la sécurité »

Kerberos: kézako?

Source (EN): Kerberos pour les manageurs

Authentification | Autorisation

Cours (EN): 6.858 Fall 2014 Lecture 13: Kerberos

Contexte

Kerberos est un SPOF (Point individuel de défaillance)

Pas de ressource pour le rendre HA (Haute Disponibilité)

Vite fait & Bien fait

Où stocker la sauvegarde ?

HDFS alias Hadoop Distributed File System ?

Architecture générale

Résultat

Sécurité

Modèle de menace

Threat model

Single Source of Truth (SSOT)

Puppet Master avec la gestion des certificats

Documentation

Configuration optionnelle

Chaos Monkey

Quelques problèmes

Cluster sans Kerberos (MapR ticket)
Pas de 50/50
Temps de livraison
Sécurité ?
Accompagnement du Management

Conclusion

Infos à retenir

Security by design

Sécurité dans l’agilité

Pour aller plus loin:

Atelier d’analyse de risque
L’appréciation des risques

Merci

Questions ?

Keep in touch

Ceci fût ma 1ère présentation tech

david@aparicio.eu

Agility and Security, Case study with Kerberos automated backup

Tue, 08 Oct 2019 18:00:00 +0000

This conference at Sophia Security Camp 2019 was not given due to company change

But I did it at HumanTalks (10 min) and at GDG Lyon Meetup (1h)

Slides

Tue, 05 Feb 2019 00:00:00 +0000

Create slides in Markdown with Wowchemy

Wowchemy | Documentation

Features

Efficiently write slides in Markdown
3-in-1: Create, Present, and Publish your slides
Supports speaker notes
Mobile friendly slides

Controls

Next: Right Arrow or Space
Previous: Left Arrow
Start: Home
Finish: End
Overview: Esc
Speaker notes: S
Fullscreen: F
Zoom: Alt + Click
PDF Export: E

Code Highlighting

Inline code: variable

Code block:

porridge = "blueberry"
if porridge == "blueberry":
print("Eating...")

Math

In-line math: $x + y = z$

Block math:

$$ f\left( x \right) = ;\frac{{2\left( {x + 4} \right)\left( {x - 4} \right)}}{{\left( {x + 4} \right)\left( {x + 1} \right)}} $$

Fragments

Make content appear incrementally

{{% fragment %}} One {{% /fragment %}}
{{% fragment %}} **Two** {{% /fragment %}}
{{% fragment %}} Three {{% /fragment %}}

Press Space to play!

One **Two** Three

A fragment can accept two optional parameters:

class: use a custom style (requires definition in custom CSS)
weight: sets the order in which a fragment appears

Speaker Notes

Add speaker notes to your presentation

{{% speaker_note %}}
- Only the speaker can read these notes
- Press `S` key to view
{{% /speaker_note %}}

Press the S key to view the speaker notes!

Themes

black: Black background, white text, blue links (default)
white: White background, black text, blue links
league: Gray background, white text, blue links
beige: Beige background, dark text, brown links
sky: Blue background, thin dark text, blue links

night: Black background, thick white text, orange links
serif: Cappuccino background, gray text, brown links
simple: White background, black text, blue links
solarized: Cream-colored background, dark green text, blue links

Custom Slide

Customize the slide style and background

{{< slide background-image="/media/boards.jpg" >}}
{{< slide background-color="#0000FF" >}}
{{< slide class="my-style" >}}

Custom CSS Example

Let’s make headers navy colored.

Create assets/css/reveal_custom.css with:

.reveal section h1,
.reveal section h2,
.reveal section h3 {
color: navy;
}

Questions?

Ask

Documentation

Practical and verifiable secure multi-party computation for decentralized collaborative systems

Sun, 30 Apr 2017 00:00:00 +0000

Voivi

Mon, 27 Feb 2017 00:00:00 +0000

This multi-cloud project was created to put into practice SMPC (Secure Multiparty Computation) techniques, TOR (Onion Routing) network as well as privacy preservation mechanisms (Zero-trust) to test the hypotheses of the thesis. The application was used during the 2016 U.S. Presidential Debates by measuring in real time, all the tweets on the Twitter platform on the topic (analysis of topics/themes and favorable or unfavorable sentiment towards one of the candidates). During the second debate, in the space of 48 hours, the service processed 1.78 billion tweets, representing more than 15GB, spread across AWS/GCP/Azure/Heroku clouds. To handle this volume with little latency, an auto-scaling mechanism was implemented. Finally, I have scripted the deployment and execution in order to facilitate the DevOps method.

Technical Stack Details:

AWS, GCP, Azure and Heroku
Vert.X 3.3.3, with Hazelcast 3.7.2
Maven 3.5.1 and SLJF4j 1.7.21
JUnit 4.12, REST-assured 3.0, Assertj 3.5.1
JClouds 1.9.2
Kubernetes 1.14 (May 2019) and the first tests of Ubernetes (K8s Federation)
MongoDB 1.50.5
Stanford NLP 3.6

Nowadays, reputation systems are crucial for distributed applications in which users have to be made accountable for their actions, such as e-commerce websites or voting electronic. However, existing systems often disclose the identity of the raters, which might deter honest users from posting reviews, out of fear of retaliation from the ratees. While many privacy-preserving reputation systems have been proposed, none of them was at the same time truly decentralized, trustless, and suitable for real world usage in, for example, e-commerce applications. After discussing the weaknesses and shortcoming of existing solutions, we will present our own blockchain-based trustless reputation system, and analyze its correctness and the security guarantees it promises.[…]

A Study of Factors External to Software Transactional Memories that Affect their Speed-up

Sun, 06 Apr 2014 00:00:00 +0000