Cédric's website

Running My First Half Marathon

Fri, 20 Feb 2026 00:00:00 +0000

Dear happy readers and runners,

I’m running the ING Night Marathon Luxembourg (half marathon) on 16 May 2026. It will be my first half marathon and I’m excited — and a little nervous.

I’ve been working on becoming a better runner since around 2016. Over the years I made steady efforts: short, regular runs, slowly increasing my long-run distance, learning to pace myself, and prioritising recovery (especially this point 🙃). It hasn’t always been linear — there were busy periods and slow months — but I really feel I’ve evolved since those early years. Today I have more endurance, better pacing, and a calmer mindset on race day, and this half marathon feels like a milestone for that long-term progress — though it’s only one step. Finally, I genuinely enjoy running — I no longer have to force myself to go for a run. I’m still in good shape: no knee pain, no history of serious injuries, and overall I feel better than I did ten years ago. I usually run routes with a lot of elevation (250–320 m for 10 km) and almost always run in the woods or out in nature, mostly on the same trails close to where I live. They’re beautiful runs, and I absolutely always run with music; here’s my evolving playlist.

My goal for the day is simple: just finish the race alive. I’m not following a strict training plan; I run whenever I can — often in the rain and, lately, in the cold, whether in the morning or the evening.

If you’d like to follow my training or send encouragement, you can find me on Strava — your kudos truly help on long runs. They’re my fuel!

If you’re running the race too, please say hello — I’d love to meet on the start line. And if you have race-day tips (clothing, pacing, nutrition), I’m all ears.

Thanks for the support — wish me luck! 🏃‍♂️✨

RSS Feeds With a Fresh Coat of XSLT

Mon, 18 Aug 2025 00:00:00 +0000

Yes, it’s 2025, and I’m still happily using RSS. Not only that. I’ve just gone and added an XSLT stylesheet to my blog’s feed: https://www.cedricbonhomme.org/blog/index.xml.

Why? Because why not.

For most people, an RSS feed is just raw XML that either:

Opens in a newsreader (if you’re one of the enlightened few), or
Looks like incomprehensible angle-bracket soup in the browser.

With XSLT styling, the second group of people at least gets a pretty preview instead of a wall of tags. Think of it as putting lipstick on an XML pig. Except this pig now has a decent font, some CSS, and a “Visit Website →” button. 🐷✨

The Retro Charm

There’s something delightfully anachronistic about it. Everyone is busy chasing the latest AI-powered social streams, and I’m here polishing my RSS feed with technology that first appeared around the time flip phones were cool. With my cup of tea.

It’s like maintaining a vinyl collection in the age of streaming.

How It Works

The trick is simple:

Add an XML stylesheet declaration at the top of your feed.
Serve it with the right header.
Write some XSLT and CSS to make it look decent.

Voilà, your feed is no longer a sad text dump. It’s a mini landing page.

The Hugo template for my feed now includes an XML declaration and a reference to the XSLT stylesheet:

{{- printf "<?xml version=\"1.0\" encoding=\"utf-8\" standalone=\"yes\"?>" | safeHTML }}
{{- printf "<?xml-stylesheet href=%q type=\"text/xsl\"?>" ("style.xsl" | relLangURL) | safeHTML }}

The stylesheet itself lives at style.xsl.

Why Bother?

Because RSS is still awesome. It’s decentralized, private, and doesn’t shove ads or tracking down your throat. And now, if a curious visitor stumbles on my feed, they’ll see something friendly instead of a developer-only artifact.

So, if you’re also clinging lovingly to RSS in 2025:

Subscribe to my blog via your favorite newsreader.
Or just admire the shiny styled feed in your browser.

Long live RSS. Long live XSLT. Long live Newspipe!

Stegano 2.0.0 released

Sun, 22 Jun 2025 00:00:00 +0000

I’m pleased to announce the release of Stegano 2.0.0!

After a series of minor releases, the Stegano project reaches a new milestone with a great new feature.

Notable changes

Hide and reveal messages in PCM encoded .wav files. Your secrets now have a soundtrack!

The command line interface has been updated to let you use this new feature directly from your shell. It’s quite convenient if you install Stegano using pipx.

Other minor changes

Improved type annotations.
Updated dependencies.

Stegano is a pure Python steganography library designed to make hiding messages in plain sight easy and educational. Whether you’re experimenting or building something more serious.

Check it out or contribute: https://github.com/cedricbonhomme/Stegano

Documentation: https://stegano.readthedocs.io

Install from Pypi: https://pypi.org/project/stegano

Thank you to all contributors who helped make this happen!

Newspipe 11.1.0 released

Sun, 17 Nov 2024 20:57:24 +0000

I’m pleased to announce the release of Newspipe 11.1.0, introducing several enhancements to improve your experience.

New Features

Dynamic Content Loading: The homepage now loads article content only when it becomes visible, optimizing performance and reducing initial load times.
Security Advisory Detection: A new command identifies various security advisories—such as CVEs, GHSAs, PySec, and CSAF reports—within articles from specified categories. The extracted data is automatically transmitted to the Vulnerability-Lookup API as sightings.
Feed Collections: You can now view collections of feeds without requiring a user identifier, making feed management more flexible.

Improvements

LDAP Documentation: Enhanced for easier configuration and understanding.
Theme Enhancements: Various improvements to the dark and light themes for a smoother visual experience.
Main Page Refinements: Numerous updates to optimize and refine the main page layout and usability.
Icon Update: All icons have been updated, and unnecessary ones removed, for a cleaner interface.
CSRF Protection: Enabled globally to enhance security.
Dependencies Update: Python and JavaScript dependencies have been updated to their latest versions.
Translations: French translations have been updated.
Smooth Theme Switching: Enhanced light/dark theme transitions for a flicker-free experience.

As Newspipe approaches its 15th anniversary, I invite you to explore the latest version.
You can find the project on GitHub: https://github.com/cedricbonhomme/newspipe.
If you find it useful, please consider starring the repository—it truly helps!

Thank you for your continued support and feedback over the years.

My default apps at the end of 2023

Wed, 08 Nov 2023 20:35:00 +0000

As the end of the year approaches, numerous trendsetting individuals are sharing their curated list of preferred tools on their blogs. Embracing the spirit of this trend, I present my own selection. Without further ado:

📨 Mail Service: AlwaysData
📮 Mail Client: Kmail and Nextcloud - Mail
📝 Notes: Nextcloud - Notes
📆 Calendar: Kalendar and Nextcloud (both synchronized with aKonadi)
🙍🏻‍♂️ Contacts: Kontact and Nextcloud (both synchronized with aKonadi)
📖 RSS Service: Newspipe
🗞️ RSS Client: Newspipe
⌨️ Launcher: Kickoff (the KDE launcher)
☁️ Cloud storage: Nextcloud
🌅 Photo library: Piwigo and DigiKam
🌐 Web Browser: Firefox
💬 Chat: Matrix, Mattermost, Signal, IRC and WhatsApp
🔖 Bookmarks: Newspipe
📚 Reading: Real books and LibraryThing in order to keep track of my books
📜 Word Processing: LaTeX and LibreOffice
📈 Spreadsheets: LibreOffice
📊 Presentations: LaTeX and LibreOffice
🛒 Shopping Lists: Nextcloud - Notes
🎵 Music: Spotify, Qobuz and my upright piano (Oops, the last one is not an app 😉)
🔐 Password Management: pass (the standard unix password manager)
🤦‍♂️ Social Media: Mastodon
🔎 Search: DuckDuckGo and Google
🧮 Code Editor: VSCodium, Kate and Vim

Am I cool?

Post-scriptum: Robb Knight is maintaining a list of people who are joining in.

Newspipe 10.0.0

Wed, 08 Nov 2023 20:05:00 +0000

I am thrilled to announce the release of Newspipe version 10.0.0, a project I started working on over 13 years ago!

The standout addition in this release is the ldap-auth support, along with a host of other notable improvements. And small bug fixes. For a detailed list of changes, please refer to the changelog.

Newspipe continues to uphold its user-friendly and streamlined design maintaining its core simplicity. Personally, I have relied on this tool for over a decade, putting it through its paces with various technologies and features.

Your contributions are highly welcome! Whether it’s code improvements, feature suggestions, or reports on any unexpected behavior. Remember: a surprised user is a happy user!

pyHIDS 0.8.0

Fri, 06 Oct 2023 10:50:45 +0000

The new version of pyHIDS offers the integration of MISP and of YARA.

A MISP server can be queried in order to find potentially malicious files from the checksums in the database of pyHIDS.
The YARA module allows you to provide a set of YARA rules to apply to the monitoried files.

As a reminder, a recent previous version of pyHIDS introduced the integration of Hashlookup and of Pandora.

To be honest, I’m pretty happy with this new version.

Of course, you are invited to submit your ideas of new features!

pyHIDS 0.6.1

Fri, 04 Aug 2023 09:00:00 +0000

The new version of pyHIDS features the integration of Hashlookup and Pandora.

You can install it from Pypi, for example with pipx:

$ pipx install pyHIDS
$ export PYHIDS_CONFIG=~/.pyHIDS/conf.cfg

Example of usage:

$ pyhids gen-keys --size 2048
Generating 2048 bits RSA keys ...
Dumping Keys
Done.

$ pyhids gen-base --sign
Generating database...
2427 files in the database.

$ pyhids run --check-signature
Verifying the integrity of the base of hashes...
Database integrity verified.
Verifying the integrity of the files...

If you want to check the database of hashes against Hashlookup and Pandora for known malicious files:

$ pyhids hashlookup

$ pyhids pandora

École de Musique Associative du Val Sierckois

Mon, 08 Aug 2022 11:56:58 +0200

Une fois n’est pas coutume, ce billet est une petite publicité pour la jeune École de Musique Associative du Val Sierckois, basée à Sierck-Les-Bains. C’est une super école ;-)

Si vous êtes du secteur et avez envie d’apprendre la musique, n’hésitez pas. Les inscriptions sont ouvertes.

Back from holidays… and with new photos !

Mon, 01 Aug 2022 18:52:02 +0200

We are back from our 2 weeks trip in South West of France. It was really nice. I just got back to my normal life today with various work related stuff to deal with. It’s also nice ;-) But this post is to tell you about the holidays of course. So let’s start.

We visited many places and drove approximately 3000 km by car. Towards Spain. This year, the Mazda worked perfectly, no technical problems (so it was not 6 months in the garage for nothing). We consumed an average of 5.9 liters of fuel per 100 km. That’s really good. But I admit that it requires a disciplined driving (it’s a 175 hp engine…). I am still convinced to keep this car forever.

We also cycled. Around 60 km. Not that much. But with two young children, it was enough. For me without electric assistance and Élisabeth behind me on the same bike (plus various stuff). Luckily there was very little elevation. It was on an isle. The bike was not ideal, a basic rental bike… And oh my god, my ass was hurting. I can tell you that at the end of the day, you know what butt pain is. An issue you won’t have in a Mazda 6 ;-)

We walked a lot as well. I climbed the Puy de Sancy to the top (1885 meter) with Elliot, the camera on my shoulders (proof 1) and my Converse shoes (proof 2). It was not really difficult to be honest. Maybe a bit more harder when close to the end. About the Converse, I am not kidding. In the morning, they asked me if I had anything else. If you know me well, you know the answer. I travel light…

Last but not least, it was a good photo opportunity. I had little time for photography lately. I would like to share with you some of my favorite photos. For this purpose I created several albums dedicated to this trip on my Piwigo instance:

Almost all photos are geotagged. You can have a look at the map.

A “now” page

Thu, 12 May 2022 14:59:05 +0200

Since the month of March there is now page on this website. You may have noticed it. I added it after the migration from WordPress.

Most websites have a link that says “about” or “contact”. People also use micro-blogging services to provide various kind of updates to their relatives (or followers). A now page tells you what a person is focused on, at some point in their life. Think of what you’d tell a friend you hadn’t seen in a year. It’s the main goal.

So I like the idea of this page. Not convinced ? See why you could make one.

Just in case you are wondering, I am Currently not interested in a “Uses” page.

Freshermeat 0.8.1

Tue, 10 May 2022 23:42:17 +0200

I’ve recently released Freshermeat 0.8.1 and Freshermeat 0.8.0, which contains bug fixes, some backend improvements (especially for the CVE fetcher) and a brand new API based on the Flask-RESTX library. Migrating to the new API was a lot of work.

The only known service based on Freshermeat is available here and is dedicated to open source security projects. Do not hesitate to submit your project. I operate this instance.

An OpenAPI Specification of the API is available. You can play with it.

For more details you can read the release notes here and here.

That’s all for now!

A new family member

Fri, 15 Apr 2022 00:02:42 +0200

We welcome a new family member in our house. It’s a baby. Just like 7 years ago.

Even though I can play a little with it, it’s Élisabeth’s double bass and she is already way better than me.

Until recently, she could only practice with the one of the music school. I find it a little amusing to see a 7 year old child with an instrument of this size. A 1/8 bass… Long live!

And happy birthday Élisabeth !

ActivityPub

Mon, 21 Mar 2022 21:07:48 +0100

This is what I love with ActivityPub and the Fediverse: the federation.
It’s really cool. Everything is connected and pretty fast.

You can post an activity somewhere (for example a photo on PixelFed or video on PeerTube), share it on Mastodon. You get a comment about this activity somewhere else. And you can reply to this comment from another place.

By the way, you should really consider trying Pixelfed. It’s a really nice community and Pixelfed is a great piece of software. No ads, no “algorithm”, no NFT. No bullshit.

Same for the Fosstodon community. Not too small, not too big. People are really great. Admins are awesome (this is why I already decided to help them financially). Thank you guys ! You are like friends.

With the Fediverse it’s easy to build a cozy community around a topic (of course communities are connected, they are not islands). A community is moderated by humans, and not strangers. You can discuss with them. It’s even really easy to contact the developers, for example Gargron or dansup. They are really nice. Thank you !

Hello Hugo !

Sat, 19 Mar 2022 00:03:41 +0100

You may have noticed some turbulence recently here. Especially in the RSS stream. It will now calm down, promised. What happened ?

After 14 years rolling with WordPress, I’ve finally decided to change for a static website. It is generated with Hugo. I was thinking about this for some time.

The new address is https://www.cedricbonhomme.org and the feed for your aggregator is available at https://www.cedricbonhomme.org/blog/index.xml.
Please, update your bookmarks! Else you will miss a lot of awesome posts ;-)

Articles from the database of WordPress are now stored in simple Markdown files. All original articles are available on this brand new blog. In addition, I took care to not break previous URIs: example. You know, Cool URIs don’t change.

The migration from WordPress to Hugo was very easy thanks to a WordPress plugin. Despite the fact that I had to manually fix a lot of internal links between the articles and links to pictures (yes, I managed to recover all resources: pictures and various files). The work is not finished yet, but the current state is pretty good.

I like to write new posts in a simple local text editor. The WYSIWYG editor of WordPress was becoming a pain for me. Since the last three years, to be honest.
It is now even easier to paste snippets of code. The rendering is pretty decent.
The templates used by the theme are very clean and easy to customize for somebody like me. I already made two contributions (one fix and one feature) for this theme. I plan to make other pull requests.
I also discovered the shortcodes, a really nice Hugo feature.

Another reason is Git. The versioning of the content, decentralized backup and simple deployment. I can just push new articles over SSH or use a deployment workflow (for the time being I am using a Makefile…).

The simplicity of static websites is another important point. No database, no PHP and no PHP extensions. It’s really fast. Fast to build, for me. Fast to be displayed for the readers, you.
No more login screen to a dashboard. No more HTML forms. No password, no two factor authentication, no user account.

I won’t argue with the traditional “WordPress is not secure” thing. It’s bullshit. The WordPress community is big, dynamic and reactive with security issues. But, there are people who should not manage a website.

Finally, I’m very happy with this decision. I am sure it won’t be re-migrated to WordPress in a few years.

Python en tête

Wed, 16 Mar 2022 22:31:52 +0100

Je le savais. Depuis maintenant 11 ans. Le temps passe vite.

Python est finalement en tête du classement TIOBE. Enfin ! Mais la chose la plus marquante est que c’est la première fois depuis 20 ans que le langage C n’est plus en première position. Actuellement, la tendance pour Python est toujours à la hausse.

Je crois que j’ai commencé à utiliser Python en 2006 avec le livre Dive Into Python de Mark Pilgrim. Depuis, j’ai lu beaucoup d’autres livres et utilisé ce langage pour faire un tas de choses: divers scripts, Web, cryptographie, stéganographie, jeux, domotique, parcours de graphes, visualisation, crawlers, statistiques, systèmes multi-agents ;-) Et j’en passe.

Cette page regroupe quelques-uns de mes projets notables et toujours maintenus. Je fais même du Python ailleurs. Merci Drew !

Zoom-Zoom Resurrection

Thu, 17 Feb 2022 10:07:52 +0100

Pratiquement 6 mois. Enfin ! Après presque 6 mois au garage je peux enfin sereinement annoncer qu’elle est de retour et, il semble, en pleine forme.

Alors pourquoi 6 mois ? Ce serait trop long de tout expliquer dans les détails. Le moteur a été démonté presque intégralement à 3 reprises. L’opération initiale (changement du joint de culasse et resurfaçage de la culasse) a été réalisée en Septembre. Pour faire simple, disons que suite à certaines erreurs humaines de plus gros problèmes sont survenus… Le moteur ne fonctionnait pratiquement plus.

À dire vrai, je ne connais même pas clairement l’explication de tout ces soucis. Personne en fait. Et pour je ne sais qu’elle raison, à aucun moment j’ai douté que je pourrai à nouveau la conduire.

Je ne blâme pas du tout le garage. Pendant toute la durée j’avais une voiture de courtoisie et donc aucune pression.

Bref, en route vers les 300.000 km au compteur!

Elliot Playing Piano

Thu, 17 Feb 2022 00:06:46 +0100

I can’t wait making music with my children. Élisabeth recently started to learn double bass. It’s really cool. But I guess I must be patient.

IP-Link – Twelve years after

Thu, 27 Jan 2022 22:28:45 +0000

It is now about twelve years that I maintain IP-Link. No big new features since recently but the code is still working well, evolving and using up-to-date libraries. Even better, I am now using Pypacker for the parsing of the network captures. Its a quite a cool improvement. The parsing is way faster than before, like wayyyyyy faster!

The picture above represents approximately five minutes of a classical network activity of my desktop computer just after I turn it on. Some IRC, XMPP, Web browsing, email checking, RSS fetching, etc.

You can try with the simple example from the README file:

$ mkdir captures data
$ sudo tcpdump -p -i eth0 -s 0 -w captures/snif.pcap
$ ip-link/pcap_to_object.py -i captures/snif.pcap -o data/dic.pyobj
$ ip-link/object_to_graphviz.py -i ./data/dic.pyobj
$ dot -Tpng -o ./data/graphviz.png ./data/ip.dot

Before, you will have to install few dependencies. This can be achieved easily with Poetry. Everything is explained in the README file (RTFM, please ;-). The whole thing is also a lot easier to install. It was not the case at all when i started this project.

If you care, more details below about my PCAP analysis.

$ mkdir captures data

(ip-link-862Mi5xF-py3.10) cedric@numero5:~/git/IP-Link$ sudo tcpdump -p -i enp5s0 -s 0 -w captures/snif.pcap
&#91;sudo] password for cedric: 
tcpdump: listening on enp5s0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
^C126799 packets captured
126804 packets received by filter
0 packets dropped by kernel

(ip-link-862Mi5xF-py3.10) cedric@numero5:~/git/IP-Link$ ls -lh captures/
total 154M
-rw-r--r-- 1 tcpdump tcpdump 154M janv. 27 22:57 snif.pcap
(ip-link-862Mi5xF-py3.10) cedric@numero5:~/git/IP-Link$ 
(ip-link-862Mi5xF-py3.10) cedric@numero5:~/git/IP-Link$ 
(ip-link-862Mi5xF-py3.10) cedric@numero5:~/git/IP-Link$ time ip-link/pcap_to_object.py -i captures/snif.pcap -o data/dic.pyobj
WARNING (<module>): Couldn't load netifaces, some utils won't work
Reading pcap file…
Serialization…

real    0m4,074s
user    0m3,978s
sys     0m0,097s

(ip-link-862Mi5xF-py3.10) cedric@numero5:~/git/IP-Link$ time ip-link/object_to_graphviz.py -i ./data/dic.pyobj
Loading dictionary…
Creating GraphViz DOT file…
Writting file.

real    0m0,044s
user    0m0,040s
sys     0m0,004s

(ip-link-862Mi5xF-py3.10) cedric@numero5:~/git/IP-Link$ dot -Tpng -o ./data/graphviz.png ./data/ip.dot

(ip-link-862Mi5xF-py3.10) cedric@numero5:~/git/IP-Link$ xdg-open ./data/graphviz.png &
&#91;1] 20321
&#91;1]+  Done                    xdg-open ./data/graphviz.png

And now just for the pleasure, an other visualization. A Chord diagram generated with IP-Link and Circos:

Shi-Tomashi corner generator available in Stegano

Mon, 29 Nov 2021 22:26:31 +0000

The new release of Stegano, v0.10.0, comes with the Shi-Tomashi corner generator.

You will find more information about this release here and a simple example of usage here.