sysnotes

Computer vision, model training & systems administration

A running notebook. Mostly computer vision work, training and serving detection and segmentation models, with a side of the Windows and macOS admin that keeps the lab running. Code lives on GitHub.

Computer Vision

Training MaskDINO for instance segmentation

MaskDINO gives detection and instance masks from one transformer head, and on our defect data it beat a Mask R-CNN baseline once the dataset was clean. The config bits that actually mattered:

# start from the released COCO checkpoint, don't train the backbone from scratch
python train_net.py --num-gpus 1 `
  --config-file configs/maskdino_swinl.yaml `
  SOLVER.IMS_PER_BATCH 4 SOLVER.BASE_LR 1e-4 `
  SOLVER.MAX_ITER 40000 MODEL.WEIGHTS maskdino_swinl_coco.pth

Read the full note →

Posted 10 Jun 2026 · cv, maskdino, detectron2

Computer Vision / ML

GUIDE

Bootstrapping a dataset with SAM2

Letting SAM2 draft masks from rough boxes so annotators correct instead of draw, and turning masks into clean CVAT polygons.

24 Jun 2026
GUIDE

Training MaskDINO for instance segmentation

Registering COCO data, the config that mattered, and why label quality moved the metric more than any hyperparameter sweep.

10 Jun 2026
GUIDE

Serving CV models over gRPC

Keeping PyTorch out of the web backend: a thin gRPC inference service, PNG masks on the wire, and the gotchas that bite.

28 May 2026
NOTE

Ensembling YOLO, MaskDINO and SegFormer

Weighted boxes fusion over NMS, using a semantic map as a false-positive gate, and calibrating scores before you weight.

14 May 2026
NOTE

Geo-referencing detections from a GPS track

Interpolating position to frame time, fixing camera/GPS clock skew, and collapsing one defect seen across frames into one map point.

30 Apr 2026

macOS

GUIDE

Binding macOS to Active Directory

Using dsconfigad for domain join, mobile accounts and forced homedir, plus why you should set a computer OU up front.

28 Jun 2026
NOTE

Trusting an internal CA in the System keychain

security add-trusted-cert from the command line, and doing it at scale with a configuration profile instead.

15 Jun 2026
GUIDE

Config profiles: FileVault, Wi-Fi and SCEP

Building .mobileconfig payloads by hand vs. MDM, and getting SCEP enrollment to actually work with ADCS.

2 Jun 2026
GUIDE

Create and link a GPO from PowerShell

New-GPO, Set-GPRegistryValue and New-GPLink so you stop clicking through GPMC for repeatable changes.

20 May 2026
NOTE

Fine-grained password policies (PSO)

Applying stricter password rules to admins only with a Password Settings Object, and how precedence is resolved.

6 May 2026
GUIDE

Delegating helpdesk password resets

Scoping "reset password" and "unlock account" to a single OU with the Delegation of Control wizard and dsacls.

19 Apr 2026

Windows PKI / Certificate Services

GUIDE

Building a two-tier PKI: root + issuing CA

Keeping the root offline, publishing it into AD, and why the CDP/AIA URLs have to be right before you issue anything.

12 Jul 2026
GUIDE

Publish a template + auto-enrollment via GPO

Duplicating a template, setting enroll permissions, publishing on the CA and turning on autoenrollment in a GPO.

3 Apr 2026
NOTE

CRL and AIA distribution points done right

Pointing CDP/AIA at HTTP, why LDAP-only bites non-domain clients, and testing with certutil -verify.

18 Mar 2026