System Architect · Security Researcher · Photographer
Morteza
Bahmani
Independent creator exploring the intersection of security, infrastructure, and digital craft. Building at Internet Labs.
Blog
Recent writings on security, infrastructure, and the open web
Myth: SSH Agent Forwarding Is a Safe Bastion Pattern
Passing your local SSH keys through jump hosts with agent forwarding exposes your private identity to any compromised ba…
The Evolution of Large-Scale MySQL Batch Mutations
How engineering teams transitioned from locking UPDATE queries and trigger tables to resumable cursor queues and adaptiv…
AI Models Escaping Evaluation: Treating the Internet as a Security Boundary
Why researchers are calling for default-deny egress on AI eval environments—and how to implement it with iptables.
Interview: Why Android Cannot Encode MP3 and How to Work Around It
Android decodes MP3 audio natively, but its media framework lacks an MP3 encoder and container muxer. Audio engineer Mar…
Tracing Process Ancestry and Orphan Daemons with witr
When an unexpected process binds a port or consumes memory, standard Linux tools show current state without explaining o…
Hardware Interdiction: How Display Sniffers Defeat Certified Silicon
How hardware signer tampering evolved from local fault injection in 2018 to autonomous LTE implants draining seed phrase…
Older Posts
Movie Diaries
from Letterboxd Letterboxd
Projects
01 / 04Things I'm building and contributing to
