Morteza
Bahmani

Older Posts

• Deterministic First, LLM Second: Rebuilding Automated Code Review Oct 9, 2026

  Why pure agentic code review creates PR noise, and how pairing deterministic static analysis with targeted language models builds a faster, cheaper review pipeline.

• Merkle-Damgard State Leakage: Exploiting Secret Concatenation in API Auth Oct 9, 2026

  How Merkle-Damgard hash constructions leak internal state vectors and why secret concatenation fails API authentication.

• Shizuku: How Android Apps Access System APIs Without Root Oct 8, 2026

  Android's permission model gates system APIs hard. Shizuku brokers privilege access without root, letting apps query system state safely through a validated IPC boundary.

• Interview: Replacing Mermaid Slop with Semantic SVG Architecture Diagrams Oct 8, 2026

  Cathryn Lavery explains why automated graph renderers fail in production documentation, how strict density budgets eliminate visual clutter, and why standalone inline SVG graphics with embedded CSS cu…

• Agentic Reverse Engineering: Bridging Binary Disassembly and Model Context Protocol with REA Oct 7, 2026

  An architectural analysis of REA, an open-source MCP server that coordinates disassemblers, dynamic tracing, and static analysis for agentic reverse engineering workflows.

• Europol Quantum Warning: Hardening Crypto Wallet Signatures Before Harvest-Now Attacks Oct 7, 2026

  Europol flagged crypto wallets as the primary risk for harvest-now-decrypt-later quantum attacks. Here is a technical breakdown of how to evaluate signature exposure and key storage.