System Architect · Security Researcher · Photographer
Morteza
Bahmani
Independent creator exploring the intersection of security, infrastructure, and digital craft. Building at Internet Labs.
Blog
Recent writings on security, infrastructure, and the open web
Defending Entra ID Against Device Code Flow Abuse
A practical security checklist for defending Microsoft Entra ID and Microsoft 365 environments against RFC 8628 OAuth de…
Automated SAST with OpenAI Codex Security: Deterministic AST Analysis Meets LLM Remediation
Static analysis flags security bugs, but traditional SAST tools drown developers in false positives. OpenAI Codex Securi…
Silicon Trust Chains in Multi-Tenant GPU Clusters
Analyzing silicon trust chains, firmware attestation, and hardware security isolation in high-density AI data centers.
Architectural Shifts in Programmatic Web Inspection Engines
Analyzing how browser automation engines scaled from heavy multi-process Chrome binaries to minimal Rust-backed parsing …
The Myth of Opaque AI Reasoning Tokens
Encrypted reasoning traces from proprietary AI APIs are not bound to individual sessions or users. Discover how cross-mo…
The Evolution of Cross-Cloud Workload Identity Federation
A technical timeline tracing cross-cloud workload identity from static service account keys in 2018 to declarative Kuber…
Older Posts
Movie Diaries
from Letterboxd Letterboxd
Projects
01 / 04Things I'm building and contributing to
