System Architect · Security Researcher · Photographer
Morteza
Bahmani
Independent creator exploring the intersection of security, infrastructure, and digital craft. Building at Internet Labs.
Blog
Recent writings on security, infrastructure, and the open web
Linux Transparent Proxying: TPROXY vs TUN Device Interception
Comparing Linux Netfilter TPROXY and Layer 3 TUN virtual interfaces across kernel overhead, metadata tracking, routing t…
GPU Cloud Observability Is a Topology Problem
GPU clusters break every observability assumption. The metrics are green but the job is 3x slower. Here's what you actua…
Quantum Alliance vs NIST: Two Standards Paths for Post-Quantum Cryptography
Six million bitcoin vulnerable to quantum attack. NIST and an industry Quantum Alliance offer different governance model…
Web Endpoint Reconnaissance: A 10-Point Attack Surface Checklist
A 10-point external reconnaissance audit checklist covering HTTP headers, DNS hygiene, TLS configuration, and perimeter …
Myth: macOS Menu Bar Apps Run in a Sandboxed, Restricted Privilege Level
Menu bar utilities are assumed unprivileged, but macOS privilege separation doesn't enforce that boundary. Learn how to …
Myth: SSH Agent Forwarding Is a Safe Bastion Pattern
Passing your local SSH keys through jump hosts with agent forwarding exposes your private identity to any compromised ba…
Older Posts
Movie Diaries
from Letterboxd Letterboxd
Projects
01 / 04Things I'm building and contributing to
