Morteza
Bahmani

Older Posts

• PostgreSQL Planner Cost Analysis: B-Tree Index Scans vs Sequential Scans Nov 13, 2026

  An architectural breakdown of how PostgreSQL evaluates sequential scans against B-Tree index scans based on disk page weights, random IOPS, buffer pool limits, and query selectivity.

• Defending Entra ID Against Device Code Flow Abuse Nov 12, 2026

  A practical security checklist for defending Microsoft Entra ID and Microsoft 365 environments against RFC 8628 OAuth device code phishing and token capture attacks.

• Automated SAST with OpenAI Codex Security: Deterministic AST Analysis Meets LLM Remediation Nov 12, 2026

  Static analysis flags security bugs, but traditional SAST tools drown developers in false positives. OpenAI Codex Security combines AST parsing with automated code transformation to validate and patch…

• Silicon Trust Chains in Multi-Tenant GPU Clusters Nov 10, 2026

  Analyzing silicon trust chains, firmware attestation, and hardware security isolation in high-density AI data centers.

• Architectural Shifts in Programmatic Web Inspection Engines Nov 10, 2026

  Analyzing how browser automation engines scaled from heavy multi-process Chrome binaries to minimal Rust-backed parsing runtimes.

• The Myth of Opaque AI Reasoning Tokens Nov 9, 2026

  Encrypted reasoning traces from proprietary AI APIs are not bound to individual sessions or users. Discover how cross-model trace replay exposes credentials, PII, and internal guardrails.