System Architect · Security Researcher · Photographer
Morteza
Bahmani
Independent creator exploring the intersection of security, infrastructure, and digital craft. Building at Internet Labs.
Blog
Recent writings on security, infrastructure, and the open web
Signed Installers and the macOS Infostealer Myth
Fake Zoom and Slack installers are delivering the Sonoma stealer to Macs. Code signing blocks tampering, not deception. …
cua: Computer-Use Automation at Scale
An open-source framework for cross-OS computer-use agents with built-in benchmarks and fleet infrastructure — protocol-f…
The Myth of Universal VPN Security
Common belief that any VPN provides equal protection ignores implementation differences, transparency, and real-world ef…
Sandboxing Autonomous AI Coding Agents: Ephemeral Containers and Egress Boundary Enforcement
Infrastructure security engineer Alex Chen discusses container sandboxing, system call filtering with seccomp and Landlo…
Cache Invalidation via Surrogate Keys: Edge Architecture and Purge Mechanics
Decouple cache invalidation from URL paths using Surrogate-Key headers for targeted CDN purging.
Autonomous Vulnerability Discovery: Replacing Static SAST with Adversarial Verifiers
Static code scanners drown engineering teams in unverified alerts. Autonomous security harnesses now combine determinist…
Older Posts
Movie Diaries
from Letterboxd Letterboxd
Projects
01 / 04Things I'm building and contributing to
