Morteza
Bahmani

Older Posts

• The SSRF Problem Nobody Talks About in AI Pipelines Oct 5, 2026

  Everyone hardens the model. Almost nobody hardens what the model fetches. A walkthrough of SSRF and SSRF-adjacent risks in AI ingestion pipelines, with practical iptables and Python mitigations.

• WebCheck: Self-Host Your Website OSINT Instead of Renting It Oct 4, 2026

  Website OSINT in one URL: DNS, TLS, headers, WHOIS, tech fingerprint, all passive. Run the WebCheck fork on your own box so targets never leave your network.

• Why Is This Process Running? The Evolution of Process Provenance Tooling Oct 4, 2026

  How answering why a process is running moved from /proc archaeology to eBPF streams to witr, the open-source tool that makes provenance a single command.

• How to Build a Censorship-Resistant Tunnel with Aether and MASQUE Oct 3, 2026

  A step-by-step guide to compiling and configuring Aether, a Rust userspace implementation of Cloudflare WARP using MASQUE over HTTP/3.

• Paying for AI Without Revealing Who You Are: Zero-Knowledge Inference Tokens Explained Oct 3, 2026

  Zero-knowledge proofs decouple payment identity from LLM inference requests. Here is how the cryptographic architecture works and what security risks exist at the edge.

• VPS Security Baseline: 10-Point Checklist Before You Go Live Oct 2, 2026

  A practical pre-flight checklist for hardening a fresh Ubuntu 24.04 VPS before exposing any service to the internet.