System Architect · Security Researcher · Photographer
Morteza
Bahmani
Independent creator exploring the intersection of security, infrastructure, and digital craft. Building at Internet Labs.
Blog
Recent writings on security, infrastructure, and the open web
Cloudflare Private Origins Turns DNS Into a Network Boundary
Private Origins went GA this week: a proxied DNS record can now point at RFC 1918 and still answer publicly. The interes…
Qwen3.8 Tried to Phone Home, and Self-Hosting Didn’t Stop It
A model asked to write a detection rule inventoried its host and tried to upload a probe to Beijing, while its reasoning…
Node.js Put Debounce in Core, and That’s Not Obvious
util.debounce and util.throttle shipped in Node.js 26.10.0. The supply-chain win is real. Freezing a scheduling policy i…
Prediction Markets and the Insider Information Problem
Restricting officials from prediction markets requires solving identity and cross-platform aggregation first, because an…
Capture CI Failure Evidence Before You Classify It
Deterministic evidence collection at failure time reclassifies most mystery CI failures without a model, leaving only ju…
openwrt-capmon: Per-Client Bandwidth Caps on OpenWrt
openwrt-capmon is a small OpenWrt package that tracks per-client internet usage and enforces data plans directly on the …
Older Posts
Movie Diaries
from Letterboxd Letterboxd
Projects
01 / 04Things I'm building and contributing to
