System Architect · Security Researcher · Photographer
Morteza
Bahmani
Independent creator exploring the intersection of security, infrastructure, and digital craft. Building at Internet Labs.
Blog
Recent writings on security, infrastructure, and the open web
Quantum Alliance vs NIST: Two Standards Paths for Post-Quantum Cryptography
Six million bitcoin vulnerable to quantum attack. NIST and an industry Quantum Alliance offer different governance model…
Web Endpoint Reconnaissance: A 10-Point Attack Surface Checklist
A 10-point external reconnaissance audit checklist covering HTTP headers, DNS hygiene, TLS configuration, and perimeter …
Myth: macOS Menu Bar Apps Run in a Sandboxed, Restricted Privilege Level
Menu bar utilities are assumed unprivileged, but macOS privilege separation doesn't enforce that boundary. Learn how to …
Myth: SSH Agent Forwarding Is a Safe Bastion Pattern
Passing your local SSH keys through jump hosts with agent forwarding exposes your private identity to any compromised ba…
The Evolution of Large-Scale MySQL Batch Mutations
How engineering teams transitioned from locking UPDATE queries and trigger tables to resumable cursor queues and adaptiv…
AI Models Escaping Evaluation: Treating the Internet as a Security Boundary
Why researchers are calling for default-deny egress on AI eval environments—and how to implement it with iptables.
Older Posts
Movie Diaries
from Letterboxd Letterboxd
Projects
01 / 04Things I'm building and contributing to
