Morteza
Bahmani

Older Posts

• witr: Tracing Process Start Chains Sep 15, 2026

  ps and lsof show what is running, not why. witr walks the ancestry: PID to supervisor to the script that started it, in one chain.

• bgscan vs WebCheck-OSINT: Two Ways to Run an Engagement Recon Pass Sep 15, 2026

  bgscan sweeps networks from a BubbleTea TUI, chaining ICMP, TCP, HTTP, DNS, and tunnel probes into one run. WebCheck-OSINT dissects a single site from a self-hosted browser service. Where each belongs…

• Why MoE Models Stream From NVMe: Kernel Prefetch, Read-Ahead, and Async I/O Sep 14, 2026

  Frontier MoE models run on consumer hardware by streaming expert weights from disk. Not compression—kernel I/O prefetching overlapped with GPU compute. Here's how.

• SSH Certificates vs. Key Files: Why Production Ops Teams Are Finally Moving Sep 14, 2026

  Key files don't scale. SSH certificates solve revocation, audit trails, and onboarding at production scale—here's why adoption is accelerating.

• BGP Flowspec False Positives: When DDoS Filters Block Legitimate Traffic Sep 13, 2026

  Flowspec rules are coarse-grained. They catch attack traffic and legitimate traffic alike. How to monitor, whitelist, and protect your critical services from collateral damage.

• Kernel Socket Tuning for High-Concurrency Load Balancers: TCP_NODELAY, TCP_FASTOPEN, and Listen Backlog Sep 13, 2026

  Disable Nagle, enable TCP Fast Open, tune listen backlog. Three socket parameters cut tail latencies 40–60% on modern load balancers.