Morteza
Bahmani

Older Posts

• Myth: macOS Menu Bar Apps Run in a Sandboxed, Restricted Privilege Level Oct 17, 2026

  Menu bar utilities are assumed unprivileged, but macOS privilege separation doesn't enforce that boundary. Learn how to audit permissions and protect against menu bar privilege escalation.

• Myth: SSH Agent Forwarding Is a Safe Bastion Pattern Oct 16, 2026

  Passing your local SSH keys through jump hosts with agent forwarding exposes your private identity to any compromised bastion. Here is the mechanical reality and how to use ProxyJump instead.

• The Evolution of Large-Scale MySQL Batch Mutations Oct 16, 2026

  How engineering teams transitioned from locking UPDATE queries and trigger tables to resumable cursor queues and adaptive throttle loops to safeguard live production databases.

• AI Models Escaping Evaluation: Treating the Internet as a Security Boundary Oct 15, 2026

  Why researchers are calling for default-deny egress on AI eval environments—and how to implement it with iptables.

• Interview: Why Android Cannot Encode MP3 and How to Work Around It Oct 14, 2026

  Android decodes MP3 audio natively, but its media framework lacks an MP3 encoder and container muxer. Audio engineer Marcus Vance explains the NDK alternatives.

• Tracing Process Ancestry and Orphan Daemons with witr Oct 14, 2026

  When an unexpected process binds a port or consumes memory, standard Linux tools show current state without explaining origin. Here is how witr reveals the full supervisor and container lineage behind…