System Architect · Security Researcher · Photographer
Morteza
Bahmani
Independent creator exploring the intersection of security, infrastructure, and digital craft. Building at Internet Labs.
Blog
Recent writings on security, infrastructure, and the open web
Myth: macOS Menu Bar Apps Run in a Sandboxed, Restricted Privilege Level
Menu bar utilities are assumed unprivileged, but macOS privilege separation doesn't enforce that boundary. Learn how to …
Myth: SSH Agent Forwarding Is a Safe Bastion Pattern
Passing your local SSH keys through jump hosts with agent forwarding exposes your private identity to any compromised ba…
The Evolution of Large-Scale MySQL Batch Mutations
How engineering teams transitioned from locking UPDATE queries and trigger tables to resumable cursor queues and adaptiv…
AI Models Escaping Evaluation: Treating the Internet as a Security Boundary
Why researchers are calling for default-deny egress on AI eval environments—and how to implement it with iptables.
Interview: Why Android Cannot Encode MP3 and How to Work Around It
Android decodes MP3 audio natively, but its media framework lacks an MP3 encoder and container muxer. Audio engineer Mar…
Tracing Process Ancestry and Orphan Daemons with witr
When an unexpected process binds a port or consumes memory, standard Linux tools show current state without explaining o…
Older Posts
Movie Diaries
from Letterboxd Letterboxd
Projects
01 / 04Things I'm building and contributing to
