https://omid.dev/posts/techblog/Recent content in TechBlog on Omid Farhanghttps://omid.dev/images/bio-photo-150x150.jpghttps://omid.dev/images/bio-photo-150x150.jpgHugo -- 0.165.0en-US2026 Omid Farhang | All rights reserved.Mon, 14 Sep 2026 00:40:00 +0330https://omid.dev/2026/09/14/essential-skills-when-generation-is-cheap/Mon, 14 Sep 2026 00:40:00 +0330https://omid.dev/2026/09/14/essential-skills-when-generation-is-cheap/The skill list did not get a new bubble called AI. The senior job changed: you own output you did not type, you review at a higher altitude, and you decide where generation does not belong.https://omid.dev/2026/09/10/linux-vxlan-and-why-cni/Thu, 10 Sep 2026 12:00:00 +0330https://omid.dev/2026/09/10/linux-vxlan-and-why-cni/Ethernet does not stretch across hosts by itself. VXLAN is one overlay; CNI is the contract that plugs a pod into whatever network the cluster actually uses.https://omid.dev/2026/09/09/i-interview-frontend-hires-for-other-companies/Wed, 09 Sep 2026 03:00:00 +0330https://omid.dev/2026/09/09/i-interview-frontend-hires-for-other-companies/How I interview frontend candidates for a team that is not mine — intake with their lead, choosing the real level, and why I now weigh architecture, ownership, and AI judgment over syntax recall.https://omid.dev/2026/09/04/linux-network-namespaces-and-virtual-links/Fri, 04 Sep 2026 21:00:00 +0330https://omid.dev/2026/09/04/linux-network-namespaces-and-virtual-links/Isolate network stacks with netns, connect them with veth, and choose bridge vs macvlan vs ipvlan — the kernel primitives containers reuse.https://omid.dev/2026/09/01/linux-as-a-router/Tue, 01 Sep 2026 21:00:00 +0330https://omid.dev/2026/09/01/linux-as-a-router/Linux leaves the bridge domain: IP forwarding, policy routing for two uplinks, and nftables input vs forward.https://omid.dev/2026/08/29/one-ai-chat-is-not-a-research-workspace/Sat, 29 Aug 2026 00:25:01 +0330https://omid.dev/2026/08/29/one-ai-chat-is-not-a-research-workspace/Long-form research does not fit in one ChatGPT conversation. A Git repo of messy Markdown — inbox, concepts, counterarguments — lets ideas stay contradictory until you are ready to write.https://omid.dev/2026/08/23/hdmi-port-keeping-nvidia-awake/Sun, 23 Aug 2026 02:10:00 +0330https://omid.dev/2026/08/23/hdmi-port-keeping-nvidia-awake/On an Intel + NVIDIA hybrid laptop, native HDMI can keep the dGPU in the display path. That explains the fan noise — and may be a contributor to Chrome and Cursor freezes on this stack.https://omid.dev/2026/08/19/have-influence-without-becoming-the-backdoor/Wed, 19 Aug 2026 00:30:00 +0330https://omid.dev/2026/08/19/have-influence-without-becoming-the-backdoor/Cross-team trust is a career asset. Unofficial ownership is a career trap. How a senior brings feedback, protects UX, and stays on the team's side of the board.https://omid.dev/2026/08/18/channel-the-scout-keep-the-seat/Tue, 18 Aug 2026 00:30:00 +0330https://omid.dev/2026/08/18/channel-the-scout-keep-the-seat/Do not punish cross-team friendliness. Give the scout an official boundary: shared intake, no silent commitments, and polish on a budget.https://omid.dev/2026/08/17/when-the-best-communicator-becomes-the-backdoor/Mon, 17 Aug 2026 00:30:00 +0330https://omid.dev/2026/08/17/when-the-best-communicator-becomes-the-backdoor/On a small development team, the senior who talks to other teams may be the most valuable person in the room—until influence becomes unofficial ownership.https://omid.dev/2026/08/15/the-frontend-is-a-privileged-system-now/Sat, 15 Aug 2026 23:50:00 +0330https://omid.dev/2026/08/15/the-frontend-is-a-privileged-system-now/The browser is untrusted, but the system that builds and delivers the frontend is not. Install hooks, CI identities, and release credentials make frontend delivery a production trust boundary.https://omid.dev/2026/08/10/aur-freeze-supply-chain-attack/Mon, 10 Aug 2026 12:00:00 +0330https://omid.dev/2026/08/10/aur-freeze-supply-chain-attack/Arch Linux froze all AUR writes after a third supply-chain attack wave, then restored pushes and adoption on August 11 with review gates. Timeline, how Atomic Arch worked, and what to do on Manjaro and other Arch-derived distros.https://omid.dev/2026/08/03/a-maintainable-command-line-workspace-on-linux/Mon, 03 Aug 2026 14:22:00 +0330https://omid.dev/2026/08/03/a-maintainable-command-line-workspace-on-linux/Build a reproducible Linux command-line workspace with portable dotfiles, terminal, shell, multiplexer, SSH, and editor layers that remain maintainable across machines.https://omid.dev/2026/07/31/modern-auth-patterns-for-angular-frontends/Fri, 31 Jul 2026 00:40:00 +0330https://omid.dev/2026/07/31/modern-auth-patterns-for-angular-frontends/Stop storing JWTs in localStorage. Use OIDC with a BFF or reverse proxy, short-lived server-side tokens, HttpOnly cookies, and Angular interceptors and guards that do not pretend to be your security boundary.https://omid.dev/2026/07/29/why-client-side-frameworks-need-security-updates/Wed, 29 Jul 2026 00:41:00 +0330https://omid.dev/2026/07/29/why-client-side-frameworks-need-security-updates/Browser frameworks still own sanitization, request protection, and SSR isolation. Three recent Angular CVEs show why framework patches are part of every client-side app’s security boundary.https://omid.dev/2026/07/22/securing-angular-pwas-in-2026/Wed, 22 Jul 2026 00:42:00 +0330https://omid.dev/2026/07/22/securing-angular-pwas-in-2026/Security for Angular Progressive Web Apps: HTTPS and service worker scope, cache strategies that do not leak auth-dependent data, and offline sessions without raising XSS or CSRF risk.https://omid.dev/2026/07/18/dependency-risk-sboms-and-automated-security-for-angular/Sat, 18 Jul 2026 00:45:00 +0330https://omid.dev/2026/07/18/dependency-risk-sboms-and-automated-security-for-angular/Build an SBOM and CI security pipeline for Angular monorepos: npm audit, ng update --dry-run, fail on high-severity CVEs, Dependabot/Snyk, and post summaries to Slack or Mastodon.https://omid.dev/2026/07/15/csp-and-angular-practical-patterns/Wed, 15 Jul 2026 00:50:00 +0330https://omid.dev/2026/07/15/csp-and-angular-practical-patterns/Ship CSP for Angular without breaking the build: report-only first, nonces via autoCsp or ngCspNonce, nginx/Apache/Cloudflare headers, and a small scanner for inline handlers, eval, and other footguns.https://omid.dev/2026/07/10/typescript-7-is-here-fast-exciting-worth-watching/Fri, 10 Jul 2026 02:03:30 +0330https://omid.dev/2026/07/10/typescript-7-is-here-fast-exciting-worth-watching/TypeScript 7's native port delivers dramatic build-time speedups, but editor plugins, framework tooling, and monorepo workflows are catching up at different speeds. A practical read for teams deciding when to adopt.https://omid.dev/2026/06/30/local-ai-with-ollama-aider-and-cline-on-manjaro/Tue, 30 Jun 2026 01:14:50 +0330https://omid.dev/2026/06/30/local-ai-with-ollama-aider-and-cline-on-manjaro/A follow-up to the split Cursor workflow: install Ollama on Manjaro with CUDA, pull coding models, wire up Aider and Cline for scoped local work — with honest limits on tool reliability, privacy, and when to fall back to cloud models.