Home on Omid Farhang

One AI Chat Is Not a Research Workspace

Sat, 29 Aug 2026 00:25:01 +0330

Long-form research does not fit in one ChatGPT conversation. A Git repo of messy Markdown — inbox, concepts, counterarguments — lets ideas stay contradictory until you are ready to write.

The HDMI Port Was Keeping NVIDIA Awake

Sun, 23 Aug 2026 02:10:00 +0330

On an Intel + NVIDIA hybrid laptop, native HDMI can keep the dGPU in the display path. That explains the fan noise — and may be a contributor to Chrome and Cursor freezes on this stack.

Have Influence Without Becoming the Backdoor

Wed, 19 Aug 2026 00:30:00 +0330

Cross-team trust is a career asset. Unofficial ownership is a career trap. How a senior brings feedback, protects UX, and stays on the team's side of the board.

Channel the Scout, Keep the Seat

Tue, 18 Aug 2026 00:30:00 +0330

Do not punish cross-team friendliness. Give the scout an official boundary: shared intake, no silent commitments, and polish on a budget.

When the Best Communicator Becomes the Backdoor

Mon, 17 Aug 2026 00:30:00 +0330

On a small development team, the senior who talks to other teams may be the most valuable person in the room—until influence becomes unofficial ownership.

The Frontend Is a Privileged System Now

Sat, 15 Aug 2026 23:50:00 +0330

The browser is untrusted, but the system that builds and delivers the frontend is not. Install hooks, CI identities, and release credentials make frontend delivery a production trust boundary.

The AUR Is Frozen: Inside Arch's Third Supply-Chain Attack Wave

Mon, 10 Aug 2026 12:00:00 +0330

Arch Linux froze all AUR writes after a third supply-chain attack wave, then restored pushes and adoption on August 11 with review gates. Timeline, how Atomic Arch worked, and what to do on Manjaro and other Arch-derived distros.

Marilyn Manson – Front Toward Enemy

Sun, 09 Aug 2026 23:42:00 +0330

“Get up and fight! Get up and fight!”

Marilyn Manson is back?

A Maintainable Command-Line Workspace on Linux

Mon, 03 Aug 2026 14:22:00 +0330

Build a reproducible Linux command-line workspace with portable dotfiles, terminal, shell, multiplexer, SSH, and editor layers that remain maintainable across machines.

Modern Auth Patterns for Angular Frontends (Beyond “Just Add JWT”)

Fri, 31 Jul 2026 00:40:00 +0330

Stop storing JWTs in localStorage. Use OIDC with a BFF or reverse proxy, short-lived server-side tokens, HttpOnly cookies, and Angular interceptors and guards that do not pretend to be your security boundary.

Why Client-Side Frameworks Need Security Updates

Wed, 29 Jul 2026 00:41:00 +0330

Browser frameworks still own sanitization, request protection, and SSR isolation. Three recent Angular CVEs show why framework patches are part of every client-side app’s security boundary.

Securing Angular PWAs in 2026

Wed, 22 Jul 2026 00:42:00 +0330

Security for Angular Progressive Web Apps: HTTPS and service worker scope, cache strategies that do not leak auth-dependent data, and offline sessions without raising XSS or CSRF risk.

Dependency Risk, SBOMs, and Automated Security for Angular

Sat, 18 Jul 2026 00:45:00 +0330

Build an SBOM and CI security pipeline for Angular monorepos: npm audit, ng update --dry-run, fail on high-severity CVEs, Dependabot/Snyk, and post summaries to Slack or Mastodon.

Content Security Policy (CSP) and Angular: Practical Patterns

Wed, 15 Jul 2026 00:50:00 +0330

Ship CSP for Angular without breaking the build: report-only first, nonces via autoCsp or ngCspNonce, nginx/Apache/Cloudflare headers, and a small scanner for inline handlers, eval, and other footguns.

TypeScript 7 Is Here: Fast, Exciting, and Worth Watching

Fri, 10 Jul 2026 02:03:30 +0330

TypeScript 7's native port delivers dramatic build-time speedups, but editor plugins, framework tooling, and monorepo workflows are catching up at different speeds. A practical read for teams deciding when to adopt.

Uses

Wed, 08 Jul 2026 00:00:00 +0000

A list of the hardware, software, and tools I use on a daily basis.

Local AI on Manjaro: Ollama, Aider, and Cline Without Another Subscription

Tue, 30 Jun 2026 01:14:50 +0330

A follow-up to the split Cursor workflow: install Ollama on Manjaro with CUDA, pull coding models, wire up Aider and Cline for scoped local work — with honest limits on tool reliability, privacy, and when to fall back to cloud models.

How to Stretch Cursor Pro Further: A Split AI Workflow

Mon, 29 Jun 2026 10:00:00 +0330

Cursor Pro is best when it edits code, not when it thinks out loud. A practical split workflow — Perplexity for current research, ChatGPT for planning, Claude for review, Ollama for cheap tasks, and Cursor for multi-file execution — plus what actually counts against your quota.

After the Zoom-Out: A Playbook for Staying Current Without Burning Out

Thu, 25 Jun 2026 10:00:00 +0330

Part two of the ecosystem blind spot series. The first post named the feeling; this one is the playbook — pain-driven discovery, pattern recognition, technology reconnaissance, and the habits that keep experienced engineers ahead of expensive gaps.

Privacy Policy

Wed, 17 Jun 2026 17:57:10 +0330

How omid.dev handles analytics, the contact form, webmentions, and other privacy-related features.