Keep authorization rules out of route handlers
Every authorization bug I have seen had the same shape. One pure function fixes it.
Writing by Mohammed Safwanul Islam
The filename on an uploaded file is user input
Most of us treat it like metadata. Sanitizing it isn't the fix; not using it is.
Building a safe "view as user" feature
The safest version only ever mutates one field on the user object, never the session itself.
Meeting UCSI's leadership in Bangladesh
A meetup with UCSI's Vice-Chancellor and the people building the Bangladesh campus.
Back where the journey began
Meeting students at UCSI Bangladesh as an alumnus. We left with more than we gave.
A fake BDJobs email, and the trust gap in hiring
A phishing email dressed up as BDJobs, and why hiring cannot keep running on blind trust.
Graduating from UCSI University
Bachelor of Computer Engineering (AI) with Honours, 39th Convocation of UCSI University.
Building real-time pose detection with OpenPose
Real-time, multi-person pose detection, built in the last two days of my internship.
Presenting a sleep-pattern analysis at KidoCode
A descriptive analysis of sleep patterns in 18 to 25 year olds, presented to fellow interns.
Scholarship training for UCSI staff and student ambassadors
Learning how to promote scholarships and talk with prospective students and parents.
Another intern meeting at KidoCode
Wellbeing, new faces, and looking back at what we had learned so far.
The purpose of meetings: beyond updates and games
Meetings are more than updates and icebreakers. Here is what they are actually for.
Internship: beyond the classroom
Internships are a game-changer, offering experience you simply cannot get in a classroom.
