fawadnaeem.dev — Build-in-Public Dev BlogBuild logs, security fixes, and shipping notes from a full-stack developer in Lahore. Real projects, written the way developers talk.https://fawadnaeem.dev/en-usLolo Cab: shared-ride seats are a counter, and counters racehttps://fawadnaeem.dev/blog/lolo-cab-shared-ride-seat-locking/https://fawadnaeem.dev/blog/lolo-cab-shared-ride-seat-locking/Backend notes from Lolo Cab — why check-then-decrement seat counts break under concurrent bookings, and the atomic-update fix.Thu, 23 Jul 2026 00:00:00 GMTnodejsmongodbconcurrencylolo-cabLolo Cab: DigiLocker KYC is a status machine, not a file uploadhttps://fawadnaeem.dev/blog/lolo-cab-digilocker-kyc-states/https://fawadnaeem.dev/blog/lolo-cab-digilocker-kyc-states/Backend notes from Lolo Cab — provider-backed KYC for drivers and vendors, what never goes to the client, and why admin gates on verification state.Mon, 20 Jul 2026 00:00:00 GMTkycnodejslolo-cabSmart Trust Meter: DistilBERT, Roman Urdu, and why the model lives on Hugging Facehttps://fawadnaeem.dev/blog/smart-trust-meter-distilbert-roman-urdu/https://fawadnaeem.dev/blog/smart-trust-meter-distilbert-roman-urdu/Thesis NLP notes — DistilBERT as the live sentiment model, LSTM as the offline backup, Roman Urdu augmentation, and why ML ran on Hugging Face while the API stayed on Render.Tue, 14 Jul 2026 00:00:00 GMTnlppythonhuggingfacesmart-trust-meterSports PreGame: public defaults, auth oracles, and soft social takeovershttps://fawadnaeem.dev/blog/sports-pregame-security-pass-2/https://fawadnaeem.dev/blog/sports-pregame-security-pass-2/A second pass over public reads and auth — defaults that weren't access control, error messages that leaked too much, and social login that trusted the wrong signal.Mon, 13 Jul 2026 00:00:00 GMTsecuritynodejssports-pregameSports PreGame: SSRF, mass assignment, and the New Architecture ad breakhttps://fawadnaeem.dev/blog/sports-pregame-security-new-architecture/https://fawadnaeem.dev/blog/sports-pregame-security-new-architecture/What broke in production on a React Native + AWS youth soccer app — and the fixes that actually stuck.Thu, 18 Jun 2026 00:00:00 GMTreact-nativesecurityawssports-pregamethegrindcalc.com: Astro, trailing slashes, and Search Console surpriseshttps://fawadnaeem.dev/blog/thegrindcalc-astro-seo-notes/https://fawadnaeem.dev/blog/thegrindcalc-astro-seo-notes/Build notes from The Grind Calc — a coffee-to-water ratio calculator on Astro, plus the SEO footguns that showed up first.Fri, 22 May 2026 00:00:00 GMTastroseothegrindcalcWhat I wish I logged earlier on every projecthttps://fawadnaeem.dev/blog/what-i-wish-i-logged-earlier/https://fawadnaeem.dev/blog/what-i-wish-i-logged-earlier/A short note on keeping a technical log — decisions, incidents, and the boring fixes that save you next month.Fri, 10 Apr 2026 00:00:00 GMTdev-notesprocess