4 min read
Lolo Cab: shared-ride seats are a counter, and counters race
Backend notes from Lolo Cab — why check-then-decrement seat counts break under concurrent bookings, and the atomic-update fix.
Dev log
fawadnaeem.dev
Build-in-public notes from Fawad Naeem — shipping logs, security fixes, and the ugly details of getting products into production.
Currently building
Active work
- Sports PreGame
Youth soccer app for families across 21 US states — React Native, AWS, AdMob mediation, and the messy New Architecture fixes that come with shipping on both stores.
- thegrindcalc.com
Coffee ratio calculator and brewing tools site. Astro, SEO, trailing-slash canonicalization, and Search Console rabbit holes.
Latest
From the log
3 min read
Lolo Cab: DigiLocker KYC is a status machine, not a file upload
Backend notes from Lolo Cab — provider-backed KYC for drivers and vendors, what never goes to the client, and why admin gates on verification state.
4 min read
Smart Trust Meter: DistilBERT, Roman Urdu, and why the model lives on Hugging Face
Thesis NLP notes — DistilBERT as the live sentiment model, LSTM as the offline backup, Roman Urdu augmentation, and why ML ran on Hugging Face while the API stayed on Render.
3 min read
Sports PreGame: public defaults, auth oracles, and soft social takeovers
A second pass over public reads and auth — defaults that weren't access control, error messages that leaked too much, and social login that trusted the wrong signal.
2 min read
Sports PreGame: SSRF, mass assignment, and the New Architecture ad break
What broke in production on a React Native + AWS youth soccer app — and the fixes that actually stuck.
Newsletter
Occasional shipping notes
No spam — just new build logs when they ship. Form is ready; provider wiring comes later.