Akash ShahriarBuild logs, prompts and process from building and shipping software products.https://akashshahriar.com/AI Just Found a 14-Year-Old Hole in PHP. What Will It Find in Your Code?https://akashshahriar.com/writing/php2shell-and-the-code-nobody-tests/https://akashshahriar.com/writing/php2shell-and-the-code-nobody-tests/Two critical PHP bugs sat in error-handling paths for years, and AI helped find them. What that means for anyone shipping code an agent wrote.Sat, 24 Oct 2026 00:00:00 GMTNo Flutter NFC Package Could Do Both, So I Built Onehttps://akashshahriar.com/writing/one-nfc-api-for-the-phone-and-a-usb-reader/https://akashshahriar.com/writing/one-nfc-api-for-the-phone-and-a-usb-reader/One API for Android's built-in antenna and USB card readers, and the bugs that only real hardware showed me.Sat, 24 Oct 2026 00:00:00 GMTThe Night Before the Demo, My AI Drive-Thru Started to Stutterhttps://akashshahriar.com/writing/building-an-ai-drive-thru-agent/https://akashshahriar.com/writing/building-an-ai-drive-thru-agent/Deepgram for ears, a small LLM with tools for the brain, a native audio engine for the mouth. How a kiosk takes a full order by voice, and why the echo canceller lost.Fri, 23 Oct 2026 00:00:00 GMTMy Android Video Timeline Never Shows a Blank Frame. Here's the Trickhttps://akashshahriar.com/writing/building-a-capcut-style-timeline-on-android/https://akashshahriar.com/writing/building-a-capcut-style-timeline-on-android/MediaCodec, an offscreen OpenGL renderer and a nearest-frame cache. How I made a zoomable filmstrip that never shows an empty tile.Thu, 22 Oct 2026 00:00:00 GMTI Asked X to Test My App. Nobody Did.https://akashshahriar.com/writing/zero-people-tested-my-app/https://akashshahriar.com/writing/zero-people-tested-my-app/I asked strangers on X to try Utshob before giving them anything. Nobody did. What I changed.Mon, 19 Oct 2026 00:00:00 GMTSteal the Spec Template I Give My Coding Agenthttps://akashshahriar.com/lab/the-spec-template-i-hand-to-a-coding-agent/https://akashshahriar.com/lab/the-spec-template-i-hand-to-a-coding-agent/The section list I write before any code, and the prompt that goes with it. Used for PassFirst.Sun, 18 Oct 2026 00:00:00 GMTAn API Key in Your App Is a Key You've Already Publishedhttps://akashshahriar.com/writing/two-rules-in-every-app-i-ship/https://akashshahriar.com/writing/two-rules-in-every-app-i-ship/No secrets in the binary. Every request to my backend is signed. Both are cheap and both have saved me.Sat, 17 Oct 2026 00:00:00 GMTAn AI Writes My Daily X Post. Here's the One Rule It Can Never Breakhttps://akashshahriar.com/lab/one-post-a-day-from-a-repo-of-facts/https://akashshahriar.com/lab/one-post-a-day-from-a-repo-of-facts/A scheduled Claude Code routine writes my daily X post from the brain repo, under a protocol that forbids inventing anything. The protocol.Fri, 16 Oct 2026 00:00:00 GMTI Turned Myself Into a Git Repo. Now Claude Answers Like Mehttps://akashshahriar.com/lab/a-brain-repo-that-answers-as-me/https://akashshahriar.com/lab/a-brain-repo-that-answers-as-me/A private git repo describing who I am, how I think and what I have decided, with a CLAUDE.md that tells Claude how to use it. The method, not the contents.Wed, 14 Oct 2026 00:00:00 GMTI Don't Let My Coding Agent Start Until the Spec Is Finishedhttps://akashshahriar.com/writing/spec-first-then-the-agent/https://akashshahriar.com/writing/spec-first-then-the-agent/How I build an app now. The whole product and build spec gets written before any code, then a coding agent works against it.Mon, 12 Oct 2026 00:00:00 GMT