Writing
Posts
Weekly AI roundups, research notes, and essays — written for engineers, students, and curious readers in Bangladesh and beyond.
Featured
This week
The Name That Matched Twice: Unicode Normalization, Grapheme Clusters, and Getting Bengali Text Right
The same Bengali name can arrive as two different byte sequences, and your unique index, your search box and your audit log will each disagree about whether it is one …
Feature
The Complete Guide to LLM Benchmarks (2026): What They Measure, How They Work, and Which One to Use
If you are new to AI development and find LLM leaderboards confusing, this is the guide I wish I had. We walk through every benchmark that matters in 2026 — MMLU-Pro, …
Essays & Guides
Writing worth keeping
The Username That Ate the Password: Argon2id, NIST SP 800-63B-4, and Storing Passwords in 2026
Between July and October 2024, an Okta login path accepted any password for some users, because bcrypt reads only the first 72 bytes of its input and a long username …
The Primary Key That Knew What Time It Was: UUIDv7, RFC 9562, and Choosing Identifiers That Age Well
RFC 9562 replaced the 2005 UUID specification in May 2024 and added UUIDv7: a 48-bit Unix millisecond timestamp followed by random bits, so identifiers sort by creation …
The Login Link Landed in Spam: SPF, DKIM, DMARC, and the Year DMARC Became a Standard
If your product signs people in with a one-time code or a magic link, email is part of your authentication system, and three DNS records decide whether that email …
The Instruction Was in the Ticket: Designing LLM Agents That Survive Prompt Injection
EchoLeak, the GitHub MCP leak, and the Supabase support-ticket exfiltration all had the same shape: an agent read text an attacker wrote, and that text chose the agent's …
The Token That Published the Worm: Trusted Publishing, Sigstore, and Provenance After Shai-Hulud
Shai-Hulud did not exploit npm. It read publish tokens out of developers' .npmrc files and environment variables, used them to push poisoned versions of the victims' …
The Certificate Nobody Renewed: 47-Day TLS, ACME Renewal Information, and the End of Revocation as a Safety Net
The 200-day certificate limit has been in force since 15 March 2026. The 100-day limit arrives on 15 March 2027 and the 47-day limit two years after that, with …
The Series
Ai Weekly
Five global stories and five from home, every week.
Latest issue
October 2026
Weekly AI Roundup: What Happened in AI This Past Week (October 24–30, 2026)
Four global AI stories that mattered this week, and four that hit closer to home in Bangladesh. Globally, it was a week of companies writing down, in formal documents, …
Weekly AI Roundup: What Happened in AI This Past Week (October 17–23, 2026)
Five global AI stories that mattered this week, and five more that hit closer to home in Bangladesh. Globally, the week's biggest story was a security emergency in the …
Weekly AI Roundup: What Happened in AI This Past Week (October 10–16, 2026)
Five global AI stories that mattered this week, and five more that hit closer to home in Bangladesh. Globally, it was the week the regulators arrived, all at once and …
Weekly AI Roundup: What Happened in AI This Past Week (September 26–October 2, 2026)
Five global AI stories that mattered this week, and five more that hit closer to home in Bangladesh. Globally, it was a week of whiplash: OpenAI pulled its next model …
September 2026
Weekly AI Roundup: What Happened in AI This Past Week (September 19–25, 2026)
Five global AI stories that mattered this week, and five more that hit closer to home in Bangladesh. Globally, it was UN week, and AI was on every agenda: a UN scientific …
Weekly AI Roundup: What Happened in AI This Past Week (September 12–18, 2026)
Five global AI stories that mattered this week, and five more that hit closer to home in Bangladesh. Globally, the week belonged to an unusual argument: the CEO of a …
Weekly AI Roundup: What Happened in AI This Past Week (September 5–11, 2026)
Five global AI stories that mattered this week, and five more that hit closer to home in Bangladesh. Globally, the industry spent the week proving and policing itself at …
Weekly AI Roundup: What Happened in AI This Past Week (August 29 – September 4, 2026)
Five global AI stories that mattered this week, and five more that hit closer to home in Bangladesh. Globally, the industry kept consolidating and kept confessing in the …
August 2026