HannSoft

Software house in Lahore building mobile apps, AI and secure backends for teams worldwide. Makers of KN92. Deep dives, builds and behind the scenes.

[HannSoft @hannsoft_org]

Two machines on a network that can lose messages can never be certain they agree. That was proven in 1975, and every payment API is built around it.

#DistributedSystems #SystemDesign #BackendEngineering

[HannSoft @hannsoft_org]

Part 2 of our buffer pool series. A large scan can push every hot page out of a plain LRU buffer pool. PostgreSQL moved through ARC, 2Q and clock sweep to solve it. MySQL's InnoDB kept LRU and split the list.

#MySQL #InnoDB #DatabaseInternals #SystemDesign #HannSoft

[HannSoft @hannsoft_org]

In January 2005, PostgreSQL 8.0 shipped ARC (adaptive replacement cache), an algorithm from IBM Research that stops one large scan from flushing every hot page out of the buffer pool.

#PostgreSQL #DatabaseInternals #SystemDesign #BackendEngineering #HannSoft

[HannSoft @hannsoft_org]

After the $6.36B Binance theft (per TRM Labs), stablecoin issuers moved before the exchange did. Tether froze the main receiving wallet at 21:01 UTC; Binance reportedly paused withdrawals more than an hour later.

#Binance #CryptoSecurity #EIP7702 #Web3Security #HannSoft

[HannSoft @hannsoft_org]

On 29 October, $6.36B left Binance wallets across ten blockchains, most of it within about 20 minutes (per TRM Labs)

#Binance #CryptoSecurity #EIP7702 #Ethereum #HannSoft

[HannSoft @hannsoft_org]

Kafka said OK and the payment was gone. acks, ISR, min.insync.replicas, and why exactly-once won’t stop a double charge. Part 3 of 3.

Comment KAFKA and I’ll send you our Kafka production checklist.

#Kafka #ApacheKafka #SystemDesign #HannSoft #SoftwareEngineering

[HannSoft @hannsoft_org]

We added one consumer and throughput hit zero. Consumer groups, rebalances, and the 3 settings that fixed it. Part 2 of 3. Config in the pinned comment.

#Kafka #ApacheKafka #SystemDesign #HannSoft #SoftwareEngineering

[HannSoft @hannsoft_org]

Kafka doesn’t delete a message when you read it. Offsets, replay, retention, and the partition trap that breaks ordering. Part 1 of 3. Commands in the pinned comment.

#Kafka #ApacheKafka #SystemDesign #HannSoft #SoftwareEngineering

[HannSoft @hannsoft_org]

A hot key expires and 10,000 requests hit your database at once. The lock that fixes it, and the release bug to avoid. Comment REDIS for the production checklist.

#Redis #CacheStampede #SystemDesign #HannSoft #SoftwareEngineering

[HannSoft @hannsoft_org]

Interview question: your cache and database disagree. The weak answer, the strong answer, and the follow-up trap. Full pattern in the pinned comment.

Follow for the next interview question.

#Redis #SystemDesign #CodingInterview #HannSoft #SoftwareEngineering

[HannSoft @hannsoft_org]

Redis executes commands on a single thread (I/O threads exist since 6.0). Here’s why that’s fast, and the one command that stalls every client. Commands in the pinned comment.

#Redis #BackendEngineering #SystemDesign #HannSoft #SoftwareEngineering

[HannSoft @hannsoft_org]

What SBI confirmed on 21 October 2026: it reviewed about 3.75 lakh records found on the dark web, and 3,897 of them held customers' personal details. Alerts reached the bank on 16 October, including from CERT-In.

#SBI #DataBreach #CyberSecurity #Banking #PHP2Shell #HannSoft

[HannSoft @hannsoft_org]

How to fix PHP2Shell, the critical PHP flaw disclosed on 21 October 2026.

#PHP #PHP2Shell #CyberSecurity #DevOps #HannSoft #SoftwareDevelopment

[HannSoft @hannsoft_org]

PHP runs most of the web. On 21 October 2026 it got a critical security hole called PHP2Shell.

It is two bugs inside PHP itself (CVE-2026-109618 and CVE-2026-109619), both rated 9.2 out of 10. An attacker needs no login. Your code can be perfect and the server is still exposed.

[HannSoft @hannsoft_org]

A critical flaw in PHP itself went public on 21 October 2026. It's called PHP2Shell (CVE-2026-109618 and CVE-2026-109619), it is rated 9.2 out of 10, and it allows unauthenticated remote code execution on unpatched servers. Exploitation has already been reported.
#PHP #PHP2Shell

[HannSoft @hannsoft_org]

9 out of 10 apps fail their first security audit. Hardcoded secrets, no certificate pinning, client-only checks. We find and fix them in 5-10 days.
WhatsApp [phone] https://t.co/4hWSig2PY1

#Hannsoft #AppDevelopment #AndroidSecurity #CyberSecurity #AppSecurity #PenTesting

[HannSoft @hannsoft_org]

It ships on time. It scales past your first 10,000 users. It survives with security, tests, and monitoring built in.

Free 30-min call WhatsApp [phone] https://t.co/4hWSig2PY1

#Hannsoft #AppDevelopment #SoftwareHouse #MobileApps #ScalableSoftware #QualityCode #DevOps

[HannSoft @hannsoft_org]

40+ apps shipped. 6 services. 100% of code and IP handed to you. 30-day warranty on everything.

Free 30-min call. WhatsApp: [phone] https://t.co/4hWSig2PY1

#Hannsoft #AppDevelopment #SoftwareHouse #MobileApps #TechAgency #SoftwareCompany #Results #Pakistan

[HannSoft @hannsoft_org]

Book a free 30-minute discovery call. An honest take on your idea, scope challenge, and fixed quote within 3 business days.
Free 30-min call: WhatsApp [phone] https://t.co/4hWSig2PY1

#Hannsoft #AppDevelopment #SoftwareHouse #MobileApps #FreeConsultation #AppIdea #Startup

[HannSoft @hannsoft_org]

Built to handle 10,000 users. TypeScript, React, Flutter, Kotlin, Swift, Node, Python, AWS, and more. Full Git repo handed to you.

Free 30-min call. WhatsApp: [phone] https://t.co/4hWSig2PY1

#Hannsoft #AppDevelopment #SoftwareHouse #MobileApps #Flutter #ReactJS #NodeJS