<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>0xali Blog</title>
    <link>https://0xali.dev/blog/</link>
    <description>Late night engineering stuff. Digging into APIs, client-side decryption, and what breaks along the way.</description>
    <language>en-us</language>
    <lastBuildDate>Sat, 22 Aug 2026 00:00:00 GMT</lastBuildDate>
    <atom:link href="https://0xali.dev/rss.xml" rel="self" type="application/rss+xml"/>
    <item>
      <title><![CDATA[Why AI Jargon Is Just Old Software in a New Suit]]></title>
      <link>https://0xali.dev/blog/posts/why-ai-jargon-is-old-software/</link>
      <guid isPermaLink="true">https://0xali.dev/blog/posts/why-ai-jargon-is-old-software/</guid>
      <description><![CDATA[Translating modern AI and LLM engineering buzzwords back into plain English: why loop engineering is a while loop, ReAct agents are API calls, agentic graphs are state machines, guardrails are input validation, and harnesses are middleware.]]></description>
      <category><![CDATA[Engineering]]></category>
      <pubDate>Sat, 22 Aug 2026 00:00:00 GMT</pubDate>
      <author>hi@0xali.dev (Ali Abbas)</author>
    </item>
    <item>
      <title><![CDATA[Real-Time Team Availability Widget from Inbound Outlook Emails]]></title>
      <link>https://0xali.dev/blog/posts/realtime-team-availability-widget/</link>
      <guid isPermaLink="true">https://0xali.dev/blog/posts/realtime-team-availability-widget/</guid>
      <description><![CDATA[Engineering a zero-friction, cross-platform availability widget using Resend inbound email webhooks, Deno Edge Functions, Supabase Realtime, and smart reset rules.]]></description>
      <category><![CDATA[Systems Architecture]]></category>
      <pubDate>Wed, 22 Jul 2026 00:00:00 GMT</pubDate>
      <author>hi@0xali.dev (Ali Abbas)</author>
    </item>
    <item>
      <title><![CDATA[Reverse-Engineering a Free Streaming Platform's Obfuscated Videos]]></title>
      <link>https://0xali.dev/blog/posts/reverse-engineering-streaming-woff/</link>
      <guid isPermaLink="true">https://0xali.dev/blog/posts/reverse-engineering-streaming-woff/</guid>
      <description><![CDATA[Analyzing how free streaming sites obfuscate fragmented MP4 video segments inside fake WOFF font files, dumping moof/mdat headers, and remuxing with FFmpeg.]]></description>
      <category><![CDATA[Reverse Engineering]]></category>
      <pubDate>Sat, 18 Jul 2026 00:00:00 GMT</pubDate>
      <author>hi@0xali.dev (Ali Abbas)</author>
    </item>
    <item>
      <title><![CDATA[Virtual Browsers for Document Verification: A Trust-Based Workaround]]></title>
      <link>https://0xali.dev/blog/posts/diro-virtual-browser-fraud-detection/</link>
      <guid isPermaLink="true">https://0xali.dev/blog/posts/diro-virtual-browser-fraud-detection/</guid>
      <description><![CDATA[Analyzing Diro's document fraud detection mechanism and the security trade-offs of entering banking credentials in remote virtual browsers.]]></description>
      <category><![CDATA[Security]]></category>
      <pubDate>Wed, 15 Jul 2026 00:00:00 GMT</pubDate>
      <author>hi@0xali.dev (Ali Abbas)</author>
    </item>
    <item>
      <title><![CDATA[Boosting React Native Performance with Rust, JSI, and WASM]]></title>
      <link>https://0xali.dev/blog/posts/react-native-rust-jsi-wasm/</link>
      <guid isPermaLink="true">https://0xali.dev/blog/posts/react-native-rust-jsi-wasm/</guid>
      <description><![CDATA[Integrating Rust with React Native using JavaScript Interface (JSI) and WebAssembly (WASM) to eliminate bridge serialization overhead.]]></description>
      <category><![CDATA[Engineering]]></category>
      <pubDate>Fri, 10 Jul 2026 00:00:00 GMT</pubDate>
      <author>hi@0xali.dev (Ali Abbas)</author>
    </item>
    <item>
      <title><![CDATA[Bitcoin RGB Smart Contracts inside a Lightning Wallet]]></title>
      <link>https://0xali.dev/blog/posts/bitcoin-rgb-lightning-wallet/</link>
      <guid isPermaLink="true">https://0xali.dev/blog/posts/bitcoin-rgb-lightning-wallet/</guid>
      <description><![CDATA[Integrating the Rust-based rgb-lib in a React Native Bitcoin Lightning wallet using Kotlin JNI bindings to issue RGB20, RGB21, and RGB25 assets.]]></description>
      <category><![CDATA[Bitcoin]]></category>
      <pubDate>Sun, 05 Jul 2026 00:00:00 GMT</pubDate>
      <author>hi@0xali.dev (Ali Abbas)</author>
    </item>
    <item>
      <title><![CDATA[KYC Name Mismatch & Appended S/O Data in Bank APIs]]></title>
      <link>https://0xali.dev/blog/posts/kyc-name-mismatch/</link>
      <guid isPermaLink="true">https://0xali.dev/blog/posts/kyc-name-mismatch/</guid>
      <description><![CDATA[Investigating KYC verification failures caused by core banking APIs appending father's name (S/O) to account holder beneficiary names.]]></description>
      <category><![CDATA[Finance]]></category>
      <pubDate>Sun, 28 Jun 2026 00:00:00 GMT</pubDate>
      <author>hi@0xali.dev (Ali Abbas)</author>
    </item>
    <item>
      <title><![CDATA[UIDAI Aadhaar CAPTCHA Bypass Vulnerability]]></title>
      <link>https://0xali.dev/blog/posts/uidai-captcha-weakness/</link>
      <guid isPermaLink="true">https://0xali.dev/blog/posts/uidai-captcha-weakness/</guid>
      <description><![CDATA[Discovering a security vulnerability in UIDAI's Aadhaar verification API allowing client-controlled captchaLength reduction down to 1 character.]]></description>
      <category><![CDATA[Security]]></category>
      <pubDate>Sat, 20 Jun 2026 00:00:00 GMT</pubDate>
      <author>hi@0xali.dev (Ali Abbas)</author>
    </item>
    <item>
      <title><![CDATA[Digilocker OAuth Spoofing & Parameter Injection Vulnerability]]></title>
      <link>https://0xali.dev/blog/posts/digilocker-oauth-vulnerability/</link>
      <guid isPermaLink="true">https://0xali.dev/blog/posts/digilocker-oauth-vulnerability/</guid>
      <description><![CDATA[Demonstrating how unvalidated base64 app_name and partner_name URL parameters in DigiLocker OAuth allow attacker impersonation of legitimate banks.]]></description>
      <category><![CDATA[Security]]></category>
      <pubDate>Mon, 15 Jun 2026 00:00:00 GMT</pubDate>
      <author>hi@0xali.dev (Ali Abbas)</author>
    </item>
    <item>
      <title><![CDATA[Bypassing Client-Side Validation & Disabled Form Inputs]]></title>
      <link>https://0xali.dev/blog/posts/bypassing-disabled-inputs/</link>
      <guid isPermaLink="true">https://0xali.dev/blog/posts/bypassing-disabled-inputs/</guid>
      <description><![CDATA[Why relying purely on HTML disabled attributes and client-side UI validation creates severe security flaws in multi-step workflows and cloud portals.]]></description>
      <category><![CDATA[Web Security]]></category>
      <pubDate>Mon, 08 Jun 2026 00:00:00 GMT</pubDate>
      <author>hi@0xali.dev (Ali Abbas)</author>
    </item>
    <item>
      <title><![CDATA[Decrypting Utkarsh Small Finance Bank Response Payloads]]></title>
      <link>https://0xali.dev/blog/posts/utkarsh-bank-decryption/</link>
      <guid isPermaLink="true">https://0xali.dev/blog/posts/utkarsh-bank-decryption/</guid>
      <description><![CDATA[Reverse engineering client-side AES response decryption in Utkarsh Small Finance Bank web portal, finding dynamic salt values in HTTP flows.]]></description>
      <category><![CDATA[Reverse Engineering]]></category>
      <pubDate>Mon, 01 Jun 2026 00:00:00 GMT</pubDate>
      <author>hi@0xali.dev (Ali Abbas)</author>
    </item>
    <item>
      <title><![CDATA[Hacking TimesPrime: Finding Hidden API Offers to Pay 1 Rupee]]></title>
      <link>https://0xali.dev/blog/posts/timesprime-hidden-offers/</link>
      <guid isPermaLink="true">https://0xali.dev/blog/posts/timesprime-hidden-offers/</guid>
      <description><![CDATA[Reverse engineering TimesPrime and Juspay checkout APIs to discover hidden voucher discount codes and pay ₹1 for subscription.]]></description>
      <category><![CDATA[Reverse Engineering]]></category>
      <pubDate>Mon, 25 May 2026 00:00:00 GMT</pubDate>
      <author>hi@0xali.dev (Ali Abbas)</author>
    </item>
    <item>
      <title><![CDATA[Credit Card Rejection & Client-Side AES Decryption (Posidex Dedupe)]]></title>
      <link>https://0xali.dev/blog/posts/credit-card-rejection/</link>
      <guid isPermaLink="true">https://0xali.dev/blog/posts/credit-card-rejection/</guid>
      <description><![CDATA[Decrypting bank credit card rejection response payloads using CryptoJS AES to uncover Posidex demographic dedupe rejection reasons.]]></description>
      <category><![CDATA[Reverse Engineering]]></category>
      <pubDate>Mon, 18 May 2026 00:00:00 GMT</pubDate>
      <author>hi@0xali.dev (Ali Abbas)</author>
    </item>
  </channel>
</rss>
