Zia Ullah
Chittagong
FCA(ICAP), Odoo certified consultant, Certified QB Proadvisor, IFRS (ICAEW). Senior Partner ZMK - gmn member firm; FM trainer| RTs are not endorsements
Articles by Zia Ullah
Methodological Considerations in Interpreting Dairy-Free Diet Efficacy in Adult Eosinophilic Oesophagitis
DFD dairy-free diet EoE eosinophilic oesophagitis PPI proton pump inhibitor To the Editor, We read with interest the prospective multicenter study by Marinoni et al. examining a 12-week dairy-free diet (DFD) in adults with eosinophilic oesophagitis (EoE) [1]. The study adds useful prospective data to a field in which adult evidence remains limited.
How to Detect Anomalous User Behavior in Your SaaS App with Node.js and Audit Logs
test The call came in on a Tuesday. A customer’s entire contact database was gone. Someone had logged in the night before, run an export, and disappeared. Eleven minutes total. By the time we pulled the logs, the data had been gone for eight hours. The audit log had every event. Login timestamp, IP address, export action, row count, logout time. It was all there. The problem was that nobody was watching it. We had built a perfectly detailed record of a breach and done nothing with it in real time.
Towards decentralized IoT access control scheme with gateway-level cache and blockchain-based trust infrastructure
Abstract The deployment of Internet of Things systems in multiple administrative domains brings high demands on access control mechanisms that are scalable, auditable and interoperable. Existing centralized solutions cannot support cross-domain flexibility, while blockchain-based access control schemes that run authorization logic on-chain are plagued with high transaction latency, low throughput, and high operational cost, ruling them out of the high frequency IoT access scenario.
Shift Left Security: 4 Automated Security Gates in GitHub Actions
Add four automated security gates to every push and pull request. Use npm audit and Snyk to detect vulnerable Node.js dependencies before release. Scan containers with Trivy and analyse application code with CodeQL. Run OWASP ZAP against the live application after the first three checks pass. Document false positives with owners, reasons and expiry dates rather than disabling security controls.
Shift Left Security: 4 Automated Security Gates in GitHub Actions
TL;DR — Key Takeaways Add four automated security gates to every push and pull request. Use npm audit and Snyk to detect vulnerable Node.js dependencies before release. Scan containers with Trivy and analyse application code with CodeQL. Run OWASP ZAP against the live application after the first three checks pass. Document false positives with owners, reasons and expiry dates rather than disabling security controls.
How to Build an AI Agent with Function Calling in Node.js Using Google Gemini
Last year, a client asked me to add a conversational interface to their internal reporting tool. Staff would type a question, and the system would pull a live answer from the database. I had the first version running in a day. Single questions worked. But a week in, a tester typed: "What is the weather in Berlin, and how much would 500 EUR convert to in USD right now?" The model called the weather function, returned that answer, and ignored the second half of the question entirely.
How to Build a Multi-Tenant SaaS API with Node.js, RBAC, and Audit Logging
A colleague asked me to help debug what looked like a permissions issue in their SaaS project management tool. Users were seeing resources they hadn't created. I pulled up the query logs expecting something subtle. It was not. The list endpoint had no tenant_id filter at all. Every tenant in the database could read every other tenant's projects. The application never threw an error. It just returned whatever was there. Missing tenant filters don't throw errors.
How to Manage Secrets Securely with Azure Key Vault in Node.js
Last year a client called me about exactly this. Someone ran git log -p on a hunch and found a .env committed two years earlier, never caught. Database password, Stripe secret, JWT signing key — all still active. All still in production. IBM's 2024 breach cost report put the average data breach at $4.88 million — and that's the average, not the worst cases. Exposed credentials are consistently near the top of root causes.
How to Build a RAG Chatbot for Your Docs with Node.js, Google Gemini, and pgvector
I was helping a team that had a 200-page API documentation PDF. Every new engineer spent their first two weeks Ctrl+F-ing through it, asking the same questions in Slack, getting redirected to the same paragraphs on page 47. The doc was accurate. It was even well-written. But nobody could find anything in it fast enough for it to be useful. That's the problem RAG, or Retrieval-Augmented Generation, solves. The naïve approach is to stuff your entire PDF into a prompt and let the model figure it out.
How to Containerize a Node.js Application with Docker and Deploy with GitHub Actions
If you've been building Node.js projects, you've probably had an experience like this. The project runs fine on your machine, but when you push it to a server, something breaks. Maybe it's a different Node version, maybe an environment variable is missing, or maybe a system dependency doesn't match. You spend an hour debugging something that was never actually a code problem. Docker fixes this at the root. With Docker, you stop shipping just code.
Multi-scale petrographic and geotechnical characterization of Kuldana formation limestone and implications for asphalt concrete stiffness and fatigue design
Abstract This study evaluates the suitability of Kuldana Formation limestone from Nammal Gorge, Salt Range–Potwar Basin, Pakistan, for construction and asphalt pavement applications through integrated petrographic, geotechnical, durability, statistical, and pavement-performance analyses.
How to Build a DevSecOps CI/CD Pipeline on Azure With GitHub Actions
Three years ago, two days before a production push to Azure, I was working through a pull request on a Node.js service. Routine stuff. Then I spotted something in a commit that had been merged two weeks earlier. Already past review, already on the main branch. A Stripe secret key. Not obfuscated, not in a config file. Plain text, right there in the source. Build was green. Tests passed. Nobody had caught it. That incident changed how I think about CI/CD. The problem wasn’t that my team was careless.
How to Implement Role-Based Access Control in a Node.js REST API with JWT
The first time I built an API without thinking about roles, I gave every logged-in user the same access. It worked fine until a regular user accidentally hit a delete endpoint and wiped test data. That was the day I actually sat down and learned RBAC properly. Role-Based Access Control sounds fancy, but the idea is simple: what you can do depends on who you are, not just that you're logged in. An admin deletes users. An editor creates posts. A regular user just reads.
How to Build a DevSecOps CI/CD Pipeline on Azure With GitHub Actions
We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below. The cookies that are categorised as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... Show more For more information on how Google's third-party cookies operate and handle your data, see: Google Privacy Policy
A decision-making framework based on complex fuzzy bipolar soft sets for investment strategy optimization
Abstract Decision-making under uncertainty, bipolarity (positive–negative assessments), and periodic/oscillatory behaviors remains challenging for existing fuzzy and soft set models, often resulting in information loss and unstable rankings. To address this gap, we propose the complex fuzzy bipolar soft set (CFBSS) framework, which integrates complex fuzzy sets (amplitude–phase representation for periodicity) with bipolar soft sets.
Bilateral Brucellar Sacroiliitis Mimicking Tuberculous or Inflammatory Spondyloarthropathy: A Case Report
CRP C-reactive protein ESR Erythrocyte sedimentation rate L4–L5 Lumbar intervertebral level L4–L5 L5–S1 Lumbar–sacral intervertebral level L5–S1 MRI Magnetic resonance imaging PCR Polymerase chain reaction SAT Standard Agglutination Test WBC White blood cell ZN Ziehl–Neelsen 1 Introduction Brucellosis, also called Malta fever, is a zoonotic infection caused by facultative, gram-negative coccobacilli of the genus Brucella.
How to Build One Web App That Works on iOS, Android, and Desktop
I was working on a project a while back where the users had to use the app in three different places. They needed to use it on desktop computers at the office on Android tablets when they were out in the field and on iPhones when they were moving around. This was a problem because we had one team and we did not want to deal with three sets of code. This project made me think about how to make the app work on all these devices.
How to Build a Secure Audit Trail in Your Web App (No Third-Party Tools)
How to Build a Secure Audit Trail in Your Web App (No Third-Party Tools) I never cared for audit trails too much until we did our first compliance review on a healthcare project I was working on. The first question asked of the auditor was: Please provide me with everything you did to this record in the last 90 days. We could not. Not properly, anyway. At that point, I made logging not an afterthought.
A Prothrombotic Shift: Cerebral Venous Sinus Thrombosis in the Recovery Phase of Dengue Fever—A Case Report
AHA American Heart Association ALP alkaline phosphatase ALT alanine aminotransferase ASA American Stroke Association AST aspartate aminotransferase BUN blood urea nitrogen CT computed tomography CVST cerebral venous sinus thrombosis EAN European Academy of Neurology EF ejection fraction eGFR estimated glomerular filtration rate ESO European Stroke Organization GCS Glasgow Coma Scale ICP intracranial pressure MCV mean corpuscular volume MRI magnetic resonance imaging MRV magnetic resonance...
Performance evaluation of machine learning algorithms for predicting liquefaction-induced lateral displacement
Abstract Accurate prediction of liquefaction-induced lateral displacement is essential for seismic risk assessment, resilient infrastructure design, and cost-effective mitigation. Such predictions are complex and cannot be reliably addressed using conventional analytical approaches. This research utilizes XGBoost, CatBoost and AdaBoost algorithms with 247 post-liquefaction in-situ free-face ground condition case studies to model and investigate liquefaction induced lateral displacements.
Evaluation of pulmonary arteries and source of pulmonary blood supply in children with pulmonary atresia and ventricular septal defect using CT angiography
Article Details Ullah, Zia, et al. “Evaluation of Pulmonary Arteries and Source of Pulmonary Blood Supply in Children With Pulmonary Atresia and Ventricular Septal Defect Using CT Angiography”. KHYBER MEDICAL UNIVERSITY JOURNAL, vol. 18, no. 1, Mar. 2026, pp. 40-5, doi:10.35845/kmuj.2026.24000. Original Articles References 1. Lertsakulpiriya K, Vijarnsorn C, Chanthong P, Chungsomprasong P, Kanjanauthai S, Durongpisitkul K, et al.
Financial Crime Horizon Scanner: Sanctions Shifts, Transparency Rules & AML Priorities
Register now for your free, tailored, daily legal newsfeed service. Find out more about Lexology or get in touch by visiting our About page. Register In the latest edition of our Financial Crime Horizon Scanner, we analyze significant forthcoming developments across the UK, EU and US, explaining their implications for businesses and outlining practical next steps.
Financial Crime Horizon Scanner: Sanctions Shifts, Transparency Rules & AML Priorities
Global Global Global In the latest edition of our Financial Crime Horizon Scanner, we analyze significant forthcoming developments across the UK, EU and US, explaining their implications for businesses and outlining practical next steps. Key highlights include: The FCA has intensified its supervisory approach to AML systems and controls, with a sharper focus on proactive oversight and remediation expectations.
Characterization of Normal and Ozone Stressed Moringa Mediated Silver (Ag) Nanoparticles (AgNPs) and Plant Crude Extract Against Pathogenic Strains
1 Introduction Antibiotic-resistant infections, such as those caused by MRSA and multidrug-resistant E. coli, are a rising global concern, leading to prolonged illness, higher medical costs, and increased mortality (WHO 2023). In the search for alternative treatments, silver nanoparticles (AgNPs) synthesized using plant extracts like Moringa oleifera have gained attention for their potent antimicrobial properties.
Decentralized trust optimization in VANETs: A blockchain-driven hybrid PoS-PBFT architecture for enhanced security and energy-efficient communication
Loading metrics Open Access Peer-reviewed Research Article Citation: Ullah A, Ullah Z, Rizvi SS, Shah IA, Kwon SJ (2025) Decentralized trust optimization in VANETs: A blockchain-driven hybrid PoS-PBFT architecture for enhanced security and energy-efficient communication. PLoS One 20(12): e0338618.
A New Insight into Balancing Reactive Oxygen Species in Piezodynamic Therapy
Conflict of Interest The authors declare no conflict of interest. References 1, , , , , , , , Nanoscale 2022, 14, 2649. 2, , , , , , , , , , , , ACS Nano 2022, 16, 2546. 3, , , , , , , , , Chem. Eng. J. 2022, 435, 134624. 4, , , , , , , , , ACS Nano 2021, 15, 11326. 5, , , , , , , Chem. Eng. J. 2022, 435, 135039. 6, , , , , , , , , , , Adv. Sci. 2025, 12, 2500967. 7, , , , , , , , , ACS Appl. Mater. Interfaces 2019, 11, 27297. 8, , , , , , , , , Chem. Eng. J. 2022, 447, 137545. 9, , , , , , , , , Chem. Eng. J.
Horizon Scanner- Financial Crime - UK & EU-wide Developments- August 2025
1 This Horizon Scanner considers legal updates in the United Kingdom and those which have been announced by the European Union which relate to Financial Crime. It does not consider legal updates On the horizon Short-term impact Immediate impact The Economic Crime and Corporate Transparency Act 2023 (“ECCTA”) received Royal Assent on 26 October 2023. Significantly, ECCTA will introduce a new corporate offence of failure to prevent fraud.
How to build a strong sanctions compliance programme
The past decade has seen sanctions move up the risk agenda, becoming one of the most significant risks for businesses operating across multiple jurisdictions. This has been emphasised by the expansive and complex sanctions imposed against Russia, as well as increasing enforcement actions and policy developments across the United Kingdom, European Union and United States, which has caused businesses across all sectors to evaluate sanctions risk and compliance.
Short-Term Comparative Effectiveness of Intra-articular Corticosteroid Injection Versus Hydrostatic Distention in Idiopathic Frozen Shoulder: A Prospective Interventional Study
Specialty Please choose I'm not a medical professional. Allergy and Immunology Anatomy Anesthesiology Biostatistics Cardiac/Thoracic/Vascular Surgery Cardiology Critical Care Dentistry Dermatology Diabetes and Endocrinology Emergency Medicine Epidemiology and Public Health Family Medicine Forensic Medicine Gastroenterology General Practice Genetics Geriatrics Health Policy Hematology HIV/AIDS Hospital-based Medicine I'm not a medical professional.
who_wins⁉️_Corporate_Superheroes_#mercedes__#bmw__and_much_more‼️(720p) - video Dailymotion
00:00I've been standing most alive, killing him against his paralyzed 00:05I've been standing most
a_small_girl_with_very_big_hen._#viral_#trending_#bigabimals(720p) - video Dailymotion
Transcript Display full video transcript 00:00Ah! 00:01Ha! 00:02Ha! 00:03Ha! 00:04Ha!
History of Coffee
We curate & disseminate outstanding stories from diverse domains to create synergy. Inquiries: https://digitalmehmet.com/ Subscribe to our content marketing strategy: https://drmehmetyildiz.substack.com/ How Humans came around to drink coffee. One day, around 850 CE in Ethiopia, a goatherder named Kaldi observed that after nibbling on some berries, his goat started acting frantically. He tried it for himself, and soon, he was just as hyper.
How Humans Domesticated Cats?
Member-only story How did the animals that contribute nothing in the way of sustenance or work to humans find commonplace in our homes? Dr. Zia Ullah · Follow Published in Follower Booster Hub · 5 min read · -- Photo by Jae Park on Unsplash Until recently scientists had no way of determining when and where wildcats gave rise to the tamed domestic kind.
Why South Asians Use Chopsticks
Photo by Max Griss on Unsplash Member-only story An invention that is at least three thousand years old Dr. Zia Ullah · Follow Published in Follower Booster Hub · 3 min read · -- Chopsticks are used by billions of people around the world. Their surge in popularity in recent years across different cuisines is noteworthy. It’s important to remember that chopsticks have been part of Chinese cuisine for centuries. First Chopstick.
Implication of Bimodal Magnetic Resonance and Fluorescence Imaging Pro
Back to Journals » International Journal of Nanomedicine » Volume 20 Authors Gong T, Ullah Z, Roy S , Cheng C , Li M, Cheng J, Zhang Y, Guo B , Qiu Y Received 23 February 2025 Accepted for publication 16 July 2025 Published 29 July 2025 Volume 2025:20 Pages 9473—9503 DOI https://doi.org/10.2147/IJN.S524454 Checked for plagiarism Yes Review by Single anonymous peer review Peer reviewer comments 5 Editor who approved publication: Professor Farooq A.
Doping Efficiency of Poly(benzodifurandione) from First Principles
Introduction Click to copy section linkSection link copied! Poly(benzodifurandione) (PBFDO) is a solution-processed, sidechain-free n-type conductive polymer (n-CP) (1) that has recently attracted significant attention in fields such as organic electronics (2−5) and, in particular, thermoelectrics (TE).
Mummies Of China?
Mummies of Western Physical Appearance In China? Dr. Zia Ullah · Follow Published in Teatime History · 4 min read · -- Since the 1990s, the discovery of mummies in Xinjiang’s Tarim Basin region of China has attracted much international attention due to their so-called Western appearance. The Mummies were found in boat-shaped coffins that used oars as grave marks. © Wenying Li, Xinjiang Institute of Cultural Relics and Archaeology. Source: MPG Natural Mummies.
Embracing the van life spirit without sacrificing comfort
Zia Ullah · Follow 1 min read · -- Take Vanlife, not giving up on comfort, and without losing any freedom to explore and live under your conditions, becoming increasingly popular. For those who do appreciate comfort but do not want to give up on them for the adventure, there is a solution: bring an experience of Vanlife to your home.
The beauty of staying beautiful after 40
Zia Ullah · Follow 2 min read · -- The beauty of staying beautiful after 40 You don’t need expensive skincare, trendy workout routines, or strict diets to look better than 99% of people over 40. Consistency is all it takes. *The sequence is a key * The sequence forms a basis of successful health and health plans. In most cases, it is not only when it’s practical but also a healthy choice. You see real results when you prioritize the sequence.
Where Do Numbers Come From
Most of us give very little consideration to how the numbers that we use came about. Did they always exist? If not then who developed them? Dr. Zia Ullah · Follow Published in ILLUMINATION · 7 min read · -- Before the numbers were written the way they are today, our ancestors likely used to draw lines to count everyday things like animals and to compare quantities. These lines were called tally marks.
The 8 Year-Long Blockage of the Suez Canal
The recent blockage of the canal by the cargo ship Ever Given is not the first time the Suez Canal stopped operating Dr. Zia Ullah · Follow Published in ILLUMINATION · 4 min read · -- Ships anchored in the canal — Source: opindia.com The Suez Canal is an important waterway for global trade, as it decreases the distance for ships by 8,900 km and also saves ten days. The blockage of the canal even for a day affects the global economy.
Heart Health Check
Zia ullah · Follow 3 min read · -- Most likely, one of the people in your family or among your acquaintances has experienced a heart attack. Striking wealthy and poor equally, cardiovascular diseases — diseases of the heart and the blood vessels — are killing more and more people worldwide. Those that make it out of a beart offack phen must have lengthy term medical therapy.
The Man Who Fought With a Longbow in World War 2
Jack Churchill fought in WW2 with medieval weapons Dr. Zia Ullah · Follow Published in ILLUMINATION · 3 min read · -- Fan art of Jack Churchill — Source: Facebook.com World War 2 brought some of the greatest technological advancements in human history such as radar and computers. It wasn’t just a war for territory, it was also a war for the technological upper hand. Among all this was a British officer who fought the war with medieval weapons.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Zia
Contact Zia, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack