Day 23 is all about Security

March 25, 2026

Security Measures and Permissions

    Today was almost entirely focused on the security side of the notification system. Once you start sending automated emails from a web application, you open a surface area that needs to be protected such as things like making sure API credentials are stored properly, that the email triggers cannot be manipulated by unauthorized actions, and that the system behaves predictably even when someone tries to interact with it in ways it was not designed for.

    We went through our implementation and identified a few areas that needed tightening. Nothing alarming, but the kind of things you catch when you are looking specifically for vulnerabilities rather than just checking if the feature works. There is a difference between a feature that functions and a feature that functions securely, and we wanted to make sure we were building the latter.

    I also spent some time today thinking about the upcoming virtual presentation. It is sitting at the back of my mind with increasing weight. We have a good system taking shape, but presenting it to the College of Engineering Dean is a different kind of pressure. I want what we show to reflect the effort we have put in. The notification system needs to be working properly before that happens as it will be a highlight of the features I expect will matter most to the actual users.

Comments

Popular posts from this blog

First Day on the Job - Orientation (February 23, 2026 | Monday)

Figma is the Tool of Socrates

Tuesday First Day of the Coding Phase