Security on Artur Rios Lab

What to Do If Your Phone Is Lost or Stolen in Brazil

Wed, 21 Oct 2026 23:30:00 +0000

I live in Brazil, where phone theft is common enough that it pays to know the steps before you need them. This tutorial is the checklist I keep for that moment. It covers the tools every Android phone has, Samsung’s in particular because that is what I use, and the Brazilian side: the mobile operator, Anatel’s national blocklist of stolen phones, the federal Celular Seguro programme and the police report (boletim de ocorrência).

The Server

Wed, 21 Oct 2026 17:55:00 +0000

Everything self-hosted runs on one machine: the platform, the deploy server, and every application in three environments. This part covers the machine itself and what is installed on it directly, outside any container.

The machine

Resource	Spec
Provider	Hostinger VPS
vCPU	4 cores
RAM	16 GB
Disk	200 GB NVMe
Bandwidth	16 TB a month
OS	Ubuntu LTS

One machine is a single point of failure, and I accept that knowingly: these are my own projects, an outage costs me an evening, and one well-understood server is easier to keep healthy than three. Whether everything fits on it is the subject of Sizing the Server.

What Are CVE and CWE? Naming Vulnerabilities and the Weaknesses Behind Them

Tue, 20 Oct 2026 23:30:00 +0000

A dependency scanner fails your build with “CVE-2021-44228, critical”. A static analysis tool flags a line of code as “CWE-89”. A vendor’s release notes list a dozen CVE numbers fixed in the latest patch, and a security questionnaire asks how you prevent “the CWE Top 25”. The two acronyms look alike, both are run by the same organisation and both turn up in the same tools, but they answer different questions. CVE answers which vulnerability is this?: it gives one specific, publicly known flaw in one product a name everyone can use. CWE answers what kind of mistake is this?: it names a type of weakness that can occur in any product, and that may cause many vulnerabilities over the years.