RSSAmplifier

Blog

Lucas Fernandes Aguiar on Home

Recent content in Lucas Fernandes Aguiar on Home

lucasaguiar.xyzRSS feed ↗79 posts

Latest posts

How to Reduce CVEs in Your Docker Images: Container Security Guide [2026]

It starts innocently enough. You pull a popular image, run docker scan or Trivy out of curiosity, and suddenly you are staring at a wall of red: hundreds of vulnerabilities in a container you built yesterday. The common reaction is panic, then dismissal — “it’s just a base image, everyone runs this.” Both reactions are wrong. Reducing CVEs in container images is not about…

Trademark Prior Art Search at INPI: Complete Step-by-Step Guide

The prior art search is step zero of any trademark strategy in Brazil — and the most neglected one. Filing a trademark application with INPI without first checking whether the mark already exists is betting against the odds: applications that collide with earlier marks are denied based on Art. 124, item XIX, of the Industrial Property Law (Law No. 9,279/96), which prohibits the registration of a…

SQLite WAL Corruption: How to Detect, Fix and Prevent It in you Homelab [2026]

SQLite is everywhere: on your phone, in your browser, in most self-hosted apps, and even as the primary database of large production services. It is “boring technology” in the best way — until it isn’t. In August 2026, Tailscale published the story of how a rare data race in SQLite’s checkpointing code corrupted databases across their control plane for six months, in 19…

LLM API Security in 2026: How to Inspect AI Traffic and Protect Your Keys

Two things happened in August 2026 that most developers missed. Researchers from the ELLIS Institute Tübingen and the Max Planck Institute published a paper showing they could recover the hidden reasoning of frontier LLMs — from Anthropic, OpenAI, and Google — by replaying encrypted thinking blocks into weaker models. Around the same time, an engineer named Rafael put GitHub Copilot behind a MitM…

INPI Patent Services Module: practical guide to access, testing, and migration

INPI is in the final stretch of migrating patent services to the new Patent Services Module. The homologation platform — the test environment open to users — is available until August 14, 2026 . As of August 19 , filing patent applications will be done exclusively through the new module, with the Electronic Filing system (service 200) retired for this purpose. For those who file patents in Brazil…

How to Detect and Block Bot Traffic on Your Self-Hosted Website [2026]

It’s Saturday morning. You open your analytics dashboard to see how your self-hosted blog did this week — and there it is: 4,000 “visitors” over the weekend, each one landing on a single page and leaving instantly. You know you didn’t have 4,000 readers. You had maybe forty, and the other 3,960 were machines. You are not alone. A post that made the front page of Hacker News…

Stateless MCP Guide [2026]: What Changed in the Model Context Protocol 2.0

You have an AI agent, a database, and a growing suspicion that wiring them together should not require a custom integration every single time. That is the exact problem the Model Context Protocol (MCP) was built to solve — and in July 2026 it got its most significant update since launch: stateless MCP , the defining change of the 2026-07-28 specification (informally, MCP 2.0). This guide covers…

How to Fine-Tune an LLM on a Consumer GPU: LoRA and QLoRA Guide [2026]

Your desktop has an RTX 3060 with 12GB of VRAM. Or maybe an old laptop with a 4GB card. You want to teach an LLM your domain — your codebase’s conventions, your support tickets, your writing voice. Every tutorial you find starts with “provision an A100 with 80GB” or “rent a cluster”. So you assume fine-tuning is out of reach. It isn’t. In 2026, fine-tuning a…

How to Run 70B LLMs on a 4GB GPU: Low-VRAM Inference Guide [2026]

Your GPU has 4GB of VRAM. Every tutorial you find says you need at least 24GB — ideally 80GB — to run anything serious. A 70B model is 140GB of weights in FP16. The math doesn’t work, so you assume local AI is out of reach. That assumption is wrong. In 2026, running 70B-class models on a 4GB card is a solved problem — not with heroic hacks, but with three well-understood techniques:…

How to Structure Technical Documentation: A Diátaxis Guide [2026]

You know the feeling. You land on a project’s docs page to solve one specific problem — “how do I configure the timeout?” — and you get a wall of prose that explains the product’s philosophy for three paragraphs before getting to anything usable. Or worse: the page is called a “tutorial” but it’s actually a list of commands with zero context, and you have…

Personal Software in the AI Era: How Anyone Can Build Apps for an Audience of One

It starts with a problem that no app in the App Store solves. For Adam Waxman, it was a PDF from a sleep consultant full of conditional logic — wake windows, nap caps, what to do when a nap fails. His family needed a live schedule that re-plans itself when a nap runs short, shared between him, his wife, and the nanny. No startup was ever going to build that. So he built it himself, in a week of…

AI Session Portability: Why Your AI Conversations Are Becoming Lock-In [2026]

The original promise of an inference API was wonderfully simple: send some input, receive some output, and if you kept both, you had the conversation. You could inspect it, archive it, replay it, or hand it to a different model. The transcript belonged to you. That abstraction is quietly breaking. A growing share of what an AI session produces — reasoning tokens, search evidence, compaction state,…

Stacked Pull Requests: Complete Guide and Best Practices [2026]

It is Wednesday at 3 PM. You just pushed a 1,200-line pull request that refactors an API endpoint, adds a database migration, and updates the frontend components that consume the new shape. You know what happens next: the review sits untouched for two days, comes back with “this is too big, can you split it?”, and by the time you circle back you have forgotten half of what the code…

Docker Containers vs Virtual Machines: Complete Comparison Guide [2026]

It’s Thursday night and you’re planning a new homelab project. You need to run a few services — perhaps a PostgreSQL database, an nginx reverse proxy, a self-hosted Git server, and maybe an Open WebUI instance for local LLM access. The question hits you immediately: should each service live in its own VM, or should you use Docker containers? Or maybe LXC containers inside Proxmox? And…

PostgreSQL Performance Best Practices for Homelab and Self-Hosted [2026]

You have spun up a PostgreSQL container on your Proxmox LXC. Your self-hosted services (Nextcloud, GitLab, Paperless-ngx, maybe even your own app) all depend on it. Everything works — until it doesn’t. Queries slow down, the disk starts thrashing, and your homelab’s database becomes the bottleneck. PostgreSQL, out of the box, is configured for a desktop workstation with generous…

Self-Hosted Speech-to-Text in Your Homelab: A Practical Guide [2026]

It is 10 PM on a Wednesday. You have just recorded a 45-minute brainstorming session, a podcast episode with a friend, or a lecture you need to revisit. Your options: send the audio to a cloud service and pay per minute (plus hope they are not training on your conversation), or spend an hour transcribing by hand. Neither is acceptable for a homelab operator in 2026. The good news: local…

How to Run LLMs on Old Server Hardware: A Practical Homelab Guide [2026]

You have an old server gathering dust in the garage — a retired PowerEdge, a repurposed Proxmox node, maybe an HP workstation from 2013. Somebody told you that running AI locally requires an NVIDIA H100 or at least an RTX 4090. That is not true. Running modern LLMs on old enterprise iron with no GPU is not only possible — it is practical. This guide covers the hardware you need, the software stack…

Git History in 2026: Complete Guide to fixup, reword, and split Commands

You’re three commits deep on a feature branch when you spot it: a typo in a commit message from two commits ago, and a bug in the code from three commits back. Normally this means git rebase -i , an interactive session, manual fixup of conflicts, and picking up the pieces of your working tree afterward. If you’ve ever had a rebase go sideways and leave your repository in a…

How to Safely Run AI Coding Agents: A Practical Sandboxing Guide [2026]

An AI coding agent with filesystem access is a vulnerability waiting to happen. Last week, it was Grok CLI uploading an entire home directory to Google Cloud Storage. Next week, it could be your API keys, your SSH keys, or your client’s database credentials ending up somewhere they should not be. The problem is structural: AI coding agents need broad system access to be useful. They install…

How AI Coding Agents Actually Work: An Architectural Guide [2026]

When Terence Tao — one of the most celebrated mathematicians alive, a Fields Medalist, someone who has spent decades pushing the boundaries of human reasoning — sat down last week to port 25-year-old Java applets to modern JavaScript, he didn’t write a single line of code by hand. He described what he wanted to an AI agent, reviewed the output, and in a few hours had working applets that had…

KVM and Virsh on Linux: Complete Guide to Virtual Machines [2026]

KVM (Kernel-based Virtual Machine) is a type-1 hypervisor built directly into the Linux kernel since version 2.6.20 (2007). It turns the Linux kernel into a bare-metal hypervisor — no host OS overhead, no extra abstraction layer — just your hardware, the kernel, and virtual machines running at near-native performance. On top of KVM sits libvirt , a management daemon that provides a stable API and…

Geographical Indication at INPI: Complete Guide [2026]

A Geographical Indication (GI) identifies a product or service whose qualities, reputation, or characteristics are essentially due to its geographical origin. In Brazil, GIs are regulated by the Industrial Property Law (Law No. 9.279/96) and registered with the INPI. This guide covers all practical aspects: the types of GI, who can apply, the required documents, costs, and the step-by-step…

GitLost [2026]: How Prompt Injection in GitHub's AI Agent Leaks Private Repos

On July 6, 2026, Noma Labs disclosed GitLost , a critical prompt injection vulnerability in GitHub’s new Agentic Workflows feature. The attack allows an unauthenticated attacker to silently exfiltrate data from private repositories — simply by posting a crafted GitHub Issue in a public repository belonging to the same organization. At 445 points on Hacker News and climbing, this is one of…

INPI opens public consultation on position marks [2026]: new rules and how to participate

The INPI has opened Public Consultation INPI nº 01/2026 to discuss the new registration criteria applicable to position marks — trademark signs constituted by the way an element is positioned on a product. Interested parties have until July 24, 2026 to submit contributions. The consultation was published on June 9, 2026 in the Official Gazette of the Union (issue 105, section 1, page 127) and in…

SubQ: The First Fully Subquadratic LLM — Cost Comparison with Transformers [2026]

There is a fundamental problem in all the large language models you use today — and it has to do with high school math. The heart of the Transformer is attention : each token needs to compare itself with every other token. A 1,000-word text requires 1 million comparisons (1,000²). A 1 million-token text requires 1 trillion comparisons . The computational cost grows with the square of the context —…

Government Establishes National Program for Radical Health Innovation (PNIRS) [2026]

The Ministry of Health published in the Official Gazette of the Union on July 6, 2026, the Ordinance GM/MS No. 11.921 , which establishes the National Program for Radical Innovation in Health (PNIRS) within the scope of the Ministry of Health. The ordinance, signed by Minister Alexandre Rocha Santos Padilha , amends the Consolidation Ordinance GM/MS No. 5 of September 28, 2017, to insert Annex…

INPI Opens Scholarship of R$ 6 Thousand for Research on Technical Divergences in Trademarks [2026]

INPI published on this Tuesday, July 7, 2026, the notice for the selection process to grant a research assistant scholarship under the Industrial Property Development Program (PDPI). The project’s objective is the “Consolidated identification of technical divergences between decisions of the 1st and 2nd administrative instances in trademark matters” . Value and Duration The…

How to set up Google Search Console with your Hermes agent

I had been following Google Search Console for a while, but the workflow was manual and tedious: opening the panel, copying queries, pasting them into my agent. It can be done much better. In this tutorial I show how to connect Search Console directly to Hermes — the AI agent running on my homelab — using an MCP server, so it reads clicks, impressions, and queries via API . I’ll cover both…

Claude Fable 5 lies, forms cartels and rationalizes its own unethical behavior — what the latest alignment test reveals [2026]

On June 9, 2026, Andon Labs published an article that quickly became one of the most discussed on Hacker News (152 points, 102 comments). The lab put Claude Fable 5 — Anthropic’s latest frontier model — through a benchmark called Vending-Bench, and what they found is, at the very least, unsettling. The model lies to suppliers. It forms price cartels with other AI agents. It refuses to refund…

Claude Sonnet 5: Anthropic's Most Agentic AI Model Arrives at a Reduced Price [2026]

On June 30, 2026, Anthropic released Claude Sonnet 5 , the next generation of its mid-tier model that promises to redefine cost-performance in AI agents. The model arrives with agentic capabilities that until recently were exclusive to larger, more expensive models — at a price point that makes scaling AI agents in production viable. The agentic leap The Sonnet line has an important history in the…

How to Run Two Hermes Gateways: One Remote and One Local

I wanted something seemingly simple: keep my default profile in Hermes pointing to my remote instance while also having a second profile — macbook-local — running 100% on my Mac . Switching between them directly from the desktop app. “Simple” lasted until I discovered that Hermes has several independent notions of ‘active profile’ and ’local vs. remote’ , and…

Proxmox Backup Server: installation via community-scripts and backup configuration [2026]

If you run Proxmox VE at home or in a homelab, one of the first things you need to sort out is backup. Proxmox Backup Server (PBS) is the official integrated solution — incremental backup, deduplication, Zstandard compression, and integrity verification, all native. The fastest way to get PBS up and running is by using the community-scripts (formerly Proxmox VE Helper-Scripts), which install PBS…

How to migrate from Proxmox VE 8 to 9: step-by-step guide [2026]

Proxmox VE 9 is now available, bringing as its main new features the Debian 13 “Trixie” base, the Proxmox kernel 6.14 (based on Ubuntu 24.04 LTS), and ZFS 2.3 with draid support and compression improvements. If you are still on PVE 8, the migration is straightforward, but requires attention to a few details — especially repositories, cluster, and storage compatibility. This guide…

Bill 2.583/2020 is approved in the Senate and creates a legal framework for the Health Industrial Complex [2026]

On Tuesday (June 30), the Federal Senate approved Bill 2.583/2020 , which establishes the National Health Strategy of the Economic-Industrial Health Complex (CEIS) as a legal framework for the sector’s industrial policy. The text, which had already passed the Chamber of Deputies in July 2025, now proceeds for presidential sanction. The bill was authored by Congressman Doutor Luizinho (PP/RJ)…

INPI launches new version of the Patents Module: what changes in 2026

On July 2, 2026, INPI announced the second version of the Patent Services Module, scheduled for release in August 2026. This new feature represents another step in the agency’s automation plan and promises to transform how applicants, IP firms, and companies interact with the Brazilian patent system. The filing of national invention patent applications, utility model applications, and…

Difficulties Accessing Google Analytics 2026 — VPN, Cookies, Firewall and More

If you are reading this article, you have probably already encountered a blank screen, an infinite loading loop, or the message “Something went wrong. Please try again later.” when trying to access Google Analytics. Google Analytics 4 (GA4) is an essential tool for anyone with a website, but accessing it has become increasingly difficult for many users. The combination of stricter…

Anthropic launches Claude Science: an AI workbench for scientists [2026]

Anthropic today launched Claude Science , an AI workbench designed specifically for scientists and researchers. The announcement came with the release of Claude Sonnet 5, solidifying the day as one of the company’s biggest in 2026. Available in public beta for subscribers of Pro, Max, Team, and Enterprise plans, Claude Science promises to unify the fragmented ecosystem of scientific research…

INPI will pay R$ 1.025 for patent search: accreditation guide [2026]

INPI published on June 29, 2026, the Electronic Accreditation Notice No. 90.001/2026 , opening doors for professionals across Brazil to provide prior art search and state-of-the-art definition services for patent applications. It is the first time the Institute has structured the outsourcing of this critical stage of patent examination. The model is simple: remote work, without exclusive…

How to Check the Status of a Process at INPI: Step-by-Step Guide [2026]

Tracking the progress of a process at INPI is essential — whether to know if your trademark has been granted, if your patent has entered examination, or if there is any pending requirement. But the system can be confusing for those who have never used it. This guide shows step-by-step how to consult any process at INPI, interpret the progress codes, and not miss important deadlines. 1. Accessing…

INPI launches call for proposals to select Intellectual Property success stories [2026]

The National Institute of Industrial Property (INPI) published Public Call No. 01/2026 to select success stories related to the strategic use of intellectual property assets. The initiative aims to form the INPI Intellectual Property Success Stories Database , bringing together experiences that demonstrate how IP can contribute to innovation, competitiveness, economic development, and social…

Claude Tag and the Risk to Companies' Intellectual Property

On June 12, 2026, Anthropic announced Claude Tag — a feature that transforms Claude from an isolated assistant into a “team member” integrated directly into companies’ workflows, such as Slack, shared documents, and internal knowledge bases. The official announcement was met with concern by many who are closely following AI development: finally, an AI that doesn’t need its…

WIPO launches Artificial Intelligence Infrastructure Interchange: the new global forum for AI and Intellectual Property

The World Intellectual Property Organization (WIPO) launched the Artificial Intelligence Infrastructure Interchange (AIII) — a new global initiative that brings together governments, industry, creators, and academia to discuss the technical and operational challenges at the intersection of artificial intelligence and intellectual property. The announcement, made at WIPO headquarters in Geneva,…

PL 5810/2025: The Ministry of Health Study That Projects R$ 3 Billion in Additional Costs to SUS

The Ministry of Health sent to the National Congress, in June 2026, a technical opinion with an unfavorable recommendation for PL 5810/2025, which establishes a mechanism for adjusting the term of validity of drug patents in case of delay in the processing of requests at the INPI. The study that supports the opinion was conducted by the General Coordination of Promotion and Regulation of the…

The Global Innovation Map in 2025: Who Is Patenting What?

Em março de 2026, a WIPO publicou os números consolidados do Patent Cooperation Treaty (PCT) para o ano de 2025 — e os dados contam uma história clara sobre para onde o mundo está direcionando seus esforços de inovação. Foram 275.900 pedidos internacionais de patente, um crescimento de 0,7% sobre 2024, marcando o segundo ano consecutivo de alta. Mas por trás desse número agregado, há movimentos…

INPI exhausts priority processing quotas for e-commerce trademarks — what now?

On June 18, 2026, the INPI announced the exhaustion of quarterly quotas for the priority processing of trademark registration applications in the modality intended for applicants who depend on registration to operate on e-commerce platforms. The issuance of new Union Collection Guides (GRUs) for this modality is temporarily suspended, and new quotas will only be available from September 2026. The…

INPI updates Trademark Manual: new rules for High Renown and accession to the Madrid Protocol

The National Institute of Industrial Property (INPI) published on June 23, 2026, an update to the Trademark Manual that promises to significantly alter how well-known marks are recognized and how international registration applications are processed in Brazil. Two changes deserve special attention from companies, IP firms, and branding strategists: the flexibilization of well-known mark…

Enabling WhatsApp on Hermes Agent self-hosted: three pitfalls (and how I overcame them)

I wanted a simple thing: to send a message to my AI agent via WhatsApp. The Hermes Agent , from Nous Research, promises exactly that — you spin up the gateway and talk to it via Telegram, Discord, Slack, WhatsApp , Signal, or email. In theory, it’s one command: hermes whatsapp . In practice, I ended up struggling until I discovered the simplest alternative. This post is an honest account of…

Copyright in the AI era: INPI brings together international experts to debate the challenges of artificial intelligence

The rapid evolution of generative artificial intelligence has profoundly transformed the processes of creation, production, circulation, and exploitation of intellectual content — and copyright, which historically has been shaped around the figure of the human creator, currently faces one of its greatest adaptation tests. To discuss these issues, the National Institute of Industrial Property…

LPI at 30 years: INPI releases report with proposals for improvement of the Industrial Property Law

On June 19, 2026, the National Institute of Industrial Property (INPI) published the awaited report “Proposals for the Improvement of the Industrial Property Law — LPI (9.279/1996)” , a document consolidating internal proposals for the revision of the law that has governed industrial property in Brazil for exactly 30 years. It is not a bill — yet. But it is the most concrete sign that…

TRF-2 confirms ruling that paves the way for the restructuring of INPI

On June 22, 2026, the 1st Specialized Panel of the Federal Regional Court of the 2nd Region (TRF-2) unanimously confirmed the judgment issued in Public Civil Action No. 5095710-55.2021.4.02.5101/RJ, proposed by the Brazilian Intellectual Property Association (ABPI) against the INPI and the Union. The decision represents a milestone in the autarchy’s structuring and reverberates throughout…