Data
Municipal Data Breaches: The Smart Sampa Warning ↗
The Smart Sampa case adds to the lessons from Feira de Santana: access controls, secure sharing, and a prepared incident response need to be part of everyday work.
EXPLORE / ERNANI.DEV
Information security.
Ideas born from practice. Explore the topics and find your next read.
Data
LGPD in Practice: What the Feira de Santana Data Breach Teaches Businesses ↗
The Feira de Santana case shows how failures in publication and incident response lead to sanctions. Understand the differences between public bodies and businesses, and how to organize LGPD compliance.
Software systems
Who Does Your AI Plugin Work For? How to Audit MCPs and Extensions ↗
MCPs and extensions expand what AI can do. Learn to verify provenance, permissions, data destinations, and contracts while distinguishing different risks.
Software systems
An AI agent disabled alerts. What does that teach us about automation? ↗
Useful agents need understandable boundaries. An integration example shows how to connect proposals, approvals, and execution while keeping control of operations.
Software systems
Privacy Policy vs. Terms of Use: the differences and a practical way to write yours ↗
Understand what each document does and learn to use your system's actual operations and AI to create clear, consistent drafts ready for review.
Software systems
Privacy is power: has your system been left unwrapped? ↗
Two lollipops illustrate a software decision: protecting data starts with collection, permissions, and disposal. Real experiences, OWASP, and MITRE.
AI
The Performative Programmer in the AI Era and the Cost to Your Organization ↗
AI can make a convincing demo easier to build. Inspired by Mano Deyvin’s “performative programmer,” this article examines the review, rework, security and maintenance costs organizations can miss behind a polished presentation.
Software systems
Beautiful Website, Paper-Thin Security: The Risks of Careless Vibe Coding ↗
A polished interface is only the beginning. Drawing on real experience and technical sources, I explore the risks of selling AI-built systems without understanding their security—and how to start responsibly.