HackerTrans
TopNewTrendsCommentsPastAskShowJobs

lunw

no profile record

Submissions

[untitled]

1 points·by lunw·vor 12 Monaten·0 comments

[untitled]

1 points·by lunw·vor 12 Monaten·0 comments

[untitled]

1 points·by lunw·vor 12 Monaten·0 comments

Supabase MCP's Lethal Trifecta

simonwillison.net
12 points·by lunw·letztes Jahr·0 comments

Community Is Motivation on Tap

alanwu.xyz
117 points·by lunw·letztes Jahr·49 comments

Agency is your secret edge

alanwu.xyz
3 points·by lunw·letztes Jahr·0 comments

Cursor and Supabase MCP = private SQL tables leaked

generalanalysis.com
6 points·by lunw·letztes Jahr·1 comments

A Review of ThunderKittens for General ML Audience

alanwu.xyz
4 points·by lunw·letztes Jahr·1 comments

comments

lunw
·vor 12 Monaten·discuss
- imessage MCP: built by Anthropic - Claude Desktop: has dev keys - Stripe: just executing bad requests - avg devs: claude goes brr - CISOs: should be concerned
lunw
·letztes Jahr·discuss
Co-founder of General Analysis here. Technically this is not a responsibility of Supabase MCP - this vulnerability is a combination of:

1. Unsanitized data included in agent context

2. Foundation models being unable to distinguish instructions and data

3. Bad access scoping (cursor having too much access)

This vulnerability can be found almost everywhere in common MCP use patterns.

We are working on guardrails for MCP tool users and tool builders to properly defend against these attacks.
lunw
·letztes Jahr·discuss
Agreed. I'm very curious to see how this unfolds.
lunw
·letztes Jahr·discuss
Nice to see some cool jailbreaks being worked on. Hope people patch it soon so we can look at the methodology.