News for hackers. Stuff that matters.

A comment on The "S" in MCP Stands for Security. Parent comment

Re:The "S" in MCP Stands for Security by defjosiah on Sunday April 06, 2025 @06:01PM (#43605324)
FYI, there is actually this implementation detail in the model spec, https://model-spec.openai.com/2025-02-12.html#chain_of_comma...

Platform: Model Spec "platform" sections and system messages

Developer: Model Spec "developer" sections and developer messages

User: Model Spec "user" sections and user messages

Guideline: Model Spec "guideline" sections

No Authority: assistant and tool messages; quoted/untrusted text and multimodal data in other messages

[ Parent | on HN ]
Re:The "S" in MCP Stands for Security by never_inline on Sunday April 06, 2025 @08:52PM (#43606366)
This still does not seem to fix the OP vulnerability? All tool call specs will be at same privilege level.
[ Parent | on HN ]