Re:Claude 4 and GitHub MCP will leak your private GitHub rep...
by random42 on Wednesday May 28, 2025 @02:23AM
(#44113191)
But… there is no S in MCP
Re:Claude 4 and GitHub MCP will leak your private GitHub rep...
by jerf on Wednesday May 28, 2025 @10:41AM
(#44116536)
https://www.iot-inc.com/the-s-in-iot-stands-for-security-art...
The analogs are compelling, though as I allude to in my post, not precise. IoT lacks security in a much more comprehensive way.
... is probably a bit unfair. From what I've seen the protocol is generally neutral on the topic of security.
But the rush to AI does tend to stomp on security concerns. Can't spend a month tuning security on this MCP implementation when my competition is out now, now, now! Go go go go go! Get it out get it out get it out!
That is certainly incompatible with security.
The reason anyone cares about security though is that in general lacking it can be more expensive than taking the time and expense to secure things. There's nothing whatsoever special about MCPs in this sense. Someone's going to roll snake eyes and discover that the hard way.