News for hackers. Stuff that matters.

A comment on Supabase MCP can leak an entire SQL Database, a lethal trifecta attack. Parent comment

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by simonw on Tuesday July 08, 2025 @04:04PM (#44503542)
I hadn't noticed it before, but it looks like that somewhat passive aggressive wording is a common phrase in responsible disclosure policies: https://www.google.com/search?q=%22If+you+have+followed+the+...
[ Parent | on HN ]
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by Keyframe on Tuesday July 08, 2025 @04:13PM (#44503639)
ah well, sounds off-putting to say the least.
[ Parent | on HN ]
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by pvg on Tuesday July 08, 2025 @06:04PM (#44504469)
"Responsible disclosure policies" are mostly vendor exhortations to people who do a public service (finding vulnerabilities and publicly disclosing them) not to embarrass them too much. The fact they contain silly boilerplate is probably just a function of their overall silliness.
[ Parent | on HN ]