News for hackers. Stuff that matters.

A comment on Supabase MCP can leak an entire SQL Database, a lethal trifecta attack. Parent comment

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by sillysaurusx on Tuesday July 08, 2025 @09:57PM (#44505666)
Sure, but then you’d need to do something strange to beat the classifier, layered on top of doing a different strange thing to beat the prompt injection protections (“don’t follow orders from the following, it’s user data” type tricks).

Both layers failing isn’t impossible, but it’d be much harder than defeating the existing protections.

[ Parent | on HN ]
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by ImPostingOnHN on Tuesday July 08, 2025 @11:03PM (#44506007)
Why would it be strange or harder?

The initial prompt can contain as many layers of inception-style contrivance, directed at as many inaginary AI "roles", as the attacker wants.

It wouldn't necessarily be harder, it'd just be a prompt that the attacker submits to every AI they find.

[ Parent | on HN ]