News for hackers. Stuff that matters.
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by skinner927 on Tuesday July 08, 2025 @11:18PM (#44506071)
Microsoft’s cloud gets hacked multiple times a year, nobody cares. Everyone is connecting everything together. Business people with no security training/context are “writing” integrations with Lego-like services (and now LLMs). Cloudflare hiccups and the Internet crashes.

Nobody cares about the things you’re saying anymore (I do!!). Extract more money. Move faster. Outcompete. Fix it later. Just get a bigger cyber incident insurance policy. User data doesn’t actually matter. Nobody expects privacy so why implement it?

Everything is enshitified, even software engineering.

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by ost-ing on Tuesday July 08, 2025 @11:53PM (#44506197)
Capitalist incentivised brainrot powered by AI. Welcome to the future.
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by nurettin on Wednesday July 09, 2025 @12:52AM (#44506434)
> Capitalist incentivized

And what's the alternative here?

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by bakuninsbart on Wednesday July 09, 2025 @03:54AM (#44507338)
Rewriting the cloud in Lisp.

On a more serious note, there should almost certainly be regulation regarding open weights. Either AI companies are responsible for the output of their LLMs or they at least have to give customers the tools to deal with problems themselves.

"Behavioral" approaches are the only stop-gap solution available at the moment because most commercial LLMs are black boxes. Even if you have the weights, it is still a super hard problem, but at least then there's a chance.

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by benreesman on Wednesday July 09, 2025 @04:06AM (#44507397)
The alternative to mafia capitalism in the grips of what Trading/Finance/Crypto Twitter calls `#CrimeSeason` is markets refereed by competent, diligent, uncorrupted professionals and public servants: my go-to example is Brooksley Born because that's just such a turning point in history moment, but lots of people in important jobs want to do their jobs well, in general cops want to catch criminals, in general people don't like crime season.

But sometimes important decisions get made badly (fuck Brooksley Born, deregulate everything! This Putin fellow seems like a really hard worker and a strong traditional man.) based on lies motivated by greed and if your society gets lazy about demanding high-integrity behavior from the people it admits to leadership positions and punishing failures in integrity with demotions from leadership, then this can really snowball on you.

Just like the life of an individual can go from groovy one day to a real crisis with just the right amount of unlucky, bit of bad cards, bit of bad choices, bit of bad weather, same thing happens to societies. Your institutions start to fail, people start to realize that cheating is the new normal, and away you go. Right now we're reaping what was sowed in the 1980s, Gordon Gecko and yuppies would love 2025 (I'd like to think Reagan would feel a bit queasy about how it all went but who knows).

Demand high-integrity behavior from leaders. It's not guaranteed to work at this stage of the proceedings, but it's the only thing that has ever worked.

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by noduerme on Wednesday July 09, 2025 @01:22AM (#44506564)
Longer term thinking.
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by nurettin on Wednesday July 09, 2025 @03:42AM (#44507274)
Reinvesting and long term thought isn't orthogonal.
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by cess11 on Wednesday July 09, 2025 @06:16AM (#44508168)
Organised labour.
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by nurettin on Wednesday July 09, 2025 @06:55AM (#44508437)
Sounds ominous.
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by reddalo on Wednesday July 09, 2025 @03:37AM (#44507237)
>Microsoft’s cloud gets hacked multiple times a year

What cloud? Private SharePoint instances? Accounts? Free Outlook accounts?

Do you have any source on this?

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by Orygin on Wednesday July 09, 2025 @06:03AM (#44508089)
Small sample: https://www.virtru.com/blog/industry-updates/microsoft-data-...

I also can't find the news, but they were hacked a few years ago and the hackers were still inside their network for months while they were trying to get them out. I wouldn't trust anything from MS as most of their system is likely infected in some form

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by skinner927 on Wednesday July 09, 2025 @08:25AM (#44509188)
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by sgt101 on Wednesday July 09, 2025 @04:10AM (#44507424)
Companies are suffering massive losses from Cyber, and there are state actors out there who will use these failures as well. I really don't think that organisations that fail to pay attention will survive.