News for hackers. Stuff that matters.

A comment on Supabase MCP can leak an entire SQL Database, a lethal trifecta attack. Parent comment

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by Traubenfuchs on Wednesday July 09, 2025 @12:08AM (#44506268)
> There is no natural separation between code and data. They are the same thing.

Seems there is a pretty clear distinction in the context of prepared statements.

[ Parent | on HN ]
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by TeMPOraL on Wednesday July 09, 2025 @06:08AM (#44508121)
It's an engineered distinction; it's only as good as the underlying code that enforces it, and only exists within the scope of that code.
[ Parent | on HN ]