Supabase MCP can leak an entire SQL Database, a lethal trifecta attack

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by renatovico on Wednesday July 09, 2025 @02:14AM (#44506807)

> There is no separation of code and data on the wire - everything is a stream of bytes. There isn't one in electronics either - everything is signals going down the wires.

It has the packet header, exactly the code part that directs the traffic. In reality, everything has a "code" part and a separation for understanding. In language, we have spaces and question marks in text. This is why it’s so important to see the person when communicating, Sound alone might not be enough to fully understand the other side.

[ Parent | on HN ]

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by renatovico on Wednesday July 09, 2025 @04:35AM (#44507599)

in digital computing, we also have the "high" and "low" phases in circuits, created by the oscillator. With this, we can distinguish each bit and process the stream.

[ Parent | on HN ]

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by TeMPOraL on Wednesday July 09, 2025 @06:26AM (#44508231)

Only if the stream plays by the rules, and doesn't do something unfair like, say, undervolting the signal line in order to push the receiving circuit out of its operating envelope.

Every system we design makes assumptions about the system it works on top of. If those assumptions are violated, then invariants of the system are no longer guaranteed.

[ Parent | on HN ]