News for hackers. Stuff that matters.
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by ethbr1 on Thursday July 10, 2025 @09:07AM (#44520582)
> Not every system needs to be secure against everything. Systems that are fundamentally insecure in some scenarios are perfectly fine, as long as they're not exposed to those problem scenarios.

That's a vanishingly rare situation, that I'm surprised to see you arguing for, given your other comments about the futility of enforcing invariants on reality. ;)

If something does meaningful and valuable work, that almost always means it's also valuable to exploit.

We can agree that if you're talking resource-commitment risk (i.e. must spend this much to exploit), there are insecure systems that are effective to implement, because the cost of exploitation exceeds the benefit. (Though warning: technological progress)

But fundamentally insecure systems are rare in practice for a reason.

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by jacquesm on Friday July 11, 2025 @02:09AM (#44528855)
And fundamentally insecure systems sooner or later get connected to things that should be secure and then become stepping stones in an exploit. These are lessons that should be learned by now.