Re:Supabase MCP can leak an entire SQL Database, a lethal tr...
by jacquesm on Friday July 11, 2025 @02:09AM
(#44528855)
And fundamentally insecure systems sooner or later get connected to things that should be secure and then become stepping stones in an exploit. These are lessons that should be learned by now.
That's a vanishingly rare situation, that I'm surprised to see you arguing for, given your other comments about the futility of enforcing invariants on reality. ;)
If something does meaningful and valuable work, that almost always means it's also valuable to exploit.
We can agree that if you're talking resource-commitment risk (i.e. must spend this much to exploit), there are insecure systems that are effective to implement, because the cost of exploitation exceeds the benefit. (Though warning: technological progress)
But fundamentally insecure systems are rare in practice for a reason.