lunw
Re:
on Monday July 21, 2025 @04:51PM (#44640272)
- imessage MCP: built by Anthropic
- Claude Desktop: has dev keys
- Stripe: just executing bad requests
- avg devs: claude goes brr
- CISOs: should be concerned
Re:Supabase MCP can leak an entire SQL Database, a lethal trifecta attack
on Tuesday July 08, 2025 @04:01PM (#44503525)
Co-founder of General Analysis here. Technically this is not a responsibility of Supabase MCP - this vulnerability is a combination of:
1. Unsanitized data included in agent context 2. Foundation models being unable to distinguish instructions and data 3. Bad access scoping (cursor having too much access)
This vulnerability can be found almost everywhere in common MCP use patterns.
We are working on guardrails for MCP tool users and tool builders to properly defend against these attacks.
Community Is Motivation on Tap
Agency is your secret edge
Cursor and Supabase MCP = private SQL tables leaked
A Review of ThunderKittens for General ML Audience
Re:Consistent Jailbreaking Method in o1, o3, and 4o
on Friday February 07, 2025 @06:46PM (#42978830)
Agreed. I'm very curious to see how this unfolds.
Re:Consistent Jailbreaking Method in o1, o3, and 4o
on Friday February 07, 2025 @06:23PM (#42978657)
Nice to see some cool jailbreaks being worked on. Hope people patch it soon so we can look at the methodology.