←back to thread

Supabase MCP can leak your entire SQL database

(www.generalanalysis.com)
784 points rexpository | 1 comments | 08 Jul 25 17:46 UTC | HN request time: 0s | source
Show context
borromakot ◴[08 Jul 25 19:42 UTC] No.44503336[source]▶
Simultaneously bullish on LLMs and insanely confused as to why anyone would literally ever use something like a Supabase MCP unless there is some kind of "dev sandbox" credentials that only get access to dev/staging data.

And I'm so confused at why anyone seems to phrase prompt engineering as any kind of mitigation at all.

Like flabbergasted.

replies(1): >>44503482 #
1. 12_throw_away ◴[08 Jul 25 19:58 UTC] No.44503482[source]▶
> And I'm so confused at why anyone seems to phrase prompt engineering as any kind of mitigation at all.

Honestly, I kind of hope that this "mitigation" was suggested by someone's copilot or cursor or whatever, rather than an actual paid software engineer.

Edited to add: on reflection, I've worked with many human well-paid engineers who would consider this a solution.