7 ms·
> Generally though I don't think this adds much to the known existing problem that any MCP tool that you install could do terrible things, especially when combi
by AdieuToLogic 1y ago
> Generally though I don't think this adds much to the known existing problem that any MCP tool that you install could do terrible things, especially when combined with other tools (like "read file from your filesystem").
I agree. This is pretty much the definition of a supply chain attack vector.
Problem is - how many people will realistically take your advice of:
Be careful what you install!
- subscribed 1y agoNot many people, since `curl.... | sudo bash - ` is somehow still reasonably mainstream.
- AdieuToLogic 1y ago> Not many people, since `curl.... | sudo bash - ` is somehow still reasonably mainstream. So true. I still cannot believe people blindly do that kind of thing just because it was shown prominently on a web page in a "computery looking font."