4 ms·
> These types of vulnerabilities I don't understand why it's called a vuln. It's, like, the whole point of the system to be able to do this! It's how it's mark
by jcelerier 1y ago
> These types of vulnerabilities
I don't understand why it's called a vuln. It's, like, the whole point of the system to be able to do this! It's how it's marketed!
- loa_in_ 1y agoPeople want to eat the cake and have it too.
- c-linkage 1y agoTed? Is that you?
- timhh 1y agoYeah I also don't understand how this is unexpected. You gave Claude the ability to run arbitrary commands. It did that. It might unexpectedly run dangerous commands even if you don't connect it to malicious emails.
- antonvs 1y agoIf it allows the system to be exploited in unwanted ways, it's a vulnerability. The fact that companies are marketing a giant security vulnerability as a product doesn't really change that.
- michaelt 1y agoA chainsaw juggler surely does not want to chop their own hand off. But if they do, it's hardly a defect of the chainsaw.
- skeeter2020 1y agoI get your analogy, but isn't this a defect in the juggling?
- tough 1y agonobody said chainsaw juggling was a smart career move
- stingraycharles 1y agoIt kind of is in the same way that Windows used to be root-only. This was a known issue. / vulnerability because those who understood the risks were generally smart enough to avoid getting exploited. The general population, however, did not understand this and the consequences of this became bigger and bigger. With AI, there’s a whole class of people who don’t really know what they’re signing up for when installing these types of MCP servers. It may not be a vulnerability, but a solution is necessary.