3 ms·
Why in the hell would it be able to access a _remote_ database?! In no acceptable dev environment would someone be able to access that.
by gregoriol 9mo ago
Why in the hell would it be able to access a _remote_ database?! In no acceptable dev environment would someone be able to access that.
- prodigycorp 9mo agoSupabase virtually encouraged it last year haha. I tried using it once and noped out after using it for an hour, when claude tried to do a bunch of migrations on prod instead of dev. https://web.archive.org/web/20250622161053/https://supabase.com/docs/guides/getting-started/mcp https://web.archive.org/web/20250622161053/https://supabase.... Now, there are some actual warnings. https://supabase.com/docs/guides/getting-started/mcp#security-risks https://supabase.com/docs/guides/getting-started/mcp#securit...
- heartbreak 9mo agoEverywhere I’ve ever worked, there was always some way to access a production system even if it required multiple approvals and short-lived credentials for something like AWS SSM. If the user has access, the agent has access, no matter how briefly.
- gregoriol 9mo agoNot if you require auth with a Yubikey, not if you run the LLM client inside a VM which doesn't have your private ssh key, ...
- kaydub 9mo agoI think LLMs are exposing how slapdash many people work when building software.