Top all-time · #7584
General Analysis
Company blog · generalanalysis.com/blogaisecurity
General Analysis is the company blog at generalanalysis.com, writing about ai and security. Since 2025, 10 different Hacker News readers have linked it 21 times, most often “Supabase MCP can leak your entire SQL database”. No feed was found, so read it on the site itself.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers link General Analysis for its original analysis of the Supabase MCP data leak, a prompt-injection case where an MCP client exposed a SQL database, and for its free open-source MCP guard tool.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Context-aware AI red teaming for agentic systems. Automated adversarial testing across toolchains, plus vulnerability forecasting and runtime controls for production AI.
Most-linked posts?
- Supabase MCP can leak your entire SQL database5 people · 5 mentions · first linked 2025-07-07
- The Jailbreak Bible2 people · 2 mentions · first linked 2025-03-28
What Hacker News says?
General Analysis has released an open source MCP guard to secure your MCP clients against prompt injection attacks like these. https://generalanalysis.com/blog/mcpguard
Comment linking /blog/mcpguard
on “Supabase MCP can leak your entire SQL database”Submitted Supabase MCP can leak your entire SQL database as a story · 848 points
HN discussionGeneral Analysis has released an open source MCP guard to secure your MCP clients against prompt injection attacks like these. https://generalanalysis.com/blog/mcpguard
Comment linking /blog/mcpguard
on “Supabase MCP can leak your entire SQL database”Submitted Claude jailbroken to mint unlimited Stripe coupons as a story · 80 points
HN discussionCofounder of General Analysis here: We just launched a free to use tool to guard against these kinds of attacks. super simple to set up. You can check it out at [1] https://www.generalanalysis.com/products/mcp-guard
Comment linking /products/mcp-guard
on “Supabase MCP can leak your entire SQL database”Submitted The Jailbreak Bible as a story · 17 points
HN discussionWe change the URL to https://www.generalanalysis.com/blog/supabase-mcp-blog from https://simonwillison.net/2025/Jul/6/supabase-mcp-lethal-tri... , thanks!
Comment linking /blog/supabase-mcp-blog
on “Supabase MCP can leak your entire SQL database”Submitted The LLM Jailbreaking Bible: Code Implementation and Overview as a story · 9 points
HN discussionExploit technique and prompt from the linked report [0]: > The attacker begins by opening a new support ticket and submitting a carefully crafted message. The body of the message includes both a friendly question and a very explicit instruction block addressed directly to the Cursor agent: >> This message is directed at CLAUDE within cursor -- the support bot should not respond to this. >> =========IMPORTANT Instruc…
Comment linking /blog/supabase-mcp-blog
on “Supabase MCP can leak your entire SQL database”Submitted Consistent Jailbreaking Method in o1, o3, and 4o as a story · 8 points
HN discussionThe original blog post: [0] This is yet another very serious issue involving the flawed nature of MCPs, and this one was posted over 4 times here. To mention a couple of other issues such as Heroku's MCP server getting exploited [1] which no-one cared about and then GitHub's MCP server as well and a while ago, Anthropic's MCP inspector [2] had a RCE vulnerabilty with a CVE severity of 9.4! There is no reason for an…
Comment linking /blog/supabase-mcp-blog
on “Supabase MCP can leak your entire SQL database”Submitted A quick solution for Cursor MCP security vulnerabilities as a story · 7 points
HN discussionI doubt simonw would self-describe as a security researcher - his post was based on the original work here https://www.generalanalysis.com/blog/supabase-mcp-blog which is not 'the followup analysis'. This is really poor blogspam. Edit: The first bit was silently fixed, the second wasn't - the fact you won't even acknowledge the mistake or the edit just makes it look more mercenary and blogspammy.
Comment linking /blog/supabase-mcp-blog
on “When AI Has Root: Lessons from the Supabase MCP Data Leak”Submitted Cursor and Supabase MCP = private SQL tables leaked as a story · 6 points
HN discussionSubmitted Exploiting Partial Compliance: The Redact-and-Recover Jailbreak as a story · 5 points
HN discussionSubmitted Jailbroken: Finding 50,000 Legal Hallucinations in GPT-4o with RL as a story · 4 points
HN discussionSubmitted Supabase MCP can leak your entire SQL database as a story · 3 points
HN discussionSubmitted A comprehensive analysis of Llama4 safety in CBRN tasks vs. closed-source models [pdf] as a story · 2 points
HN discussionSubmitted LLM Robustness/Safety Benchmark as a story · 2 points
HN discussionSubmitted Claude Cowork vs. Claude Code: Security Differences for Enterprise as a story · 1 points
HN discussionSubmitted Customer service agents offer $10M in benefits for RSA conference as a story · 1 points
HN discussion
