Top all-time · #19782
Elena Cross
Personal blog · elenacross7.medium.comsecurityai
Elena Cross's personal blog at elenacross7.medium.com covers security and ai. Since 2025, 3 different Hacker News readers have linked it 4 times, most often “The “S” in MCP Stands for Security”. It is still writing: the last post was on 2025-12-10, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link this author's post "The 'S' in MCP Stands for Security" as a source on the security risks of MCP servers. One commenter cites it as a warning about potential exploits, and another cites it as a source.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- The “S” in MCP Stands for Security3 people · 3 mentions · first linked 2025-04-06
What Hacker News says?
And the worst part is that it opens a pandora's box of potential exploits; https://elenacross7.medium.com/%EF%B8%8F-the-s-in-mcp-stands...
Comment linking /%EF%B8%8F-the-s-in-mcp-stands-for-security-91407b33ed6b
on “Show HN: Browser MCP – Automate your browser using Cursor, Claude, VS Code”Submitted The “S” in MCP Stands for Security as a story · 730 points
HN discussionVantage engineer who worked on this feature here. The security posture of MCP servers is still in its early stages (see “The ‘S’ in MCP Stands for Security” from three weeks ago [ https://elenacross7.medium.com/%EF%B8%8F-the-s-in-mcp-stands... ]). The recommendations above to use something like the 1Password CLI wrapper when invoking an MCP server seem sound. That being said, an easier-to-distribute user experience…
Comment linking /%EF%B8%8F-the-s-in-mcp-stands-for-security-91407b33ed6b
on “Show HN: An MCP server for understanding AWS costs”Submitted React2Shell: My Droplet Joined a Botnet as a story · 2 points
HN discussion