Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Simultaneously bullish on LLMs and insanely confused as to why anyone would literally ever use something like a Supabase MCP unless there is some kind of "dev sandbox" credentials that only get access to dev/staging data.

And I'm so confused at why anyone seems to phrase prompt engineering as any kind of mitigation at all.

Like flabbergasted.



> And I'm so confused at why anyone seems to phrase prompt engineering as any kind of mitigation at all.

Honestly, I kind of hope that this "mitigation" was suggested by someone's copilot or cursor or whatever, rather than an actual paid software engineer.

Edited to add: on reflection, I've worked with many human well-paid engineers who would consider this a solution.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: