Tag: uth

Source URL: https://simonwillison.net/2025/Jul/6/supabase-mcp-lethal-trifecta/#atom-everything Source: Simon Willison’s Weblog Title: Supabase MCP can leak your entire SQL database Feedly Summary: Supabase MCP can leak your entire SQL database Here’s yet another example of a lethal trifecta attack, where an LLM system combines access to private data, exposure to potentially malicious instructions and a mechanism to communicate data…

Simon Willison’s Weblog: Identify, solve, verify

Jul 4, 2025

—

by

Source URL: https://simonwillison.net/2025/Jul/4/identify-solve-verify/#atom-everything Source: Simon Willison’s Weblog Title: Identify, solve, verify Feedly Summary: The more time I spend using LLMs for code, the less I worry for my career – even as their coding capabilities continue to improve. Using LLMs as part of my process helps me understand how much of my job isn’t just…

Simon Willison’s Weblog: awwaiid/gremllm

Jul 4, 2025

—

by

Source URL: https://simonwillison.net/2025/Jul/4/gremllm/#atom-everything Source: Simon Willison’s Weblog Title: awwaiid/gremllm Feedly Summary: awwaiid/gremllm Delightfully cursed Python library by Brock Wilcox, built on top of LLM: from gremllm import Gremllm counter = Gremllm(“counter") counter.value = 5 counter.increment() print(counter.value) # 6? print(counter.to_roman_numerals()) # VI? You tell your Gremllm what it should be in the constructor, then it uses…

Simon Willison’s Weblog: TIL: Rate limiting by IP using Cloudflare’s rate limiting rules

—

by

Source URL: https://simonwillison.net/2025/Jul/3/rate-limiting-by-ip/#atom-everything Source: Simon Willison’s Weblog Title: TIL: Rate limiting by IP using Cloudflare’s rate limiting rules Feedly Summary: TIL: Rate limiting by IP using Cloudflare’s rate limiting rules My blog started timing out on some requests a few days ago, and it turned out there were misbehaving crawlers that were spidering my /search/…

Docker: Docker Desktop 4.43: Expanded Model Runner, Reimagined MCP Catalog, MCP Server Submissions, and Smarter Gordon

—

by

Source URL: https://www.docker.com/blog/docker-desktop-4-43/ Source: Docker Title: Docker Desktop 4.43: Expanded Model Runner, Reimagined MCP Catalog, MCP Server Submissions, and Smarter Gordon Feedly Summary: Docker Desktop 4.43 just rolled out a set of powerful updates that simplify how developers run, manage, and secure AI models and MCP tools. Model Runner now includes better model management, expanded…

Simon Willison’s Weblog: Sandboxed tools in a loop

—

by

Source URL: https://simonwillison.net/2025/Jul/3/sandboxed-tools-in-a-loop/#atom-everything Source: Simon Willison’s Weblog Title: Sandboxed tools in a loop Feedly Summary: Something I’ve realized about LLM tool use is that it means that if you can reduce a problem to something that can be solved by an LLM in a sandbox using tools in a loop, you can brute force that…

CSA: What MITRE ATT&CK v17 Means for ESXi Security

—

by

Source URL: https://valicyber.com/resources/mitre-attck-v17-esxi/ Source: CSA Title: What MITRE ATT&CK v17 Means for ESXi Security Feedly Summary: AI Summary and Description: Yes Summary: The article discusses the introduction of the ESXi matrix in MITRE ATT&CK v17, emphasizing its significance for securing hypervisors as critical attack surfaces. It identifies high-risk TTPs (Tactics, Techniques, and Procedures) specific to…

The Register: Let’s Encrypt rolls out free security certs for IP addresses

—

by

Source URL: https://www.theregister.com/2025/07/03/lets_encrypt_rolls_out_free/ Source: The Register Title: Let’s Encrypt rolls out free security certs for IP addresses Feedly Summary: You probably don’t need one, but it’s nice to have the option Let’s Encrypt, a certificate authority (CA) known for its free TLS/SSL certificates, has begun issuing digital certificates for IP addresses.… AI Summary and Description:…

Slashdot: AI Note Takers Are Increasingly Outnumbering Humans in Workplace Video Calls

Jul 2, 2025

—

by