The entire point of programming is that (barring hardware failure and compiler bugs) the computer will always do exactly what it's told
The entire point of programming is that (barring hardware failure and compiler bugs) the computer will always do exactly what it's told
"our" - *base users? I only hear about *base apps shipping tokens in client code or not having auth checks on the server, or whatever
Jumping head first into an entire new "paradigm" (for lack of a better word) where you can bend a clueless, yet powerful servant to do your evil bidding sounds like a recipe for... interesting times.
The fact is that these MCPs are allowed to bypass all existing and well-functioning security barriers, and we cross our fingers and hope they won't be manipulated into giving more information than the previous security barriers would have allowed. It's a bad idea that people are running with due to the hype.
I concede that I don't work in industry so maybe I'm just dumb and this is actually really useful but this seems like the exact opposite of what I would want out of my computer about 99.98% of the time.
_For this implementation, our engineers chose_ to have fuzzy inputs, fuzzy outputs
There, fixed that for you