HNHacker News
TopNewBestAskShowJobs

e9a8a0b3aded

12 karma · joined June 10, 2025

submissionscomments
e9a8a0b3aded··on Tell HN: Notion Desktop is monitoring your audio and network
Are you saying that Notion desktop has access to microphone audio or it is only able to determine if the microphone is in use?

The former is actually concerning to me. I can't imagine caring if it only knows my microphone is in use.

e9a8a0b3aded··on Supabase MCP can leak your entire SQL database
I wouldn't wrap it with any additional prompting. I believe that this is a "fail fast" situation, and adding prompting around it only encourages bad practices.

Giving an LLM access to a tool that has privileged access to some system is no different than providing a user access to a REST API that has privileged access to a system.

This is a lesson that should already be deeply ingrained. Just because it isn't a web frontend + backend API doesn't absolve the dev of their auth responsibilities.

It isn't a prompt injection problem; it is a security boundary problem. The fine-grained token level permissions should be sufficient.

e9a8a0b3aded··on Show HN: PyDoll – Async Python scraping engine with native CAPTCHA bypass
oi_oi_oi_got_a_licence_chum.jpg