SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Live Supabase service_role keys found committed in public MCP config files on GitHub

0
·14 views

A security researcher scanned public GitHub repositories for MCP configuration files that contain database credentials. After decoding and verifying candidate matches, 12 files were found to hold real service_role keys, which bypass row-level security and grant full database access. Four of the associated Supabase projects were still live at the time of the scan, one of them pushed the same day. The author argues that developers treat .mcp.json files like editor settings rather than secret stores, and that the ecosystem lacks the secret-scanning safeguards that .env files have. The researcher recommends rotating exposed keys and moving them into runtime environment variables, and has released free local auditing tools for these configs.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Why the First Two Weeks of an AI Deployment Decide Its Outcome

An engineer embedded with a customer during the opening stretch of a deployment works to replace assumptions with facts before building anything. The brief written in a meeting room often describes a proxy rather than the real problem, which becomes clear only after observing daily operations. The article outlines five principles: focus on the actual problem rather than a stated tool, request data and system access immediately, examine raw unfiltered data before designing, select a small but meaningful first workflow, and identify every stakeholder who could block the work. Skipping this phase, it argues, results in building the wrong solution efficiently. Early discovery turns potential delays into useful signals about how the deployment will run.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Semurg answers 4-hop query on 1.8-billion-edge graph in 1.41 s; Neo4j and FalkorDB fail to finish

A benchmark used SNAP's com-Friendster graph, with 65.6 million people and 1.8 billion relationships, under a 12 GB memory limit for every engine. Semurg answered a 4-hop query about one person's network in a median of 1.41 seconds. Neo4j loaded the graph but had not answered that query when its 2,345-second time budget ran out. FalkorDB exhausted its 12 GB memory while loading and never reached a query. Semurg also completed walks from two hops up to 131,072 hops, with run times levelling off at about 6.7 seconds beyond 16 hops because the graph is small-world. ArcadeDB, ArangoDB and SurrealDB were not fairly measured or have no result in this run and are slated for the next one.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Agent Web Access lets AI agents read rendered web pages as markdown for $0.001 per call

LLM agents often fail to read real web pages with a plain HTTP request, which returns empty shells, cookie walls, or bulky markup. Agent Web Access offers a pay-per-call service that renders pages in a real browser, strips navigation and ads, and returns clean markdown. It requires no account or API key, and each call is paid in USDC on Base via the open x402 protocol. Endpoints cover fetching markdown or text, extracting CSS-selector elements, and generating screenshots or PDFs, priced between $0.001 and $0.005. The author reports running the fetch example against the Hacker News front page, which returned status 200 and about 11 KB of markdown for $0.001.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Learning May Involve Deliberate DNA Breaks in Neurons, Mouse Studies Suggest

Research published in Cell and Nature describes how strongly firing neurons deliberately cut their own DNA at specific sites to switch on genes needed for forming memories. A protein complex then recruits a repair system to stitch the breaks back together. In mouse experiments, hippocampal neurons showed persistent DNA breaks hours after learning a task, and blocking a DNA-sensing repair pathway impaired memory. The findings suggest neurons involved in memory formation pass through a break-and-repair cycle, though the evidence so far comes from animal and cell studies rather than living human brains. The authors of the summarized guide note that the work is preliminary and does not point to any new treatment.

0 comments Read more at DEV Community