- Encourage folks to use read-only by default in our docs [1]
- Wrap all SQL responses with prompting that discourages the LLM from following instructions/commands injected within user data [2]
- Write E2E tests to confirm that even less capable LLMs don't fall for the attack [2]
We noticed that this significantly lowered the chances of LLMs falling for attacks - even less capable models like Haiku 3.5. The attacks mentioned in the posts stopped working after this. Despite this, it's important to call out that these are mitigations. Like Simon mentions in his previous posts, prompt injection is generally an unsolved problem, even with added guardrails, and any database or information source with private data is at risk.
Here are some more things we're working on to help:
- Fine-grain permissions at the token level. We want to give folks the ability to choose exactly which Supabase services the LLM will have access to, and at what level (read vs. write)
- More documentation. We're adding disclaimers to help bring awareness to these types of attacks before folks connect LLMs to their database
- More guardrails (e.g. model to detect prompt injection attempts). Despite guardrails not being a perfect solution, lowering the risk is still important
Sadly General Analysis did not follow our responsible disclosure processes [3] or respond to our messages to help work together on this.
[1] https://github.com/supabase-community/supabase-mcp/pull/94
[2] https://github.com/supabase-community/supabase-mcp/pull/96
EDIT: I'm reminded of the hubris of web3 companies promising products which were fundamentally impossible to build (like housing deeds on blockchain). Some of us are engineers, you know, and we can tell when you're selling something impossible!
To explain in the clearest terms: unlike the SS insignia, the lightning bolt in the logo has tapering at the bottom. The second element in the logo, the slash, does not have tapering at the bottom. The general shape of the logo is the same as the SS insignia: two diagonal elements side-by-side (which would be all good on its own). The mind tends to see repetition, so it has a tendency to "mix up" the two elements of the logo. The mind also has a tendency to remember similar things. Putting it all together, the logo has a chance to evoke the SS insignia.
I may just be reading too much Theweleit and W. Reich nowadays, but I think you'll get catch some flak for this logo if it becomes recognizable outside the tech milieu.
I 100% agree with Carmack that guardrails should be public and that the bias correction on display is poor. But I'm disturbed by the choice of examples some people are choosing. Have we already forgotten the wealth of scientific research on AI bias? There are genuine dangers from AI bias which global corps must avoid to survive.
Who are your other favorite radical psychoanalysts?
Guattari is interesting for pioneering schizoanalysis at the La Borde clinic. He's also one of the most confusing writers I've ever come across, so I recommend the books cowritten with Deleuze over his solo stuff. He's got some whimsy to him just like Reich does.
We strive for something, which is building up tension, and once we are able to do it, there is a relief of that tension, which feels pleasurable. We do this repeatedly until we die.
A footballer strives to score a goal. As long as there is none, frustration is felt. When they score, that frustration is replaced by intense happiness.
Or am I wrong?
But Wilhelm Reich doesn't really follow a utilitarian calculus. I.e., for him pleasure is not the equal yet opposite of unpleasure. Rather, the calculus is one of material tension and release, or intensity, which I think you get at quite well in your example.
And yeah, if Marx, Bataille, and Spinoza are called philosophers, I guess we can call this a philosophical thought as well. Though it certainly reaches beyond the bounds of philosophy into psychoanalysis, biology, and cybernetics.
Not much by way of past threads, but he sometimes pops up in HN comments: https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que....
There was a documentary not too long ago: https://vimeo.com/ondemand/wr1897. Has anyone seen it?
Kate Bush's lovely "Cloudbusting" is about Reich, based on the book his son wrote about driving around the Maine countryside with WR and his cloudbusting machine. Donald Sutherland plays Reich in the video, and Kate the son. The book is seen sticking out of her pocket in one frame. https://www.youtube.com/watch?v=pllRW9wETzw, https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
"I still dream of Orgonon..."
The woman who preserved Reich's estate for 60 years, Mary Boyd Higgins, was remarkable in her own right: https://www.nytimes.com/2019/01/23/obituaries/mary-boyd-higg... (https://web.archive.org/web/20190124065725/https://www.nytim...).
He has a stellar analysis of fascism in "The Mass-Psychology of Fascism." It's almost frightening how prescient he was not only for it's 1933 publication but for our current day as well. I wish more folks would check him out.
His fascination with orgone adds a lot of color to his work. I hope people don't write off his radical analyses for that. Despite the pseudoscience, he does get to the root of things. Great life-affirming stuff.