<![CDATA[A design flaw in the MCP protocol.]]>A design flaw in the MCP protocol. Whoda thunk. Honestly even back when they were first discussing MCP in 2024 I worried about that. Supply chain is enough of a mess, now this?

Just a moment...

favicon

(www.securityweek.com)

]]>https://board.circlewithadot.net/topic/d9816500-3bd7-4a88-b62c-6f16b9a7d0d2/a-design-flaw-in-the-mcp-protocol.RSS for NodeFri, 17 Apr 2026 04:56:44 GMTThu, 16 Apr 2026 03:46:41 GMT60<![CDATA[Reply to A design flaw in the MCP protocol. on Thu, 16 Apr 2026 11:52:49 GMT]]>@dmikusa No, it's nothing new. Once I actually got all the way down to the white paper, I discovered that there really isn't much to this at all, other than: hey, if you have an agent unprotected on your local machine, it can do bad things. That is an important message and should be gotten out there however it gets out there, but certainly not worth all the AI-generated hype and process of the original article.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/Sempf/statuses/116414242477944645https://board.circlewithadot.net/post/https://infosec.exchange/users/Sempf/statuses/116414242477944645Thu, 16 Apr 2026 11:52:49 GMT<![CDATA[Reply to A design flaw in the MCP protocol. on Thu, 16 Apr 2026 11:43:19 GMT]]>@Sempf I read that article and it’s got a lot of claims but is lacking in detail, have you seen anything more specific? Wondering if this is something new? Local MCP has always been a mine field, because you’re downloading unsandboxed code and running it on your machine. It’s the exact same problem as most package managers or download installer.exe and double click. It’s all rolling the dice. 🎲🎲

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/dmikusa/statuses/116414205067398048https://board.circlewithadot.net/post/https://fosstodon.org/users/dmikusa/statuses/116414205067398048Thu, 16 Apr 2026 11:43:19 GMT<![CDATA[Reply to A design flaw in the MCP protocol. on Thu, 16 Apr 2026 09:38:20 GMT]]>@joriki The Most Battle Weary Man in the World. "I don't ever drink beer. Scotch. Double. Neat."

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/Sempf/statuses/116413713664939896https://board.circlewithadot.net/post/https://infosec.exchange/users/Sempf/statuses/116413713664939896Thu, 16 Apr 2026 09:38:20 GMT<![CDATA[Reply to A design flaw in the MCP protocol. on Thu, 16 Apr 2026 05:44:14 GMT]]>@Sempf

I don't always lol lmfao, but when I do it's usually about cryptocurrency and AI

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/joriki/statuses/116412793131026019https://board.circlewithadot.net/post/https://infosec.exchange/users/joriki/statuses/116412793131026019Thu, 16 Apr 2026 05:44:14 GMT