Simon Willison’s Weblog

Subscribe

10th June 2026

Research Can DuckDB run untrusted SQL as safely as Datasette runs SQLite? — Investigating the security of running untrusted SQL in DuckDB compared to Datasette with SQLite, this project establishes that DuckDB can be sandboxed to match—and sometimes exceed—the safety of SQLite, but requires more than its basic `read_only=True` option. Datasette achieves safe SQL exposure by using engine-level read-only connections and opcode-based time limits in SQLite, which inherently prevents unauthorized file or network access.
Posted 10th June 2026 at 11:41 pm

Recent articles

This is a beat by Simon Willison, posted on 10th June 2026.

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe