Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Exposed DeepSeek database leaking sensitive information, including chat history

wiz.io

Post reply on HN
Print view View original

131–140 of 499 posts

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#131

Post by mandmandam »

IncreasePosts wrote: post #101
mandmandam wrote: post #83

Earlier quoted context omitted.

> the implication is at deep seek is somehow special and is getting undue attention from hackers ... It is special. There was over a trillion dollars wiped from tech stocks lol, in a massive win for consumers and the planet. You can't say this is like Flappy Bird or something.

The stock market does all sorts of silly things. If the stocks recover in 2 weeks to where they were, will that be deep seek erasing $1T and tech re-earning $1T? Or deep seek doing nothing?

> The stock market does all sorts of silly things.

For sure. This one was pretty clear though. It's exactly what you'd expect when a moat evaporates overnight.

Even if tech stocks recover in 2 weeks (doubt) an open source model comparable to o1 with a 50x efficiency gain is still not just another app. Which means there will be bad actors with a special interest in spreading narratives on every relevant forum...

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#132

Post by Dylan16807 »

weird-eye-issue wrote: post #15
sailingparrot wrote: post #10

Earlier quoted context omitted.

> This kinda does support the 'DeepSeek is the side project of a bunch of quants' angle Can we stop with this nonsense ? The list of author of the paper is public, you can just go look it up. There are ~130 people on the ML team, they have regular ML background just like you would find at any other large ML labs. Their infra cost multiple millions of dollar per month to run, and the salary of such a big team is somew…

None of that has anything to do with "deploying external client facing applications"

You're right. It has nothing to do with the second sentence of the two sentence post it replies to.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#133

Post by kranner »

blackeyeblitzar wrote: post #33
nico wrote: post #6

So much effort in trying to tarnish DeepSeek the last 24hrs

[flagged]

I don't know about 1-4 and 5 seems an honest mistake.

Is there a source for the misleading GPU count? Dario cites Dylan Patel, and pt 4 cites Alexander Wang, but these are just claims so far.

As far as censorship regarding Chinese history, does it matter? The other models have other areas that are censored. Is anyone planning to use LLMs to look up historical facts anyway?

Stealing IP? That's rich coming from AI companies that mined the entire public internet. Did they get permissions from copyright holders in every instance?

And if DeepSeek did evade particular US sanctions whose only justification seems to be to prop up US's economic hegemony over the rest of the world (unlike sanctions against weapons, invasions and human rights violations), then good for them.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#134

Post by nostradumbasp »

lysace wrote: post #121

[flagged]

Because you can download the models yourself and run them on your own hardware bypassing all of those concerns. Also, I would be far more worried what my government might do with my chat logs then a foreign one.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#135

Post by lysace »

nostradumbasp wrote: post #134
lysace wrote: post #121

[flagged]

Because you can download the models yourself and run them on your own hardware bypassing all of those concerns. Also, I would be far more worried what my government might do with my chat logs then a foreign one.

This post is about the service, not the model(s).

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#137

Post by 0x457 »

loloquwowndueo wrote: post #56
dotancohen wrote: post #43

Earlier quoted context omitted.

Not many non-gamers have hardware capable of running such a model locally - never mind the skills. For most people, bash is not a tool for interacting with the computer, it is how they express their frustration with the computer (sometimes leaving damaged keyboards).

Wow all the gamers with mad LLM skillz.

Pretty sure gamers are mentioned because those are the usual demo that has GPUs with enough memory outside of people in the ML industry.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#138

Post by cma »

blackeyeblitzar wrote: post #42
hdlothia wrote: post #5

This kinda does support the 'DeepSeek is the side project of a bunch of quants' angle. Seems like the kind of mistake you would make if you are not used to deploying external client facing applications.

DeepSeek isn’t a side project or just a bunch of quants - these are part of the marketing that people keep repeating blindly for some reason. To build DeepSeek probably requires at least a $1B+ budget. Between their alleged 50,000 H100 GPUs, expensive (and talented) staff, and the sheer cost of iterating across numerous training runs - it all adds up to far, far more than their highly dubious claim of $5.5M. Anyone s…

> Between their alleged 50,000 H100 GPUs

I'm sure you were just mislead by all the people including Anthropic's Dario parroting this claim, but even Dario already said he was wrong to say that and semi analysis already clarified it was a misunderstanding of their claim, which was 50,000 H series, not 50,000 H100.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#139

Post by buu700 »

bri3d wrote: post #73
jvansc wrote: post #62

This is probably an incredibly stupid, off-topic question, but why are their database schemas and logs in English? Like, when a DeepSeek dev uses these systems as intended, would they also be seeing the columns, keys, etc. in English? Is there usually a translation step involved? Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools? I'm realizing no…

Almost all software engineers learn a passing amount of English - truly localized programming environments are quite esoteric and not really available for most mainstream use cases I can think of. Depending on the company culture and policy, the most common thing to see is a mix of English variable and function names with native-language comments. Occasionally you will see native-language variable and function names.…

I've also seen a codebase with a mix of English and Portuguese variable/function names and comments. In that particular case, the Portuguese variable/function names were basically treated as technical debt, with a gradual ongoing transition to consistent English naming.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#140

Post by asdasdsddd »

sailingparrot wrote: post #79
islewis wrote: post #26

Earlier quoted context omitted.

A bunch of ML researchers who were initially hired to do quant work published their first ever user facing project. So maybe not a side project, but if you have ever worked with ML researchers before, lack of engineering/security chops shouldn't be that surprising to you.

> A bunch of ML researchers who were initially hired to do quant work Very interesting! I'm sure you have a source for this claim? This myth of DS being a side project literally started from one tweet. DeepSeek the company is funded by a company whose main business is being a hedge fund, but DeepSeek itself from day 1 has been all about building LLM to reach AGI, completely independent. This is like saying SpaceX is…

Just to be pedantic, spaceX predates tesla
Post reply on HN