Live data from Hacker News

Exposed DeepSeek database leaking sensitive information, including chat history

wiz.io

201–210 of 499 posts

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#201
post #121

[flagged]

Not being a fan of CCP, I wonder how many times you did ask ChagGPT about CCP? Why bother suddenly? Should it matter for a Chinese model which is genuinely good in every other aspect?

Don't take it personally, please. Just measuring my internal self which I inherited by coexisting many years with a similar regime.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#202

Earlier quoted context omitted.

> A bunch of ML researchers who were initially hired to do quant work Very interesting! I'm sure you have a source for this claim? This myth of DS being a side project literally started from one tweet. DeepSeek the company is funded by a company whose main business is being a hedge fund, but DeepSeek itself from day 1 has been all about building LLM to reach AGI, completely independent. This is like saying SpaceX is…

See this earlier interview from 2020. https://www.pekingnology.com/p/ceo-of-deepseeks-parent-high-... TDLR Highflyer started very much as exclusive ML/AI focused quant investment firm, with a lot of compute for finance AI and mining. Then CCP cracked down on mining... then finance, so Liang probably decided to pivot to LLM/AGI, which likely started as side project, but probably not anymore now the DeepSeek has taken…

Yes, see my analogy with Elon.

The point is, the team actually doing the DeepSeek work are working on this as their exclusive project, have been hired exclusively for this etc.

They aren't doing this on the side of their main quant job, and destroying U.S. researchers just as a hobby as the myth would have us believe.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#204
that's why i never use my strong passwords in many chinese websites(in fact, i tend not to use passwords in any website)

i suggest you guys don't do that also

this industry in china is so young, many devs and orgs don't understand what will happened if they shutdown the firewall or expose their database on the internet without a password

they just, can't think of it, need someone to remind them

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#205
post #141

Earlier quoted context omitted.

Their models are open weights, and they are supported in ollama. You can run locally if you have sufficient hardware.

Well, thanks for not calling it open source! I did run it locally. It behaved as you would expect when asked about things the CCP cares about. https://hongkongfp.com/wp-content/uploads/2021/11/brave_udRs...

Very easy to circumvent if you run the raw model locally, no different from how western models are lobotomized for liberalist/nationalist reasons.

In fact these models are less lobotomized than western open source models.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#206

Does DeepSeek have a bug bounty program I'm not aware of with a clearly defined scope? It appears that Wiz took it upon themselves to probe and access DeepSeek's systems without permission and then write about it. If you do this and the company you're conducting your "research" on hasn't given you permission in some form, you can get yourself in a lot of hot water under the CFAA in the USA and other laws around the w…

Your posturing is unwarranted. Literally in the first paragraph:

> The Wiz Research team immediately and responsibly disclosed the issue to DeepSeek, which promptly secured the exposure

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#208

Earlier quoted context omitted.

See this earlier interview from 2020. https://www.pekingnology.com/p/ceo-of-deepseeks-parent-high-... TDLR Highflyer started very much as exclusive ML/AI focused quant investment firm, with a lot of compute for finance AI and mining. Then CCP cracked down on mining... then finance, so Liang probably decided to pivot to LLM/AGI, which likely started as side project, but probably not anymore now the DeepSeek has taken…

Yes, see my analogy with Elon. The point is, the team actually doing the DeepSeek work are working on this as their exclusive project, have been hired exclusively for this etc. They aren't doing this on the side of their main quant job, and destroying U.S. researchers just as a hobby as the myth would have us believe.

That's a fair distinction. IMO should still be categorized as side project in the sense that it's Liang's pet project, the same way Jeff Bezos spend $$$ on his forever clock with seperate org but ultimately with Amazon resources. DeepSeek / Liang fixating on AGI and not profit making or loss-making since hardware / capex deprecation is likely eaten by High Flyer / quant side. No reason to believe DeepSeek spent 100ms to build out another compute chain from High Flyer. Myth that seasoned finance quants using 20% time to crush US researchers is false, but reality/narrative that a bunch of fresh out of school GenZ kids from tier1 PRC universities destroying US researchers is kind of just as embarassing.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#209

How do we know for sure that DeepSeek is not actually trained on Nvidia chips? Did someone outside of China replicated the training from scratch (Spending $6M)?

They themselves said it was trained on NVIDIA chips, so I’m not sure where you got that it wasn’t. It was trained on the less capable versions sold for the Chinese market.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#210

Earlier quoted context omitted.

Someone who worked on a non-English environment years ago here: sometimes you do use the local language in some contexts, but, more often than not, you end up using English for the majority of stuff since it's a bit off-putting to mix another language with the English of programming languages and APIs.

Dumb question, but it would then seem that you have to know English to program??

This is a bit environment dependent is my impression. Like France and Japan both have enough people shitty at English to generate either translations or home grown programming learning material to fight against this barrier. But my impression is that, like, a German programmer isn't getting far in life without being comfy reading stuff in English
Post reply on HN