Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Exposed DeepSeek database leaking sensitive information, including chat history

wiz.io

Post reply on HN
Print view View original

241–250 of 499 posts

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#241

Post by cptskippy »

Twirrim wrote: post #217
yk wrote: post #111

Earlier quoted context omitted.

That's pretty much the same mistake as in VW recent "We know where you parked" hack. [0] So while I don't really want to say anything nice about VW, the mistake is no something that only happens to side projects. [0] https://www.spiegel.de/international/business/we-know-where-...

This is also something that keeps affecting "smart" software engineers with projects, that don't realise they've got misconfigured S3 buckets, or have Firebase or Mongodb etc. wide open to the world. We've seen so many companies that absolutely should know better be in this area.

The reality is that cloud providers make it easy to deploy infrastructure without much thought. You need skilled domain specific IT Architects working together to ensure that an organization's cloud presence is efficient and secure. That discipline and rigor is often dismissed or underappreciated because it forces you to slow down and decreases agility.

Some organizations have some form of Enterprise Architecture group that governs technology and ensures that there is discipline though the maturity and scope varies. I would say most organizations are completely devoid of that type of supervision and oversight.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#242

Post by bobxmax »

mmaunder wrote: post #225

The amount of vitriol in these comments is the really surprising data. I've seen the same on Twitter. I can only put it down to the financial pain DeepSeek inflicted on many US retail investors by wiping almost $700 billion off NVidia's stock price. I think a lot of folks didn't see it coming and it hurt them right where it matters most: In the wallet. The anger out there is very real.

It's also deeply damaging to the western ego, especially one rooted in American exceptionalism.

But also one those of us actually working on foundational AI saw coming a mile away when most of the top research of late has been happening in Chinese labs, not American or European ones.

Can't wait to see what this boneheaded President's tarrif on TSMC does to this situation.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#243

Post by triceratops »

AlotOfReading wrote: post #240
saturn8601 wrote: post #178

Earlier quoted context omitted.

No he is right, hardware manufacturers treat software as a line item and just part of the BOM. Typically just contracted out (although some are trying to change that) Thats why its typically mediocre from companies outside of SV. You need a software first agile mentality from the leadership of the company on downwards and these legacy companies just dont have it.

VW realized that software was important years ago and founded a dedicated software-only company called Cariad to specialize in it. They went ham recruiting traditional software folks for high salaries (in European terms). I know a few people who moved Bay area -> Europe to work for them and they have a couple west coast offices where you'd expect for the people who don't want to move. It's been an absolute disaster,…

Damn that last sentence was a heck of a plot twist.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#244

Post by karim79 »

mmaunder wrote: post #225

The amount of vitriol in these comments is the really surprising data. I've seen the same on Twitter. I can only put it down to the financial pain DeepSeek inflicted on many US retail investors by wiping almost $700 billion off NVidia's stock price. I think a lot of folks didn't see it coming and it hurt them right where it matters most: In the wallet. The anger out there is very real.

+1. I also enjoy the "China be stealin' ur data and personal info" angle. As if the incumbents haven't already done that, and are still doing it, as their core business practices.

This whole thing should be an eye-opener to most people.

To ask an honest question, who gives a crap if a Chinese company manages to grab data that many of the usual Silicon Valley suspects have had all along and have been incrementally updating? How is this a "threat".

To pile on another gripe, why the hell does every single media outlet point out the "Tienanmen Square" question?

The whole thing has just become embarrassing. I honestly can't fathom what worse China could do with my personal info than the likes of say, Meta. I'm not saying I would enjoy it, but I just don't see how it could be more harmful than the Silicon Valley status quo.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#245

Post by m00x »

mmaunder wrote: post #225

The amount of vitriol in these comments is the really surprising data. I've seen the same on Twitter. I can only put it down to the financial pain DeepSeek inflicted on many US retail investors by wiping almost $700 billion off NVidia's stock price. I think a lot of folks didn't see it coming and it hurt them right where it matters most: In the wallet. The anger out there is very real.

The hit on NVidia's stock price makes no sense to me.

DeepSeek uses H100s and H800s. They'll likely have reasons to buy more now, and America will want to compete even harder, buying more chips.

American companies are still way ahead as well, but they're just getting more competition. This will be healthy.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#246

Post by elevatedastalt »

mmaunder wrote: post #225

The amount of vitriol in these comments is the really surprising data. I've seen the same on Twitter. I can only put it down to the financial pain DeepSeek inflicted on many US retail investors by wiping almost $700 billion off NVidia's stock price. I think a lot of folks didn't see it coming and it hurt them right where it matters most: In the wallet. The anger out there is very real.

In whose hands do you think your personal data is more secure? Google or DeepSeek?

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#247

Post by lolinder »

mmaunder wrote: post #225

The amount of vitriol in these comments is the really surprising data. I've seen the same on Twitter. I can only put it down to the financial pain DeepSeek inflicted on many US retail investors by wiping almost $700 billion off NVidia's stock price. I think a lot of folks didn't see it coming and it hurt them right where it matters most: In the wallet. The anger out there is very real.

I'm sure some people did actually get hurt by NVIDIA's stock dropping, but it's also important to keep the size of the effect in perspective: NVIDIA's stock is back to where it was in September of last year, and still up almost 1900% from 5 years ago and up 103% from a year ago.

NVIDIA's stock has been super bubbly—all DeepSeek did was set off itchy investor trigger fingers that were already worried about its highly inflated price.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#248

Post by gerdesj »

gerdesj wrote: post #233
mmaunder wrote: post #225

The amount of vitriol in these comments is the really surprising data. I've seen the same on Twitter. I can only put it down to the financial pain DeepSeek inflicted on many US retail investors by wiping almost $700 billion off NVidia's stock price. I think a lot of folks didn't see it coming and it hurt them right where it matters most: In the wallet. The anger out there is very real.

"The amount of vitriol in these comments is the really surprising data" No it isn't (well it probably is too). This is the rather naff nation state bollocks in play. You have either or both of "some bigger boys found a more efficient way of doing something I thought I was good at" and "I've wet myself".

sigh

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#249

Post by jijji »

mmaunder wrote: post #225

The amount of vitriol in these comments is the really surprising data. I've seen the same on Twitter. I can only put it down to the financial pain DeepSeek inflicted on many US retail investors by wiping almost $700 billion off NVidia's stock price. I think a lot of folks didn't see it coming and it hurt them right where it matters most: In the wallet. The anger out there is very real.

Did you even read the article? It's about the backend of deepseek.com being completely unprotected to the point where all the prompts users typed in are being exposed to the public. The fact that these people are supposed to be competent leads most to believe this is a backend for the CCP to spy on users. Competent or not, I would not use that system for anything. If anything, one might host it locally and use it in that way. Regardless, deepseek.com has serious security issues.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#250

Post by evantbyrne »

maximilianthe1 wrote: post #155
evantbyrne wrote: post #93

Earlier quoted context omitted.

Not literally required, because languages typically support UTF-8 source files, but it would be difficult to use most popular software libraries without being able to at least read English.

Actually, most "most popular software libraries" have either translated docs, or guides in a non-English language. Furthermore, modern browsers can translate text on the fly. Some (like Yandex.Browser [1] not_an_ad) can even translate videos on the fly. [1] https://yandex.ru/project/browser/streams/technology (RU only)

Sure docs for massively popular libraries are translated but think about using autocomplete, reading the actual library code, or even just reading other code in your organization. I have to imagine it would be difficult without any English proficiency.
Post reply on HN