Live data from Hacker News

Exposed DeepSeek database leaking sensitive information, including chat history

wiz.io

251–260 of 499 posts

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#251

Earlier quoted context omitted.

Are you saying this report was falsified, or that the press should keep things like this secret?

Probably they are rather suggesting that there are a lot of unscrupulous western companies with a lot to lose who might have an interest in convincing certain people to skip responsible disclosure

The vulnerability was fixed before the disclosure, so that's a non-issue here.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#252
post #249

The amount of vitriol in these comments is the really surprising data. I've seen the same on Twitter. I can only put it down to the financial pain DeepSeek inflicted on many US retail investors by wiping almost $700 billion off NVidia's stock price. I think a lot of folks didn't see it coming and it hurt them right where it matters most: In the wallet. The anger out there is very real.

Did you even read the article? It's about the backend of deepseek.com being completely unprotected to the point where all the prompts users typed in are being exposed to the public. The fact that these people are supposed to be competent leads most to believe this is a backend for the CCP to spy on users. Competent or not, I would not use that system for anything. If anything, one might host it locally and use it in…

I'm wary of engaging in false equivalence, but people seem to have really forgotten the revelations of the Snowden episode.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#253

The amount of vitriol in these comments is the really surprising data. I've seen the same on Twitter. I can only put it down to the financial pain DeepSeek inflicted on many US retail investors by wiping almost $700 billion off NVidia's stock price. I think a lot of folks didn't see it coming and it hurt them right where it matters most: In the wallet. The anger out there is very real.

It's also deeply damaging to the western ego, especially one rooted in American exceptionalism. But also one those of us actually working on foundational AI saw coming a mile away when most of the top research of late has been happening in Chinese labs, not American or European ones. Can't wait to see what this boneheaded President's tarrif on TSMC does to this situation.

Well to be honest most of this on start came from US so the general surprise is understendable. But of course it would be foolish and arrogant assume that for whole progress forever.

I don't understand the rage. This is good for everyone. Competition is what drives innovation and they even open sourced it! If you want to outdo them, learn from them. Don't just try to cry louder, it's embarrassing for everyone.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#254
post #64

Earlier quoted context omitted.

> Anyone spending that amount of money isn’t just doing a side project. You're reciting a bunch of absolute numbers, without any sort of context at all. $5M isn't the same for every company. For example, in 2020, it seems High Flyer spent a casual $27M on a supercomputer. They later replaced that with a $138M new computer. $5.5M sounds like something that could be like a side-project for a company like that, whose bl…

> that could be like a side-project for a company like that, whose blood and sweat is literally money. From the mouth of Liang Wenfeng, co-founder of both High Flyer and DeepSeek, 18 months ago: "Our large-model project is unrelated to our quant and financial activities. We’ve established an independent company called DeepSeek, to focus on this." https://www.chinatalk.media/p/deepseek-from-hedge-fund-to-fr...

It's a side project called DeepSeek .

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#255

The amount of vitriol in these comments is the really surprising data. I've seen the same on Twitter. I can only put it down to the financial pain DeepSeek inflicted on many US retail investors by wiping almost $700 billion off NVidia's stock price. I think a lot of folks didn't see it coming and it hurt them right where it matters most: In the wallet. The anger out there is very real.

+1. I also enjoy the "China be stealin' ur data and personal info" angle. As if the incumbents haven't already done that, and are still doing it, as their core business practices. This whole thing should be an eye-opener to most people. To ask an honest question, who gives a crap if a Chinese company manages to grab data that many of the usual Silicon Valley suspects have had all along and have been incrementally upd…

> How is this a "threat".

Given how closely major US tech companies are now affiliated and partnered with the US Federal government, arguably the direct potential threat from them to US citizens may well be higher than from across a very big pond.

People trot out "I'd rather our guys spy on me than them" a lot, but that's putting a lot of faith in your local government. Conversely, who do you think has more to fear from their logged prompts on DeepSeek, US or Chinese citizens?

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#256
post #245

The amount of vitriol in these comments is the really surprising data. I've seen the same on Twitter. I can only put it down to the financial pain DeepSeek inflicted on many US retail investors by wiping almost $700 billion off NVidia's stock price. I think a lot of folks didn't see it coming and it hurt them right where it matters most: In the wallet. The anger out there is very real.

The hit on NVidia's stock price makes no sense to me. DeepSeek uses H100s and H800s. They'll likely have reasons to buy more now, and America will want to compete even harder, buying more chips. American companies are still way ahead as well, but they're just getting more competition. This will be healthy.

It's probably the lack of understanding the market... Most people thought there was a ban (issued by the US in 2022) against China being able to utilize the H100 Nvidia graphics cards to prevent them from using AI (for the obvious purpose of oppressing their people). If anything, export controls need to be looked at and probably tightened as this is a glaring loop hole.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#257
post #256
post #245

Earlier quoted context omitted.

The hit on NVidia's stock price makes no sense to me. DeepSeek uses H100s and H800s. They'll likely have reasons to buy more now, and America will want to compete even harder, buying more chips. American companies are still way ahead as well, but they're just getting more competition. This will be healthy.

It's probably the lack of understanding the market... Most people thought there was a ban (issued by the US in 2022) against China being able to utilize the H100 Nvidia graphics cards to prevent them from using AI (for the obvious purpose of oppressing their people). If anything, export controls need to be looked at and probably tightened as this is a glaring loop hole.

Huawei has B200 competitive inference chips coming.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#258
post #239
post #5

This kinda does support the 'DeepSeek is the side project of a bunch of quants' angle. Seems like the kind of mistake you would make if you are not used to deploying external client facing applications.

'DeepSeek is the side project of a bunch of quants' I doubt it very much that it only was that and not massivly backed by the Chinese state in general. As with OpenAI, much of this has to do with hype based speculation. In the case of OpenAI they played with the speculations, that they might have AGI locked up in their labs already and fueled those speculations. The result, massive investment (now in danger). And Chi…

I don't buy this, simply because if the Chinese government were to back an effort, it wouldn't be Deepseek.

Alibaba has Qwen. Baidu, Huawei, Tencent, etc all have their own AI models. The Chinese government would most likely push one of these forward with their backing, not an unknown small company.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#259

Earlier quoted context omitted.

Quite the posturing with that last sentence

omg dude it literally says that in the code: https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act

https://www.justice.gov/opa/pr/department-justice-announces-...

>The Department of Justice today announced the revision of its policy regarding charging violations of the Computer Fraud and Abuse Act (CFAA).

The policy for the first time directs that good-faith security research should not be charged. Good faith security research means accessing a computer solely for purposes of good-faith testing, investigation, and/or correction of a security flaw or vulnerability, where such activity is carried out in a manner designed to avoid any harm to individuals or the public, and where the information derived from the activity is used primarily to promote the security or safety of the class of devices, machines, or online services to which the accessed computer belongs, or those who use such devices, machines, or online services.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#260
post #255

Earlier quoted context omitted.

+1. I also enjoy the "China be stealin' ur data and personal info" angle. As if the incumbents haven't already done that, and are still doing it, as their core business practices. This whole thing should be an eye-opener to most people. To ask an honest question, who gives a crap if a Chinese company manages to grab data that many of the usual Silicon Valley suspects have had all along and have been incrementally upd…

> How is this a "threat". Given how closely major US tech companies are now affiliated and partnered with the US Federal government, arguably the direct potential threat from them to US citizens may well be higher than from across a very big pond. People trot out "I'd rather our guys spy on me than them" a lot, but that's putting a lot of faith in your local government. Conversely, who do you think has more to fear f…

I think you missed my point, or I wasn't clear enough. Your point is exactly the one I was trying to make. I think I must re-examine my articulation.
Post reply on HN