Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Exposed DeepSeek database leaking sensitive information, including chat history

wiz.io

Post reply on HN
Print view View original

361–370 of 499 posts

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#361

Post by stratocumulus0 »

icepat wrote: post #100
rcruzeiro wrote: post #65

Earlier quoted context omitted.

Someone who worked on a non-English environment years ago here: sometimes you do use the local language in some contexts, but, more often than not, you end up using English for the majority of stuff since it's a bit off-putting to mix another language with the English of programming languages and APIs.

Yep, myself as well. I've heard non-English programmers who've worked with non-English codebases call them "very weird".

I've been working on a project for the former Polish state telco and the codebase was mostly Java EE as written in the mid-00's. Since you cannot really be productive in Java without an IDE, standard English conventions for naming have been pushed onto the devs from early on - a getter must start with `get` or `is` if the return type is boolean, class names have to contain standardized postfixes corresponding to the design pattern used, such as `AbstractFactoryBean` etc. But since few people spoke English back then, they ended up with awful hybrid names such as `getCennikSluchawkiKeySet` or `OfertaManagerPrzylaczeProxy`.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#362

Post by maeil »

lukan wrote: post #226
jvansc wrote: post #62

This is probably an incredibly stupid, off-topic question, but why are their database schemas and logs in English? Like, when a DeepSeek dev uses these systems as intended, would they also be seeing the columns, keys, etc. in English? Is there usually a translation step involved? Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools? I'm realizing no…

"Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools?" Yes, that's what we did and do. Depending on the project, I do use german variable names and comments at times, but stopped using all special characters like öüäß, they mess things up, despite in theory should just work fine. Nowdays even chrome dev tools come in german, but experience shows, t…

Your country's biggest SW company is SAP, world infamous for their German column names, haha. Pretty sure it's the most widely used product in the world with non-English internals that people actually interact with - I'm sure there's some Realtek firmware with billions of installs that's in Chinese but barely anyone has to look at that.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#363

Post by rammer »

AlotOfReading wrote: post #240
saturn8601 wrote: post #178

Earlier quoted context omitted.

No he is right, hardware manufacturers treat software as a line item and just part of the BOM. Typically just contracted out (although some are trying to change that) Thats why its typically mediocre from companies outside of SV. You need a software first agile mentality from the leadership of the company on downwards and these legacy companies just dont have it.

VW realized that software was important years ago and founded a dedicated software-only company called Cariad to specialize in it. They went ham recruiting traditional software folks for high salaries (in European terms). I know a few people who moved Bay area -> Europe to work for them and they have a couple west coast offices where you'd expect for the people who don't want to move. It's been an absolute disaster,…

Oh no they did write that one piece of software, which was successful until it wasn't.

https://venturebeat.com/offbeat/how-volkswagen-used-software...

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#364

Post by sakras »

jvansc wrote: post #62

This is probably an incredibly stupid, off-topic question, but why are their database schemas and logs in English? Like, when a DeepSeek dev uses these systems as intended, would they also be seeing the columns, keys, etc. in English? Is there usually a translation step involved? Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools? I'm realizing no…

From what I’ve seen, code usually comes in one of two languages: English or French. Somehow everyone but the French speaks enough English to write code!

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#365

Post by throwaway2037 »

jijji wrote: post #353
amlib wrote: post #304

Earlier quoted context omitted.

Sorry for the whataboutism, but the US looks more and more hypocrite when they sell themselves as the paragons of democracy and free trade, ready to save the world from authoritarian China but are fine selling AI and AI hardware (and armament, but that's another matter...) to Israel's oppressive regime which clearly uses it to persecute and kill innocent Palestinians. It's all just dirty politics, in the end none of…

I think the difference in your comment is that China is doing this to their own citizens. Israel is oppressing their enemy, who have voted for Hamas to be the leader of their government, which stated intent is to destroy Israel... Big difference.

    > voted for Hamas
I needed to remind myself of how many times they did that (once). It is incredible that Palestine hasn't had an election since 2006. Ref: https://en.wikipedia.org/wiki/2006_Palestinian_legislative_e...

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#366

Post by forgetfulness »

blackeyeblitzar wrote: post #351
computerthings wrote: post #338

Earlier quoted context omitted.

> surveys indicated that an overwhelming majority of residents of Gaza supported Hamas Come on, nearly half of the inhabitants of Gaza are/were under 18. "Surveys" cannot make collective punishment legal, or annexation and ethnic cleansing for that matter. I'd say outright cutting off a whole population from food and going on TV to rant about how even the babies are terrorists isn't self-defense or security. If anyth…

I mentioned the surveys to indicate the complicity of the civilian population in Hamas’s actions. Often people claim the residents of Gaza didn’t vote for Hamas since the last election was in 2006. But the surveys reveal that most of them do support them and their religious terrorism. > "Surveys" cannot make collective punishment legal, or annexation and ethnic cleansing for that matter. What do you mean by annexatio…

Your impassionate argument in favor of an ethnic cleansing with bombs, starvation and lack of sanitation lies in stark contrast to this outrage about the Uyghurs' culture being erased with development and draconian imprisonment for suspected extremism, while at the same time, the West Bank was reduced to a patchwork of ghettos with draconian checkpoints where life is cheap if you are suspected to be an extremist.

On the one hand, the slaughter of teenagers today in Gaza is justified because of the sins of their forefathers in electing Hamas, on the other, it's a genocidal atrocity that beards can only be so long in Xinjiang.

The US is only more righteous for supporting America's Greatest Ally at the cost of the lives of it citizens, of those of Arab countries and, now with the TikTok ban, to its founding principles, in your world.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#367

Post by tadfisher »

Twirrim wrote: post #219
londons_explore wrote: post #128

Earlier quoted context omitted.

Interestingly, in the world of electronics this used to be true too. The first Diode on a circuit board would be marked "D1", no matter which country produced it. Datasheets for components would be in english. Any text on a circuit board would be in english (ie. "Voltage Select Switch" or "Copyright 2025".). However, a few years back it became common for most datasheets to be available in mandarin and english, and th…

> Not everything changes though - gold plating thickness is measured by the micro-inch Considering how much manufacturing and science etc. has fully migrated to metric, even in the US, this seems bizarre to me.

Like in machining, there's a long history of measuring everything in "thou" (micro-inch sounds proleptic to me, and you'll see "mil" used in the EDA space). All the tooling uses it, standardized components use it (I can drop a 74-series TTL chip from the 1970s in a modern board), and everyone learns it when they start using EDA.

Recently there has been a shift to metric in EDA software, so you'll see often see multiples of 2.54mm, and packages are switching to metric for the fine-pitch stuff. Often you'll have spacing in both units in the same design.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#368

Post by senko »

jvansc wrote: post #62

This is probably an incredibly stupid, off-topic question, but why are their database schemas and logs in English? Like, when a DeepSeek dev uses these systems as intended, would they also be seeing the columns, keys, etc. in English? Is there usually a translation step involved? Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools? I'm realizing no…

> Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools?

Not only that. All of the code I (not a native English speaker) write, even if only I will ever see it, is in English - comments too. And I'm pretty confident all my colleagues do that too.

Might be different for languages with large population of native speakers (Croatian is just a few mil so we're more exposed to it), but you still can't avoid using English for tools / libs / docs / research papers / stack overflow...

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#369

Post by whilenot-dev »

throwaway2037 wrote: post #357
denysvitali wrote: post #144

Earlier quoted context omitted.

In the wild I've seen a company returning a JSON key "ankunftTime" in one of their APIs

Google tells me that "ankunft" means arrival in German. Is that correct?

Correct, it's "arrival time".

It isn't uncommon to find german variable names in codebases that predate web 1.0 or linux.

Now that I think about it, german is especially good at creating words by concatination. So "arrival time" should just be the single word "Ankunftszeit" - "ankunftZeit" feels a bit off.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#370

Post by tommiegannert »

londons_explore wrote: post #128
david-gpu wrote: post #69

Earlier quoted context omitted.

> Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools? That is precisely what happens. It is not unusual for code and databases to be written in English, even when the developers are from a non-English speaking country. Think about it: the toolchain, programming language and libraries are all based on English anyway.

Interestingly, in the world of electronics this used to be true too. The first Diode on a circuit board would be marked "D1", no matter which country produced it. Datasheets for components would be in english. Any text on a circuit board would be in english (ie. "Voltage Select Switch" or "Copyright 2025".). However, a few years back it became common for most datasheets to be available in mandarin and english, and th…

> Components often still use 0.1 inch pin spacing.

This changed with IC SMD packages. It's now mostly even 100-micrometers.

SMD passives seem to be in a state of limbo, but mostly still using inches. Mouser lists resistor size codes as both inch and mm. It's a bit confusing.

Post reply on HN