Live data from Hacker News

Exposed DeepSeek database leaking sensitive information, including chat history

wiz.io

371–380 of 499 posts

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#371
post #105

Earlier quoted context omitted.

Our US company sent me to France to help out with an implementation. The guy I worked with spoke very little English and my French is terrible. Both of us had done Latin, however - so the comments were hilarious as we used that as our common link. One of those projects I'd expect to show on the daily WTF at some point. I did try my hand at a translation tool, as it was all i18n up proper. Watched one guy blow coffee…

Isn't it true that schoolboys in many countries would learn Latin 100+ years ago? I suppose it would've been used sometimes in international communication?

It's still mandatory (1-2 years) in non-vocational high schools in Croatia, for the stupidest of reasons ("culture" and "you might need it in law or medical higher education").

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#372

Earlier quoted context omitted.

Someone who worked on a non-English environment years ago here: sometimes you do use the local language in some contexts, but, more often than not, you end up using English for the majority of stuff since it's a bit off-putting to mix another language with the English of programming languages and APIs.

Dumb question, but it would then seem that you have to know English to program??

A lot would probably be loan words anyway, and they're words many English speakers would also need to learn. Array, socket, database, loop, float, function, etc.

If the stack overflow examples are in English, you might as well use it. That's also why JavaScript is maybe a better choice than Typescript even if Typescript is better.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#373

Earlier quoted context omitted.

AIUI "policy" is not "law," and are subject to the whims of the current leadership in the DoJ Then again, it's my opinion that "law" isn't "law" if one has enough lawyers

You're correct, this is not so black and white as you originally established. Glad you came around! And yes, it's posturing if you wax on from such a pedestal without even reading the first paragraph of the article, which addresses your legitimate concerns.

You're not replying to the original poster. It's a different commenter.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#374

Does DeepSeek have a bug bounty program I'm not aware of with a clearly defined scope? It appears that Wiz took it upon themselves to probe and access DeepSeek's systems without permission and then write about it. If you do this and the company you're conducting your "research" on hasn't given you permission in some form, you can get yourself in a lot of hot water under the CFAA in the USA and other laws around the w…

Your posturing is unwarranted. Literally in the first paragraph: > The Wiz Research team immediately and responsibly disclosed the issue to DeepSeek, which promptly secured the exposure

FWIW, this is Mark Maunder, CEO of Defiant / Wordfence. I wouldn't write him off as some random guy on the internet.

https://www.linkedin.com/in/markmaunder

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#375
post #62

This is probably an incredibly stupid, off-topic question, but why are their database schemas and logs in English? Like, when a DeepSeek dev uses these systems as intended, would they also be seeing the columns, keys, etc. in English? Is there usually a translation step involved? Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools? I'm realizing no…

In Germany I've seen both. Whenever possible I push for having everything in English. Code comments, general documentation, databases, etc simply because the german developers know English but the non-german developers sometimes don't know German. It also puts everyone at roughly the same language level since we don't have many English natives.

PS: I remember quite a while back when Wargaming's World of Tanks became a big thing they had to translate everything from Russian to English because they wanted to get foreign developers involved as well. Never heard of the reverse happening.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#376

Earlier quoted context omitted.

Annexation by a violent dictatorship, cultural suppression, forced reeducation of hundreds of thousands of children separated from their parents, forced sterilizations, forced abortions, labor camps, and large number of deaths isn’t magnanimous. It’s genocide under international law. It is wild that you’re even defending this. > PRC has successfully implemented securitization technology Is that the best euphemism you…

It absolutely does not qualify as genocide. Hence it's never been categorized as genocide by UN, unless you subscribe to Mike Pompeo's version international law. UN already recognize XJ as PRC, annexation is over, it's fully incorporated and legally part of soverign PRC soil for decades. There's more Uyghurs now then when campaign started (and ended)... at most it's cultural genocide, which unfortunately (or fortunat…

> It absolutely does not qualify as genocide

Even just forced sterilization and abortions, which you admitted and rebranded as “enforcing family planning”, is genocide under international law.

> Parents rotate through reeducation for a few months, temporary seperation in interim, family reunited after.

Your few months claim is false. But let’s say it isn’t - are you really claiming this is okay? “Yea they just kidnap your children for a few months”. You clearly don’t have kids to minimize what this is and what it would do to the parents and children.

> Nor large number of deaths... barely any

Barely any that China admits. Of course they kept the area locked down, kept international agencies away, and admit nothing to keep the lie going. But numerous survivors have corroborated programs of torture and killings. You have to be naive or a CCP shill to think there were “barely any deaths”.

Sorry but you’re outing yourself here with this unfactual take that a few web searches easily disprove.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#377
post #62

This is probably an incredibly stupid, off-topic question, but why are their database schemas and logs in English? Like, when a DeepSeek dev uses these systems as intended, would they also be seeing the columns, keys, etc. in English? Is there usually a translation step involved? Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools? I'm realizing no…

I'm from Sweden (okay not same thing as China due to english being more common here) but I always code in english. Even if it is a script just for myself I will use english for variable names etc

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#378
post #62

This is probably an incredibly stupid, off-topic question, but why are their database schemas and logs in English? Like, when a DeepSeek dev uses these systems as intended, would they also be seeing the columns, keys, etc. in English? Is there usually a translation step involved? Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools? I'm realizing no…

There basically isn't non English software engineering.

English is the universal language in programming and software engineering, much like Latin was the universal scholarly language in the past. Sometimes even to the extent that the language starts leaking from the code and technical documents, reports, etc. are being written in English, often just because the people working close to the software are more familiar with the terminology in English than in their native language.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#379

Earlier quoted context omitted.

It absolutely does not qualify as genocide. Hence it's never been categorized as genocide by UN, unless you subscribe to Mike Pompeo's version international law. UN already recognize XJ as PRC, annexation is over, it's fully incorporated and legally part of soverign PRC soil for decades. There's more Uyghurs now then when campaign started (and ended)... at most it's cultural genocide, which unfortunately (or fortunat…

> It absolutely does not qualify as genocide Even just forced sterilization and abortions, which you admitted and rebranded as “enforcing family planning”, is genocide under international law. > Parents rotate through reeducation for a few months, temporary seperation in interim, family reunited after. Your few months claim is false. But let’s say it isn’t - are you really claiming this is okay? “Yea they just kidnap…

Last effort reply.

> is genocide under international law

No, genocide is conditional on intention to destroy. Which PRC policy isn't. It's just boring family planning that always applied to Han, that minorities historically got to opt out due to affirmative action, now equally applied to Uyhghurs with 3+ kids. Meanwhile Uyghur population contiues to increase, and family planning still limits Uyghurs and minorities to 3 kids like every other ethnic group, aka positive TFR / mathematically impossible to actually eliminate a minority. Hence it's retarded to think this satisfies definition for genocide, and why US propaganda campaign failed so hard. Because anyone except the most brain rot liberal world ordertard realize it's coercize integration/sinicization but not genocide. If PRC wanted to actually genocide Uyghurs, with their industrial capacity, they can do it in a weekend, instead they spent trillions retraining the populous and subsidize regions QoL. It's stupid to think it's genocide for the simple reason reducing 55 PRC minorities to 54 looks bad for Xi's hagiography.

>few months claim is false

Except it's true, most gets put through a few months of patriotic education to scare them from fundemental salafisim/salafijihadism. PRC doesn't have the money to waste interning million+ like US prison industrial complex forever because jailing people is profitable. I didn't say it was "OK", I just said a few months of scaring people straight at "don't be bad muslim camp" is much better/expedient/ethical than bombs. It's not minimizing, it's acknowledging that's better than kids spending years being afraid of the blue sky because some drone operator on CONUS can end you any time. And frequently do. Besides Han migrant parents are away from their kids for years, Uyghur kids can handle a few months living with relatives while their parents learn how to raise them to not commit terroism or go do a factory rotation in another province and bring home a years wage in a few months.

>Barely any

Barely any that US intelligence or anyone can find, barely any that even US propaganda under Pompeo didn't try to spin mass deaths because again it would have been absurd to even try. By survivors you mean atrocity propagandist begging for VISAs, idiots like Sayragul Sauytbay who "did not personally see violence" at the camps in 2018 to "inmates were flayed, raped by guards in front of other prisoners, and given injections that made them infertile" in 2019. You would have be naive to believe obvious attrocity propaganda. And even more delusional than a CIA shill to believe there were extreme deaths like scale of Gaza or GWOT since even POMPEO's CIA propaganda DOESN'T try to spin mass death. Like the most retarded anti-CCP/PRC "thinktanks" estimate for deaths is single digit thousands throughout XJ internment phase... for reference ~4000 prisoners die in US prisons every year i.e. the 4 years of XJ "reeduction" statistically killed less than US prisons during same time period.

So let that settle in, your positions are literally more ridiculous than what lying Pompeo is willing to propagandize. Claiming otherwise is not just not factual but delusional beyond even already delusional propaganda. It's outing the sheer unhingedness of your worldview, which TBH explains how you think XJ is worse atrocity than GWOT or Gaza when XJ is objectively one of the most "humane" integration campaigns in human history. Humane =/= clean, just historically when integrating a minority, much more blood was shed and destruction was wrought over much longer period of time, and the minority populations generally weren't still growing while per capita GDP roughly doubles, oh and terrorist attacks basically eliminated for 1350 million people... which you seem to think is important enough for 10 million large Israel to rationalize their response.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#380

Earlier quoted context omitted.

Interestingly, in the world of electronics this used to be true too. The first Diode on a circuit board would be marked "D1", no matter which country produced it. Datasheets for components would be in english. Any text on a circuit board would be in english (ie. "Voltage Select Switch" or "Copyright 2025".). However, a few years back it became common for most datasheets to be available in mandarin and english, and th…

> Components often still use 0.1 inch pin spacing. This changed with IC SMD packages. It's now mostly even 100-micrometers. SMD passives seem to be in a state of limbo, but mostly still using inches. Mouser lists resistor size codes as both inch and mm. It's a bit confusing.

yeah, PCBs are a muddled mix. I've seen footprint drawings which use metric for some dimensions and imperial for others!
Post reply on HN