Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Exposed DeepSeek database leaking sensitive information, including chat history

wiz.io

Post reply on HN
Print view View original

381–390 of 499 posts

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#381

Post by lawn »

bryanrasmussen wrote: post #356
david-gpu wrote: post #69

Earlier quoted context omitted.

> Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools? That is precisely what happens. It is not unusual for code and databases to be written in English, even when the developers are from a non-English speaking country. Think about it: the toolchain, programming language and libraries are all based on English anyway.

I have worked in a couple places where some of the code was not in English, and it was incredibly annoying, like an affectation.

As a Swede I sometimes encounter new programmers using Swedish instead of English and it's incredibly jarring.

It's a little bit better if only the comments are in Swedish but it's still annoying...

Luckily it's very rare.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#382

Post by EVa5I7bHFq9mnYK »

m00x wrote: post #245
mmaunder wrote: post #225

The amount of vitriol in these comments is the really surprising data. I've seen the same on Twitter. I can only put it down to the financial pain DeepSeek inflicted on many US retail investors by wiping almost $700 billion off NVidia's stock price. I think a lot of folks didn't see it coming and it hurt them right where it matters most: In the wallet. The anger out there is very real.

The hit on NVidia's stock price makes no sense to me. DeepSeek uses H100s and H800s. They'll likely have reasons to buy more now, and America will want to compete even harder, buying more chips. American companies are still way ahead as well, but they're just getting more competition. This will be healthy.

The nvidia bubble went too far and was about to burst anyway. I started to buy puts a year ago. The DeepSeek was just a convenient catalyst.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#383

Post by SahAssar »

ceejayoz wrote: post #76
SahAssar wrote: post #41

Earlier quoted context omitted.

> You aren’t supposed to have it on a public subnet. That's an incredibly bad assumption. To have defaults assume that you are on a protected network (what does that even mean? like what permissions are assumed just because you are on the same network? admin?) is just bad practice.

Private networking for internal things like databases has been the standard best practice for a long, long time.

Safe default configuration has been the standard practice for even longer.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#384

Post by sd9 »

heelix wrote: post #105
rcruzeiro wrote: post #65

Earlier quoted context omitted.

Someone who worked on a non-English environment years ago here: sometimes you do use the local language in some contexts, but, more often than not, you end up using English for the majority of stuff since it's a bit off-putting to mix another language with the English of programming languages and APIs.

Our US company sent me to France to help out with an implementation. The guy I worked with spoke very little English and my French is terrible. Both of us had done Latin, however - so the comments were hilarious as we used that as our common link. One of those projects I'd expect to show on the daily WTF at some point. I did try my hand at a translation tool, as it was all i18n up proper. Watched one guy blow coffee…

LLMs seem pretty great at helping with the translation like this. I asked chatgpt about "back" and it gave me tons of options.

https://chatgpt.com/share/679b43af-e770-800a-92ee-b27bd87194...

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#385

Post by blackeyeblitzar »

forgetfulness wrote: post #366
blackeyeblitzar wrote: post #351

Earlier quoted context omitted.

I mentioned the surveys to indicate the complicity of the civilian population in Hamas’s actions. Often people claim the residents of Gaza didn’t vote for Hamas since the last election was in 2006. But the surveys reveal that most of them do support them and their religious terrorism. > "Surveys" cannot make collective punishment legal, or annexation and ethnic cleansing for that matter. What do you mean by annexatio…

Your impassionate argument in favor of an ethnic cleansing with bombs, starvation and lack of sanitation lies in stark contrast to this outrage about the Uyghurs' culture being erased with development and draconian imprisonment for suspected extremism, while at the same time, the West Bank was reduced to a patchwork of ghettos with draconian checkpoints where life is cheap if you are suspected to be an extremist. On…

I think you're raising an important point that I acknowledge, and I need to process that more. But my immediate thought is to note that the two situations are very different to me. Uyghurs are indigenous to Xinjiang (more than anyone else), and Islamic Arabs in Gaza or the West Bank are not indigenous to the region around Israel (Jewish people are, while Gaza's residents are outsiders since Islamic Arabs aren't indigenous to the region). The CCP/PRC is erasing Uyghur life in Xinjiang and forcing their population growth downward, while Islamic Arabs living in Israel have full protection of the law, can practice their religion and culture freely, gain wealth, have families without forced sterilization or abortion, and live without the threat of the state kidnapping their children. There's no evidence of Uyghurs broadly supporting terrorist attacks, while there's evidence of Gaza residents overwhelmingly supporting things like repeated rocket attacks.

There's more but basically there are enough differences that the situations can be treated differently. But at the same time, I do hope for a different, peaceful solution. Surveys show Islamic Arabs are generally quite happy under Israel, but that won't work for those in West Bank or Gaza perhaps. You are right that teenagers who aren't supportive of terrorism don't deserve violence. A two state solution still seems like the best idea, but Hamas has still not shown support for it, even though it would mean peaceful coexistence and could lead to a rebuilding of Gaza and West Bank.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#386

Post by sharpy »

sakras wrote: post #364
jvansc wrote: post #62

This is probably an incredibly stupid, off-topic question, but why are their database schemas and logs in English? Like, when a DeepSeek dev uses these systems as intended, would they also be seeing the columns, keys, etc. in English? Is there usually a translation step involved? Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools? I'm realizing no…

From what I’ve seen, code usually comes in one of two languages: English or French. Somehow everyone but the French speaks enough English to write code!

Worked for a french company once. The code was in English, but the comments were in French. I guess this happens, because all the language keywords are English, so it might be strange to mix and match langauges there. But comments were fair game.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#388

Post by djtango »

0xDEAFBEAD wrote: post #346
heelix wrote: post #105

Earlier quoted context omitted.

Our US company sent me to France to help out with an implementation. The guy I worked with spoke very little English and my French is terrible. Both of us had done Latin, however - so the comments were hilarious as we used that as our common link. One of those projects I'd expect to show on the daily WTF at some point. I did try my hand at a translation tool, as it was all i18n up proper. Watched one guy blow coffee…

Isn't it true that schoolboys in many countries would learn Latin 100+ years ago? I suppose it would've been used sometimes in international communication?

I learned Latin in the 90s-00s

If you're from Europe knowing Latin definitely gives you a deeper appreciation of a bunch of stuff.

It's a useful way of formalising verb conjugation and tenses which is common across the major European languages. Something they all take for granted but I watch my poor mother's mind melt when she tried learning German as a Chinese speaker. Especially as a lot of these forms are looser and more forgiving in English.

A lot of vocabulary has its origins in Latin and biology and medicine still like to borrow from it.

It's niche but only today I was playing some Mozart on the piano and saw "M. S." where I was meant to cross the hands and I considered for a sec and guessed it must be mano sinistra (forgive the declension) even though I've never learned Italian thanks to Latin.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#389

Post by ergl »

mmaunder wrote: post #228
BoorishBears wrote: post #223

Earlier quoted context omitted.

Quite the posturing with that last sentence

omg dude it literally says that in the code: https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act

Would a law specific to the United States apply when you're probing a Chinese company?

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#390

Post by blitzar »

mmaunder wrote: post #225

The amount of vitriol in these comments is the really surprising data. I've seen the same on Twitter. I can only put it down to the financial pain DeepSeek inflicted on many US retail investors by wiping almost $700 billion off NVidia's stock price. I think a lot of folks didn't see it coming and it hurt them right where it matters most: In the wallet. The anger out there is very real.

Obviously a lot of people are long Nvidia stock, and based on the comments are in the denial stage of grief.

"This is good for Nvidia" is the 2025 version of "this is good for bitcoin"

Post reply on HN