Live data from Hacker News

Exposed DeepSeek database leaking sensitive information, including chat history

wiz.io

401–410 of 499 posts

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#401
The second Big Tech was threatened by significant competition (DeepSeek), this competition is "stealing"(lol), and is under heavy hacking attacks (main online inference portal).

There you have, the real face of Big Tech. Extinguishing the competition by locking a service behind a portal provided for free, then starting to milk the users, is not enough for them... they will also fight dirty, really dirty.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#402

Earlier quoted context omitted.

In the wild I've seen a company returning a JSON key "ankunftTime" in one of their APIs

In my experience, Germany is the most common exception to the "programming is done in English" rule. In general, these things happen, and are not restricted to pre-Internet times - in fact, I most often see it in random webshit SaaS developed in Europe - things like, say, food delivery - Pyszne.pl and pizzaportal.pl (defunct) come to my mind. Those sites tend to be well-localized, so they seem like local businesses t…

Speaking on Polish websites,

function czyWybranoPsa() {

var isPies = false; var bil_dod_psy_arr = [17, 18, 19]; // psa, psa-asystenta, psa-przewodnika

$(".bilet_dodatkowy").each(function(idx, elem) { if (bil_dod_psy_arr.indexOf(parseInt($(elem).val())) > -1) { isPies = true; } });

return isPies; }

;)

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#403
post #100

Earlier quoted context omitted.

Yep, myself as well. I've heard non-English programmers who've worked with non-English codebases call them "very weird".

I've been working on a project for the former Polish state telco and the codebase was mostly Java EE as written in the mid-00's. Since you cannot really be productive in Java without an IDE, standard English conventions for naming have been pushed onto the devs from early on - a getter must start with `get` or `is` if the return type is boolean, class names have to contain standardized postfixes corresponding to the…

From famous examples, ;)

function czyWybranoPsa() {

var isPies = false; var bil_dod_psy_arr = [17, 18, 19]; // psa, psa-asystenta, psa-przewodnika

$(".bilet_dodatkowy").each(function(idx, elem) { if (bil_dod_psy_arr.indexOf(parseInt($(elem).val())) > -1) { isPies = true; } });

return isPies; }

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#404
post #309

Earlier quoted context omitted.

Many stocks aren't grounded in reality. They're essentially Memecoins: Classic Edition™ now. Tesla barely even sells but the stock just won't go down. Boeing orders have fallen massively and they're posting massive losses each quarter, and management shows zero desire to improve the situation. But the stock has basically stabilized since the initial catastrophes.

Well, you can't have it both ways: Some people like to complain that the stock market is very short termist, and valuations never reflect what happens in the long term. And here you complain that the stock market doesn't focus solely on short term pain, but is looking to some potential futures.

I wouldn't call Tesla's and especially Boeing's problems "short term".

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#405

Earlier quoted context omitted.

> Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools? That is precisely what happens. It is not unusual for code and databases to be written in English, even when the developers are from a non-English speaking country. Think about it: the toolchain, programming language and libraries are all based on English anyway.

Interestingly, in the world of electronics this used to be true too. The first Diode on a circuit board would be marked "D1", no matter which country produced it. Datasheets for components would be in english. Any text on a circuit board would be in english (ie. "Voltage Select Switch" or "Copyright 2025".). However, a few years back it became common for most datasheets to be available in mandarin and english, and th…

> this year most PCB fabrication houses have gained support for putting Chinese characters onto a circuit board

I've yet to see one of these in the wild, but it sounds cool to me and I would like to see it.

There's something of a problem the CJK languages have in not being able to do abbreviations or acronyms, so in Japanese you will occasionally see a couple of Latin letters standing out because that's much shorter than an inconveniently translated word.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#406

Earlier quoted context omitted.

Can you provide an example?

First, we create an AbstractFactory to generate objects that conform to our standardized output structure, ensuring extensibility in case "Hello, World!" ever needs additional variants. The Singleton manages our PrintManager, enforcing a single, controlled point of access to the output stream while Double-Checked Locking ensures thread-safe initialization. Dependency Injection provides our PrintHandler with a flexibl…

This is very much a Java phenomenon. These things do have value .. when correctly applied. But sometimes it's like seeing someone make a gadget with fifty different types of bolts rather than one or two simply because they want to use all the bits of their socket set.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#407

Earlier quoted context omitted.

Google tells me that "ankunft" means arrival in German. Is that correct?

Correct, it's "arrival time". It isn't uncommon to find german variable names in codebases that predate web 1.0 or linux. Now that I think about it, german is especially good at creating words by concatination. So "arrival time" should just be the single word "Ankunftszeit" - "ankunftZeit" feels a bit off.

Yup. If languages were characters in a computer RPG, they'd have "special skills" listed on their character cards. Off the top of my head:

- English: verbing and nouning. All languages have ways of introducing new words, but only in English I've seen it accepted as something anyone can casually do in a throwaway manner. Have a noun but want to talk about the (contextually) default action related to the noun? No big deal, just stick an "-ing" or "-ed" to its end and carry on. I adore this feature.

- German: word concatenation you mention, it's a killer feature. And then there's the peculiar grammar that puts the most important verb at the very end of a sentence, giving you stuff like "Gegen die hohen Preise für Gas, Strom und Treibstoff will die Regierung etwas machen", meaning "The government wants to do something about the high prices for gas, electricity and fuel", but structured as " do something". So not only you need to listen to the end of a sentence to know what it's about, but you can actually zone out a bit early on, catch the last few words, and still recover the meaning. I'm sure one could write an interesting signal processing take on this.

(If anyone knows examples of such unique/special "skills" for other languages, I'd love to hear about them!)

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#408

Earlier quoted context omitted.

Someone who worked on a non-English environment years ago here: sometimes you do use the local language in some contexts, but, more often than not, you end up using English for the majority of stuff since it's a bit off-putting to mix another language with the English of programming languages and APIs.

Dumb question, but it would then seem that you have to know English to program??

Many non-English-language countries end up with most people who've been through higher education knowing at least some English, not only so they can handle sources but also so they can talk internationally to any other country as well as consume American media.

It's also a status symbol.

The smaller the language pool is the stronger this effect is. Japan is large enough that it's less guaranteed. Places like India and Indonesia that have a lot of internal languages end up using English as a lingua franca (+) as well.

(+) latin term!

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#409
post #3

> More critically, the exposure allowed for full database control and potential privilege escalation within the DeepSeek environment, without any authentication or defense mechanism to the outside world. Not only that, this was a "production-grade" database with millions of users using it and the app was #1 on the app store and ALL text sent there in the prompts was logged in plain-text? Unbelievable.

Is it so strange to have logs in plain text? In my experience most logs at companies are in plain text. Only passwords are usually encrypted.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#410
post #255

Earlier quoted context omitted.

> How is this a "threat". Given how closely major US tech companies are now affiliated and partnered with the US Federal government, arguably the direct potential threat from them to US citizens may well be higher than from across a very big pond. People trot out "I'd rather our guys spy on me than them" a lot, but that's putting a lot of faith in your local government. Conversely, who do you think has more to fear f…

DeepSeek is more affiliated and partnered with the CCP than US companies are with the US government. Their LLM includes literal government mandated censorship and propaganda. Their CEO met with the premier the other day. And obviously the CCP will be using this tech for military applications very soon. But Chinese citizens themselves will also be further controlled and suppressed through the extensive use of AI and r…

> Their CEO met with the premier the other day.

Remind me of the list of US tech CEOs who were at (and paid for!) the inauguration?

Post reply on HN