Live data from Hacker News

Exposed DeepSeek database leaking sensitive information, including chat history

wiz.io

471–480 of 499 posts

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#471

Earlier quoted context omitted.

Correct, it's "arrival time". It isn't uncommon to find german variable names in codebases that predate web 1.0 or linux. Now that I think about it, german is especially good at creating words by concatination. So "arrival time" should just be the single word "Ankunftszeit" - "ankunftZeit" feels a bit off.

Yup. If languages were characters in a computer RPG, they'd have "special skills" listed on their character cards. Off the top of my head: - English: verbing and nouning. All languages have ways of introducing new words, but only in English I've seen it accepted as something anyone can casually do in a throwaway manner. Have a noun but want to talk about the (contextually) default action related to the noun? No big d…

Dutch

'Aan die hoge brandstofprijzen zal de regering iets gaan DOEN'.

If I say it in my local dialect, it will sound a lot like German.

Speaking of unique skills, I find French very unique as well. "His life" translates to "sa vie" because vie happens to be female. "what is it" translates to "qu'est-ce que c'est", a _seemingly_ random concatenation of shortened words, in spoken form it is only 3 syllables!

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#472
post #386
post #364

Earlier quoted context omitted.

From what I’ve seen, code usually comes in one of two languages: English or French. Somehow everyone but the French speaks enough English to write code!

Worked for a french company once. The code was in English, but the comments were in French. I guess this happens, because all the language keywords are English, so it might be strange to mix and match langauges there. But comments were fair game.

Ah interesting! I've definitely seen some French code somewhere with the variable names being all French as well, so it really was strange to see them be mixed.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#473

Does DeepSeek have a bug bounty program I'm not aware of with a clearly defined scope? It appears that Wiz took it upon themselves to probe and access DeepSeek's systems without permission and then write about it. If you do this and the company you're conducting your "research" on hasn't given you permission in some form, you can get yourself in a lot of hot water under the CFAA in the USA and other laws around the w…

Going throwaway account for this.

Wiz folks are notoriously shady. They cross the line a ton. They did this to Amazon and Microsoft to make a name among other. Super unethical.

Their product isn't terrible but their sales people are just terrible. Completely off-putting. Most of them are idiots from zscaler.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#474

Earlier quoted context omitted.

Last effort reply. > is genocide under international law No, genocide is conditional on intention to destroy. Which PRC policy isn't. It's just boring family planning that always applied to Han, that minorities historically got to opt out due to affirmative action, now equally applied to Uyhghurs with 3+ kids. Meanwhile Uyghur population contiues to increase, and family planning still limits Uyghurs and minorities to…

I am not convinced by your framing and some of the factual claims you have made. I am able to find sources that disagree. But in an effort to be curious - do you have any sources of your own (like news articles or research or documents or videos or whatever) that support the things you're claiming here and in your other messages?

E: final final effort reply

Literally just google translate through the "primary" sources US propaganda cites, and strip away any biased analysis. All you'll find is boring leaked CCP policy and procurement documents that states exactly what PRC was doing, big securitization/derardicalization/sinicization project after decades of Uyghur terrorist attacks which has been tracked by global terrorism database. If want to compare this to Israel's situation / antiterrorism framing, that's all the source one needs.

http://apps.start.umd.edu/gtd/search/Results.aspx?chart=perp...

Go through this list, look at the timeline. Look what happens after "Strike Hard" campaign started ~2015 during peak Uyghur/Turkestan/ETIM attacks in the years prior. Click show expanded to see the attack type, all of them explosives/vehicles/knife attacks. TLDR PRC won their war on terror in a few years. MENA leaders who has to deal with the same takes notice and golf claps.

Of course fixing domestic terrorism with extreme prejudice is permissible, so you get all the laundered/reintrepretted propaganda US funded by state department, again headed by we lied, we cheat, we stole Pompeo to disagree and try to paint as genocide. Go to the horses mouth and read state department releases or Zenz garbage on jamestown and see where they allege mass deaths, they don't, just trying to link a few deaths, which is statistically inevitable in project this size to... somehow genociding Uyghurs, as in trying to elimnate a minority. Boring reality if you prase through inscrutable boring CCP technocrat writing intead of propaganda by "sources that disagree" are documents showing heavy handed attempt to filter individuals with high extremist indicators (i.e. systematic targetting not arbiturary, why 11/12 of Ugyhurs didn't get Chinese school camp treatment), throw them in a reeducation centre until they aren't extremist or too scared to be (for most this is few months), and follow up with poverty alleviations program to get idle poor busy/not poor so they aren't thinking about jihad. That's it. No ones being wiped out, even the dumbest US propaganda doesn't pretend so. Uyghurs are being deradicalized/sinicized not liquidated.

Queue a few years ago, most of XJ propaganda stopped. Why, because the campaign ended successfully. Hence all the new tourism propaganda, because region is safe now and most back in society, cowed, but doing their thing. The small % of most recalcitrant got sent to prison for long ass sentences. Then the pivot was to "coerced" labour, that western MSM propagandized into "slave" labour because CCP news was bragging about 500k Tibetans or 1M Uyghurs being sent through the rural labour transfer programs... literally a poverty alleviation program that's been around for 20 years, in most provinces that 10s of millions of Han already went through. There's just too much stupidity to go through on topic. Search rural-to-urban labor transfer studies from before 2010s... lots of academic writings on the initiative, except suddenly when it comes to Uyghurs, it's slave labour, and not giving some rural bumpkin some factory work that pays multiples what they currently make. In case of many Uyghurs/Tibetans, illiterate (as in poor Chinese fluency) that factories normally wouldn't even hire if it wasn't for central gov pressuring them to take on when there's frankly more qualified Han laborers without language barrier. When ~40% of PRC lives on disposable income of 1000rmb per month, these Uyghurs are being paid multiple that. Like even entire XJ cotton smear campaign, where Zenz asserts workers were being screwed (because capitalism) when their take home still ened up being 2-4x local per capita gdp (Awat region).

For family planning, go read up on PRC "family planning policy", i.e. the formal name, not 1/2/3 child policy. Look at how minorities were exempt and then not under new minority policy (under Pan Yue)... TLDR is fusion (after US melting pot assimilationism) model where minorities get treated the same as Han (read: sinicization). Previous policy based on soviet oblast model aka multiculturalism. Which after decades, failed to end seccessionism (including HK). So now everyone gets to be equal with Han, though of course in practice not equitable.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#475
post #261

Earlier quoted context omitted.

The stock price had assumptions baked in about the number of units expected to be sold. DeepSeek cut that hardware estimate by as much as 45x. That is that absolute obvious correlation between that model being very efficient to train and NVDA dropping 18%.

I don’t get it. The labs have regularly made improvements that dramatically lower the cost of training an equal-performing model. When they do this, they also train a larger model with even higher performance. This time, DeepSeek did the first part but didn’t do the second. Now every lab in the world will throw their compute into the effort to replicate and beat DeepSeek’s model with larger scale. It’s not like every…

Define dramatically with numbers. From all the sources I've read, it was so significant and also run on a far more limited cluster and the results are as good as the other frontier models. Optimizations have been coming, I think the one or more they found were significantly larger.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#476
post #261

Earlier quoted context omitted.

The stock price had assumptions baked in about the number of units expected to be sold. DeepSeek cut that hardware estimate by as much as 45x. That is that absolute obvious correlation between that model being very efficient to train and NVDA dropping 18%.

It still doesn't make sense to me. If the money for training is still there, wouldn't companies that can afford it use the efficiency gains and also scale up models? Unless AI is a bubble, and it pops, I can't see the demand for compute going down.

There is a belief that we've peaked in terms of bigger model = better results. I think it was GPT 4 is actually smaller in parameter count and better than 3.5 for instance. There is also a finite amount of useful data that people think we have hit, so adding more parameters isn't helpful if you don't have new data to train them on.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#477
post #325

open exposed clickhouse is this decade's open exposed elasticsearch so common in the past

AFAIK, Opensource Elasticsearch does not offer any form of authentication upon installation for many years but ClickHouse does and in fact I'm often surprised at how many authentication mechanisms were introduced over the years and can be easily configured: - Password authentication (bcrypt, sha256 hashes) - Certificate authentication (Fantastic for server to server communication) - SSH key authentication (Personally…

shame they paywalled JWT authn behind their expensive PaaS offering :(

forced us to use an alternative, and paywalling security features in an "open source" product didn't make us feel comfortable for a long-term investment like a db

https://github.com/ClickHouse/ClickHouse/pull/68634#issuecom...

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#478

Earlier quoted context omitted.

I am not convinced by your framing and some of the factual claims you have made. I am able to find sources that disagree. But in an effort to be curious - do you have any sources of your own (like news articles or research or documents or videos or whatever) that support the things you're claiming here and in your other messages?

E: final final effort reply Literally just google translate through the "primary" sources US propaganda cites, and strip away any biased analysis. All you'll find is boring leaked CCP policy and procurement documents that states exactly what PRC was doing, big securitization/derardicalization/sinicization project after decades of Uyghur terrorist attacks which has been tracked by global terrorism database. If want to…

Final final question: Are you Chinese yourself? If so, have you visited any of these regions (Xinjiang or Tibet)? Do you prefer living China or would you prefer somewhere else?

I’m also curious what things you follow for information usually since it is probably different from mine (like news websites or YouTube channels or whatever).

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#479

Earlier quoted context omitted.

The problem with hardware companies is they’re bad at software because the disciplines are so different that what works for one doesn’t work for the other. The problem with software companies is they’re bad at hardware for the same reason. User experience companies can be good at both. Maybe not as good at hardware as a hardware company, maybe not as good at software as software companies. Apple’s the obvious example…

OK, I'll bite. How is selling shitty coffee in large quantities a good example of either software or hardware excellence?

It’s neither. But they’re successful because of the user experience — consistency, the preloaded cards, the mobile ordering with notifications when your order is ready.

They build whatever hardware (in store) or software (mobile / back end) is necessary to give the user experience they want.

But you’re absolutely right — we can lump their mediocre coffee into hardware, or call it “goods” as a third category that you also don’t have to be the best at if you’re a UX company.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#480

Earlier quoted context omitted.

100+ years is still pretty recent. The immediate predecessor to English as a world language was French. Matter of fact, my country has only dropped French translations from its passport with the most recent design update a decade ago or so. Latin would have been used pre-Renaissance. Our grandparents might have still had to learn it as a part of an educated person's toolkit, but it was long not intended for communica…

> The immediate predecessor to English as a world language was French From what I remember, there was a divide between Catholicism and Protestantism, where some of the smaller countries that followed Protestantism used German as a common language due to its origins. I think knowledge of German in Norway was something that was expected of students attending the universities until the mid 1900s (due to geopolitical cha…

Japanese scholars famously learned Dutch because they were the only foreigners who were allowed to bring in Western books.

Luckily if you are intelligent enough to read Dutch learning English is a walk in the park.

Post reply on HN