Live data from Hacker News

Exposed DeepSeek database leaking sensitive information, including chat history

wiz.io

81–90 of 499 posts

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#81
post #80
post #5

This kinda does support the 'DeepSeek is the side project of a bunch of quants' angle. Seems like the kind of mistake you would make if you are not used to deploying external client facing applications.

how many people in the world are used to deploying external client facing applications?

How many people in the world drink coffee? I don't understand your question.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#82
post #62

This is probably an incredibly stupid, off-topic question, but why are their database schemas and logs in English? Like, when a DeepSeek dev uses these systems as intended, would they also be seeing the columns, keys, etc. in English? Is there usually a translation step involved? Or do devs around the world just have to bite the bullet and learn enough English to be able to use the majority of tools? I'm realizing no…

Someone who worked on a non-English environment years ago here: sometimes you do use the local language in some contexts, but, more often than not, you end up using English for the majority of stuff since it's a bit off-putting to mix another language with the English of programming languages and APIs.

Dumb question, but it would then seem that you have to know English to program??

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#83

Earlier quoted context omitted.

Yep. Kinda like how your comment was grey within 1 minute, despite stating an objective truth. Sure, this is to be expected given the billions and billions of dollars at stake but like - that money is gone lol. DeepSeek isn't going back in the bottle, nor is open source AI in general.

The comment isn't wrong, but the implication is at deep seek is somehow special and is getting undue attention from hackers. Any app that skyrockets from nowhere to number one in the app store overnight will have the attention of probably hundreds of thousands of hackers.

> the implication is at deep seek is somehow special and is getting undue attention from hackers

... It is special.

There was over a trillion dollars wiped from tech stocks lol, in a massive win for consumers and the planet. You can't say this is like Flappy Bird or something.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#84
post #80

Earlier quoted context omitted.

how many people in the world are used to deploying external client facing applications?

How many people in the world drink coffee? I don't understand your question.

The subtext was probably "Even among professional programmers, few know what it takes to safely expose a new system to the public internet."

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#85
post #50

Earlier quoted context omitted.

DeepSeek isn’t a side project or just a bunch of quants - these are part of the marketing that people keep repeating blindly for some reason. To build DeepSeek probably requires at least a $1B+ budget. Between their alleged 50,000 H100 GPUs, expensive (and talented) staff, and the sheer cost of iterating across numerous training runs - it all adds up to far, far more than their highly dubious claim of $5.5M. Anyone s…

You think they deliberately left their DB open to the internet, without a password? Why?

No, I did not claim that it was purposeful. But they did leave their DB open to the internet without a password. And that seems really negligent.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#86
post #80
post #5

This kinda does support the 'DeepSeek is the side project of a bunch of quants' angle. Seems like the kind of mistake you would make if you are not used to deploying external client facing applications.

how many people in the world are used to deploying external client facing applications?

A lot? They can go scoop up people from any number of SaaS startups or hire an external 3rd party to do a security audit.

We're not talking some poor college students here.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#87

Earlier quoted context omitted.

Someone who worked on a non-English environment years ago here: sometimes you do use the local language in some contexts, but, more often than not, you end up using English for the majority of stuff since it's a bit off-putting to mix another language with the English of programming languages and APIs.

Dumb question, but it would then seem that you have to know English to program??

Probably at least some, because most tools’ documentation are not going to be in your language – at least that’s how it is here in Japan. That said plenty of Japanese engineers who have very low English skill.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#88

Earlier quoted context omitted.

> This kinda does support the 'DeepSeek is the side project of a bunch of quants' angle Can we stop with this nonsense ? The list of author of the paper is public, you can just go look it up. There are ~130 people on the ML team, they have regular ML background just like you would find at any other large ML labs. Their infra cost multiple millions of dollar per month to run, and the salary of such a big team is somew…

?? The point is, the ML researchers aren’t experts at deploying secure infrastructure.

??????

This wasn't narrow minded folks doing this. Shit happens.

Re: Exposed DeepSeek database leaking sensitive information, including chat history

#90

Earlier quoted context omitted.

Someone who worked on a non-English environment years ago here: sometimes you do use the local language in some contexts, but, more often than not, you end up using English for the majority of stuff since it's a bit off-putting to mix another language with the English of programming languages and APIs.

Dumb question, but it would then seem that you have to know English to program??

It’s harder to learn for sure. Majority of the resources are in English and it’s harder to internalise the keywords. But it’s definitely possible to program without knowing English.
Post reply on HN