Guess who left a DB wide open,exposing chat logs,API keys and more? Yup,DeepSeek

HELLFIRE

Snark in title credit to and courtesy of TheRegister XD XD : https://www.theregister.com/2025/01/30/deepseek_database_left_open/ – Oh someone’s in DeepShi…
https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak

Regards

antdude

HELLFIRE I'm not even surprised.

HELLFIRE

https://krebsonsecurity.com/2025/02/experts-flag-security-privacy-risks-in-deepseek-ai-app/#more-70323 – Experts Flag Security, Privacy Risks in DeepSeek AI App

New mobile apps from the Chinese artificial intelligence (AI) company DeepSeek have remained among the top three “free” downloads for Apple and Google devices since their debut on Jan. 25, 2025. But experts caution that many of DeepSeek’s design choices — such as using hard-coded encryption keys, and sending unencrypted user and device data to Chinese companies — introduce a number of glaring security and privacy risks. …

Regards

Astyanax

HELLFIRE Experts Flag Security, Privacy Risks in DeepSeek AI App

They're "picking quarrels and provoking trouble" exposing all these DeepSeek security problems! 😉

HELLFIRE

https://www.nis.go.kr/CM/1_4/view.do?seq=334 -- National Intelligence Agency emphasizes security oil when using "Deepseek" service

From SKorea's NIA, the text was translated inbrowser, so usual NaCl caution applies.

... 1 Excessive information collection: Unlike other generative AI services, it contains the ability to collect personally identifiable keyboard input patterns and communicate with Chinese company servers (volceapplog.com, etc.), confirming that chat records can be transmitted.

2 All input data is used as service learning data: There is no function to prevent the use of user input data as learning data, so we identified a problem that all user information is funneled into and used into the learning data.

3 Sharing unlimited information with advertisers: The user's use of the service information is supposed to be shared with advertisers unconditionally, and the retention period is not specified, so it is possible to share unlimited user information with advertisers and keep it unlimited.

4 Personal information storage of foreign servers: According to the terms and conditions of "Deep chic", the personal information and input data of our citizens are stored on servers in China, and can be provided upon request by the Chinese government in accordance with Chinese laws. ...

FWIW.

Regards

HELLFIRE

Astyanax They're "picking quarrels and provoking trouble" exposing all these DeepSeek security problems! 😉

Donoreo I am sure the security issues like this will get sorted.

BEFORE or AFTER it's been alpha tested on the unwashed masses? 🙄 🙄

Or put another way, You Do Not MollyCoddle Your [insert here] , You Crash Test Them, Into A Brick Wall At 120 kph / mph. If The [insert here] Is Sound, What Should Be Left Is Pieces Of The Wall.

shrugs

Regards

Donoreo

I am sure the security issues like this will get sorted. The overall technology is fabulous. I saw someone able to run the software (It is open source) on a Raspberry Pi.