5 ms·
> More critically, the exposure allowed for full database control and potential privilege escalation within the DeepSeek environment, without any authentication
by rvz 2y ago
> More critically, the exposure allowed for full database control and potential privilege escalation within the DeepSeek environment, without any authentication or defense mechanism to the outside world.
Not only that, this was a "production-grade" database with millions of users using it and the app was #1 on the app store and ALL text sent there in the prompts was logged in plain-text?
Unbelievable.
- byearthithatius 2y agoI agree this is really bad but far from unbelievable. I am only 23 and already my SSN and even my freaking DNA have both been leaked by major publicly traded companies.
- sho_hn 2y agoPlus Volkswagen and Subaru in the last few weeks ...
- reaperducer 2y agoPlus Volkswagen and Subaru in the last few weeks Both Volkswagen and Subaru have leaked his DNA in the last few weeks? Dude gets around.
- dotancohen 2y agoVW is the people's wagon - where do you think those people come from?
- nicce 2y agoOn top of SSN and DNA, also the location of the DNA has been leaked.
- byearthithatius 2y agoheeheehee;) i REALLY like cars
- sans_souse 2y agoYou leaked your DNA on which companies?
- jazzyjackson 2y agoDid they ever make promises as to confidentiality? What if providing all chat logs with users is just part of their open source / shānzhài attitude ? :)
- gitaarik 2y agoIs it so strange to have logs in plain text? In my experience most logs at companies are in plain text. Only passwords are usually encrypted.