3 ms·
This doesn't look like a responsible disclosure, at all. ed: I was wrong!
by tomlockwood 2y ago
This doesn't look like a responsible disclosure, at all.
ed: I was wrong!
- CamelCaseName 2y agoWho's going to go after them? Heck, they may get an award for this.
- krick 2y agoUh, I don't know, but cannot DeepSeek do that, for starters? Being located in a different country than the service you are attacking doesn't really make you immune to being sued.
- megous 2y agoIf random security researcher does this kind of disclosure, fine. But if serious company that seems to offer services to seemingly plenty of serious customers acts this way, I'd not want to be their customer, if they seem to have such a cavalier attitude, disclosing stuff without even a sniff of "we notified the company about the breach".
- immibis 2y agoIt was fixed. Disclosing it after it's fixed is responsible.
- varenc 2y agoFrom the article: > The Wiz Research team immediately and responsibly disclosed the issue to DeepSeek, which promptly secured the exposure. Assuming everything mentioned in the article was fixed before publication, I don’t see an issue with it.
- tomlockwood 2y agoYeah my bad I missed that and edited OP.