News for hackers. Stuff that matters.

A comment on Exposed DeepSeek database leaking sensitive information, including chat history. Parent comment

Re:Exposed DeepSeek database leaking sensitive information, ... by sho_hn on Wednesday January 29, 2025 @06:00PM (#42872435)
Can't fault hackers for taking a look at a website that goes from "virtually unknown" to "extremely popular and headline news globally" practically over night. If nothing else, the probability of low-hanging fruit in something that is barely battle-tested is high.

You can fault them for disclosure practices though :-)

[ Parent | on HN ]
Re:Exposed DeepSeek database leaking sensitive information, ... by htrp on Wednesday January 29, 2025 @06:41PM (#42872862)
> Wiz Research has identified a publicly accessible ClickHouse database belonging to DeepSeek, which allows full control over database operations, including the ability to access internal data. The exposure includes over a million lines of log streams containing chat history, secret keys, backend details, and other highly sensitive information.

>The Wiz Research team immediately and responsibly disclosed the issue to DeepSeek, which promptly secured the exposure.

It seems like Wiz told deepseek and deepseek secured this vuln?

[ Parent | on HN ]