The Chinese AI Deepsac is currently incredibly popular, but you should be careful about handing it to any of your personal data.
WIZ researchers reported on Wednesday that they identified a publicly accessible database related to the Deepsek, which allowed anyone to reach the internal data of the lampsake.
This data included chat log, secret keys and other sensitive information, WIZ claims. The text was in Chinese, but it is hardly an issue these days when anyone can use machine translation to translate it.
Deepsek taught only 5 difficult lessons to AI industry
On his discovery, WIZ immediately revealed the issue, which was given to Dipsek, which set the error. However, this is the type of safety defects that you should think twice before you use the lampsac for anything, allowing you to hand over sensitive data from a distance.
Mashed light speed
The details describing the problem are on Wiz’s blog, but it boils the lampsac using a clickhouse database that was accessible without any authentication. Anyone who found this database could have executed a SQL query to get access to more than 1 million log entries, timestamps, chat log in plain less Can use to remove sensitive information related to. ,
Deepsak did not publicly comment on the issue, and it is not clear whether the security defect was abused by the third party, before Vij came to know about it.
We have contacted Deepsek about this issue and we will update this article when we listen back.
Chinese AI Lab Deepsek has attracted a lot of attention as it launched the latest version of its LLM, Dipsec R1, first in January. Deepsek R1 defeated the best LLM from American companies, including OpenaiI people in several major benchmarks, while being allegedly trained with very low resources. The company’s iOS app quickly rushed to the top of Apple’s app store, and its launch caused chaos in the US stock market, the market as shaving of hundreds of billions of NVDia market cap. Estimated.
Since then, many researchers deeply explained security and privacy issues that the way deepsec procedures and user stores data.
Subject
Artificial intelligence lampsac
