DeepSeek database left user data, chat histories exposed for anyone to see
www.theverge.com
DeepSeek has secured a completely open database that exposed user chat histories, API authentication keys, system logs, and other sensitive information, according to cloud security firm Wiz. The security researchers said they found the Chinese AI startups publicly accessible database in minutes, with no authentication required.The exposed information was housed within an open-source data management system called ClickHouse and consisted of more than 1 million log lines. As noted by Wiz, the exposure allowed for full database control and potentialprivilege escalation within the DeepSeek environment, which couldve given bad actors access to the startups internal systems. These findings were first reported by Wired.DeepSeek promptly secured the database after Wiz notified the startup about the issue.Its still not clear whether anyone else was able to access the exposed data, but the researchers told Wired, it wouldnt be surprising, given how simple it was to discover. Wizs researchers also told the outlet that DeepSeeks systems are designed similarly to those used by OpenAI, down to details like the format of the API keys. OpenAI accused DeepSeek of using its data to train its AI models earlier this week.
0 Comments ·0 Shares ·38 Views