DeepSeek Exposed: Users Can Access Each Other's Conversations with a Special Input[D]

Reddit r/MachineLearning News

Summary

A critical privacy flaw in DeepSeek allows users to access each other's conversations by entering a specific character, breaking session isolation and exposing sensitive data.

A recent security report has revealed a critical privacy flaw in DeepSeek: simply entering a specific character in the input field can expose other users' conversations. This has raised serious concerns about the platform's session isolation and data security. The bigger question here is about architecture. DeepSeek (and most web based AI chat platforms) run sessions through a shared backend where context is handled server side. Thats where the leak happened. The session isolation broke down and one users input triggered a response built on another users context. Some tools handle this differently. Cursor runs locally and connects to the model API directly, so your code stays on your machine. Verdent uses isolated workspaces where each task gets its own context that doesnt bleed into others. These arent unhackable but the attack surface is fundamentally different because theres no shared state between users to leak in the first place. Not saying local or isolated tools are automatically safer. They have their own issues. But the DeepSeek thing is specifically a shared infrastructure problem, and its worth thinking about whether the tools you use share that architecture.
Original Article

Similar Articles

DeepSeek Harness is Insanely Good

Reddit r/LocalLLaMA

DeepSeek Harness is an AI tool praised for its easy setup, flexible webUI, and seamless integration with services like SimpleX for E2EE and TOR messaging, offering an unopinionated design that simplifies customization without technical barriers.