Hacker News Reader

This doesn't look like a responsible disclosure, at all.

ed: I was wrong!

From the article:

> The Wiz Research team immediately and responsibly disclosed the issue to DeepSeek, which promptly secured the exposure.

Assuming everything mentioned in the article was fixed before publication, I don’t see an issue with it.

Yeah my bad I missed that and edited OP.

Who's going to go after them? Heck, they may get an award for this.

If random security researcher does this kind of disclosure, fine.

But if serious company that seems to offer services to seemingly plenty of serious customers acts this way, I'd not want to be their customer, if they seem to have such a cavalier attitude, disclosing stuff without even a sniff of "we notified the company about the breach".

It was fixed. Disclosing it after it's fixed is responsible.

Uh, I don't know, but cannot DeepSeek do that, for starters? Being located in a different country than the service you are attacking doesn't really make you immune to being sued.

Reply on news.ycombinator.com