[Lex Computer & Tech Group/LCTG] Is DeepSeek a bit too good to be true?

[Robert Primak]

 Interesting facts, if true. And I do believe that these specific mobile apps may be tied to the CCP. 
But let's not overgeneralize or jump the gun to conspiracy theories just yet. The original Deepseek developers left their entire database out in the open for awhile, until a tech person got in and pointed out to them that user details were readily obtained. That's not spyware, it's inept use of open source software. Different things. 
Never attribute to malice what can be better explained by sheer incompetence. 

Anyone so inclined can with not a lot of resources or money, set up their own instance of Deepseek, with no reporting to anyone in China. This means that not all Deepseek instances are Chinese-controlled. 
The technology itself remains game-changing for LLMs and AI development. 
Deepseek is not the mobile apps -- they are built on top of Deepseek. They may be by the same development team, but the offending code is not part of the underlying structure or function of the Deepseek project. The data collected, and the entire Terms of Service, of the mobile apps are for the apps, not for the underlying Deepseek core functions. 
This said, I would not trust any apps from Chinese-based companies at this time. That is, if the apps are by companies or developers who are actually based inside Mainland China. 
There will be small LLMs and Deepseek derivatives which will have nothing to do with China. So avoiding the ones which are CCP controlled will be relatively easy. Just read the Terms of Service (or use a site or an app to do it for you -- more AI!!  -- ) before downloading any phone apps. 
-- Bob Primak 


    On Saturday, February 8, 2025 at 03:48:20 PM EST, Ken Pogran via LCTG <lctg at lists.toku.us> wrote:  
 
 Are DeepSeek's mobile apps actually Chinese spyware?
 
Several recent articles suggest DeepSeek mobile apps are coded to exfiltrate detailed private user and device information to ByteDance and/or China Mobile servers. And, DeepSeek's Terms of Service explicitly state that "information we collect" will be sent to servers located in the PRC.
 
  DeepSeek's advanced tracking technology 'never seen before'
 
 Static analysis of the DeepSeek Android App
 
 NowSecure Uncovers Multiple Security and Privacy Flaws in DeepSeek iOS Mobile App
  
Ken Pogran
===============================================
::The Lexington Computer and Technology Group Mailing List::
Reply goes to sender only; Reply All to send to list.
Send to the list: LCTG at lists.toku.us      Message archives: http://lists.toku.us/pipermail/lctg-toku.us/
To subscribe: email lctg-subscribe at toku.us  To unsubscribe: email lctg-unsubscribe at toku.us
Future and Past meeting information: http://LCTG.toku.us
List information: http://lists.toku.us/listinfo.cgi/lctg-toku.us
This message was sent to bobprimak at yahoo.com.
Set your list options: http://lists.toku.us/options.cgi/lctg-toku.us/bobprimak@yahoo.com
  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.toku.us/pipermail/lctg-toku.us/attachments/20250208/65d17379/attachment.htm>