Cybersecurity

6230 readers

175 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

7,000 Exposed Ollama APIs Leave DeepSeek AI Models Wide Open to Attack (hackread.com)

submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

5 comments fedilink hide all child comments

top 5 comments

sorted by: hot top controversial new old

[–] ADKSilence@piefed.social 5 points 3 days ago (1 children)

So big scary warning, but nothing than "audit your shit" to address it? I'm not an expert, and in fact just got ollama w/deepseek running on my machine last night... but like, isn't it common courtesy to at least suggest a couple of ways to mitigate things when posting a "big scary warning" like that?

Especially given deepseek's more open nature, and the various tidbits I've seen indicating that deepseek is open enough to be able to tweak/run entirely locally. So addressing the API issue seems within the realm of possibility...

[–] Jakeroxs@sh.itjust.works 6 points 2 days ago

It's not for people running the software, it's a scare headline aimed at people who don't know anything about AI but have seen big scary Chinese deepseek

[–] sunzu2@thebrainbin.org 3 points 2 days ago (2 children)

How this different if you are running other models?

[–] Ajen@sh.itjust.works 7 points 2 days ago* (last edited 2 days ago)

This one is a buzzword.

[–] Breve@pawb.social 2 points 2 days ago

It's not, they just wanted to tap into the Deepseek is bad narrative to get more clicks.