This post is also available in:
עברית (Hebrew)
Chinese AI model DeepSeek has gained significant traction worldwide over the past few weeks, due to its impressive capabilities and low price tag. Now, an investigation by Cybersecurity Firm Feroot has uncovered alarming security risks in the model, as the model is apparently transmitting user data to the Chinese government.
According to Feroot, DeepSeek contains a hidden code that transmits user data to CMPassport.com, an online registry managed by China Mobile, a state-controlled telecommunications company. China Mobile is known for its security risks, and it has been delisted in the past from the New York Stock Exchange due to them. This suggests that DeepSeek may be part of a mass-scale unauthorized data collection that relays user information to the Chinese government.
Concerningly, this is not everything. According to Feroot, DeepSeek also has the ability to track users’ digital activity across various websites, creating a “digital fingerprint” for them, which increases the risk of foreign entities monitoring sensitive personal data.
While concerns about DeepSeek storing data in China were previously raised, the new revelation that it connects to a government-backed telecom company has intensified the scrutiny.
In response to these growing concerns, U.S. Senator Josh Hawley has recently introduced a bill that seeks to restrict U.S. businesses and individuals from “advancing AI technologies in China”. The legislation proposes severe penalties, including up to 20 years in prison and fines of up to $100 million for corporations, which could have an impact on DeepSeek’s rise. The model’s security risks have already prompted bans in Italy, the U.S. Navy, and NASA, and discussions about a potential nationwide ban in the U.S. are underway.
Beyond privacy, DeepSeek’s content moderation policies have also drawn criticism, as users report its reluctance to provide answers on sensitive topics like the Chinese government’s actions or historical events such as Tiananmen Square.
As governments continue to deliberate on how to address the growing concerns surrounding DeepSeek, individuals and businesses alike must carefully consider the privacy risks and make informed decisions about their use of the app. Now more than ever, staying informed about these developments is crucial in navigating the digital landscape.
