DeepSeek claims to use
technical, administrative, & physical safeguards to protect user information from unauthorized access and to ensure security [
source]. However,
what does this really entail?Encouragingly, DeepSeek has mentioned employing Secure Socket Layer (SSL) encryption protocols as a fundamental part of their data protection strategy [
source]. This encryption is crucial, serving as an industry-standard method for protecting data during transmission. However, the effectiveness of this protection can diminish if security vulnerabilities exist at other points in the service infrastructure.
Unfortunately, recent findings demonstrate that DeepSeek has faced security issues, such as
prompt injection vulnerabilities, which have the potential to allow unauthorized individuals to gain access to user accounts and sensitive session data [
source]. This indicates that while the company may implement security measures, inherent weaknesses still pose significant risks for users. The existence of these vulnerabilities adds another layer of concern regarding the overall safety of user data.