Cyber security experts discovered serious security vulnerabilities in Deepseek’s iOS application. He told Ars Technica, the founding partner of Nowsecure, in Chicago, USA, said that the application conveyed personal data without appropriate encryption.Experts have found four main problems:
- Sensitive data is sent without encryption;
- User information is stored insecure;
- The application is comprehensively collecting user and device data;
- The data is sent to servers controlled by the Chinese company by Tiktok, the owner of Tiktok.
Users should be careful
Deepseek uses the old 3Des encryption that is considered to be unreliable in 2016 and can be easily broken. According to experts, this may lead to the transmission of users’ personal information in insecure environments and potentially captured by third parties. In parallel, Deepseek’s security vulnerabilities caused worries around the world.
Institutions such as the US Navy and NASA warned their employees not to use the application. In addition, countries such as Italy and Taiwan decided to prohibit implementation due to data security concerns. It is recommended that users are careful when using such safety vulnerabilities and take the necessary precautions to ensure the safety of personal data.
