Deepseek seized the AI industry projectors as an outsider which has briefly become the main global application, exceeding the pussy of AI. While many consider him to be the Robinhood of AI, not all things are pretty on this subject.
A report By Nowsecure, a mobile security company, highlights a great risk of confidentiality in the use of the Deepseek iOS application, suggesting that the Android application is not better.
Deepseek Clueless on the latest safety standards
NOWSECURE safety assessment highlights the blatant weaknesses in application safety standards for iOS users.
To start, the ATADIANT AI application of Deepseek does not apply the Ats (APP Transport SECURITY), a safety feature provided by Apple to prevent unknown security communications for unknown reasons.
Then, the application does not encrypt the data sent to the servers controlled by Bytedance, the parent company of Tiktok. Although the information does not imply personal data, an uninsured channel can open opportunities for a hacker.
The report indicates: “The iOS Deepseek application sends a mobile application recording and device data on the Internet without encryption. This exposes all data from Internet traffic to passive and active attacks. »»
Andrew HoogThe founder of Nowsend, mentions more about this in the report: “An attacker having privileged access on the network (known as the attack of man in the environment) could also intercept and modify the data, impacting the ‘Application integrity and data. “”
In addition, encryption uses the 3des algorithm, which is now considered An unsure form of encryption.
The organizations advised to stop using Deepseek
Given the risk of confidentiality and security associated with the IOS Deepseek application, the report recommends not to use it in your organization until things are fixed and that better standards are in place.
As an alternative, some organizations can try Deepseek self-hosting or use cloud services such as the Azure platform to continue to use it safely.