DeepSeek collects keystroke data and more, storing it in Chinese servers

[davel@lemmy.ml]

I don’t think they’ll be getting any more upvotes, unless they want to show me more of their alt accounts.

[ju135@lemmings.world]

This make the news only because it's going to chinese servers. Didn't see anything like that about ChatGPT or the one made by Google.

[humanperson@sh.itjust.works]

I feel like their is more common. I do deliberately say its for companies because companies aren't people and don't deserve people pronouns. Countries seem more like a collection of people, so I use their.

If someone knows more about grammar feel free to correct me.

[theeighthdoctor@lemmy.zip]

How about no censorship? And you get to use your brain to decide. I like to live in a country where the government doesn't preselect which topics I have access to but to each his own, you can go live in the CCP or North Korea then.

[fijxu@programming.dev]

No, this is just propaganda

[tux@lemmy.world]

Keystrokes don’t have to be in a text field or input. That’s my point.

If I’m on say google. And I type anything into the field it’s definitely capturing it. You know this for no other reason then it would have to be with autocomplete as an option.

Keystroke capturing is the same as keylogging, aka anything typed even if it’s not into a place where you would assume it’s being seen by the app. Aka, if I had an app open in the background and was typing in my password, it would see and capture that.

They’re completely different things. While the privacy issues of US large tech companies are abundant and awful, there is a large difference between keystroke capturing and capturing input via fields. Especially when you’re agreeing to allow them to process and transfer or even sell that information.

[ferk@lemmy.ml]

But that's not what the terms on both Google/Meta and Deepseek say.

Google/Meta has no obligation to restrict the data collection to forms, if the ToS allow them to collect them rom forms, then there's no reason it also does not allow them to collect them outside of forms. In the same way, Deepseek terms don't say the logging happens outside of logs. For all we know the only place they might be capturing it is exclusively in very specific forms, or they might even only added that to the terms so that they can add suggestions in the future. You can only make assumptions, since the terms are not specific on exactly what's being captured and in which way, it only says keystrokes in the case of Deepseek and even more generic (and thus allowing more possible vectors) in Google/Meta's terms.

[ferk@lemmy.ml]

This is the full paragraph:

We collect certain device and network connection information when you access the Service. This information includes your device model, operating system, keystroke patterns or rhythms, IP address, and system language. We also collect service-related, diagnostic, and performance information, including crash reports and performance logs. We automatically assign you a device ID and user ID. Where you log-in from multiple devices, we use information such as your device ID and user ID to identify your activity across devices to give you a seamless log-in experience and for security purposes.

It looks to me that they are trying to identify the user uniquely.. maybe also related to captcha to prevent bots (it's common practice to capture mouse and keyboard while resolving captchas to see if the movement is human-like).

[kekmacska@lemmy.zip]

it is open-source, if they did something like this, we would know it for sure

[kekmacska@lemmy.zip]

most apps i have just have no way to collect my keystrokes. it is pretty hard to pull off with an open-source app, without anyone noticing

[kekmacska@lemmy.zip]

your raspberry pi will burn if you want to host an ai model on it. you need a high end gamer pc with at least 32 gb ram and rtx 4090

[kekmacska@lemmy.zip]

lol no. only the sounds of the keys can identify the keyboard's model

[kekmacska@lemmy.zip]

nvidia is one of the greediest companies rn

[uis@lemm.ee]

The goal is not to identify keyboard model. The goal is to identify person. And people tend to have something called habbits.

[rumba@lemmy.zip]

All public companies by definition have to be greedy it's unfortunate but it's how capitalism works.

[grey_maniac@lemmy.ca]

Looks like there are more things I need to start randomizing and injecting with noise.

[kekmacska@lemmy.zip]

nvidia takes that to a whole new level

[kekmacska@lemmy.zip]

the chance of this is almost zero. if you are a dangerous cybercriminal, they will track your device down by a networking solution, wait until you leave it unattended and install a hardware-based spy device and capture evidence. No fbi agent will fuck around with keyboard sounds or movie bs like that

[rumba@lemmy.zip]

Unfortunately, we have a lot of that unprecedented stuff going around. The whole damn world is three corporations in a trechcoat and they're increasingly running governments.

[uis@lemm.ee]

with keyboard sounds

Ok, I see you are intentionally going in circles.