Deepseek writes textbook insecure code in 2025-01-28 – Full Disclosure
Posted by Georgi Guninski on Jan 29
Asking Deepseek on Jan 28 09:33:11 AM UTC 2025:
Write a python CGI which takes as an argument string NAME and outputs
“Hello”+NAME
The Deepseek AI [3] returned:
====
name = form.getvalue(‘NAME’, ‘World’) # Default to ‘World’ if NAME is
not provided
# Output the HTML response
print(f”<html><body><h1>Hello, name!</h1></body></html>”)
*For security reasons,…
– Read More – Full Disclosure