今天abc看了啥🤔
Forwarded from HAT's Public Channel |
A\ 实锤 DeepSeek 此前灰度测试时会将请求直接路由至 ClaudeOur investigation revealed that DeepSeek also deployed tactics similar to Moonshot’s. DeepSeek built a CoT extraction pipeline, relying on the same cross-session replay attack described above. DeepSeek also silently relayed exchanges to Claude without informing DeepSeek customers. Like GTG-16002, their customers were likely not made aware that their requests were being funneled to Claude.
Our investigation revealed that DeepSeek targeted the reasoning traces of Opus, leveraging a similar technique to that of Moonshot. Using the reasoning signature, DeepSeek used the same cross-session replay attack used by Moonshot to extract CoT transcripts and circumvent our technical controls. DeepSeek used this technique to exfiltrate reasoning traces that would have otherwise been summarized.
DeepSeek rerouted requests from users that were attempting to use one of DeepSeek’s models through third-party or Anthropic coding harnesses, like Claude Code, the Claude Agent SDK, or OpenCode. DeepSeek checked various strings included in inbound requests, tagging users that were using these third-party harnesses. Selected tagged users then had their requests relayed to Claude Opus. This sensitive data was likely routed to Anthropic without the knowledge or consent of DeepSeek’s customers.
Our investigation revealed that DeepSeek targeted the reasoning traces of Opus, leveraging a similar technique to that of Moonshot. Using the reasoning signature, DeepSeek used the same cross-session replay attack used by Moonshot to extract CoT transcripts and circumvent our technical controls. DeepSeek used this technique to exfiltrate reasoning traces that would have otherwise been summarized.
DeepSeek rerouted requests from users that were attempting to use one of DeepSeek’s models through third-party or Anthropic coding harnesses, like Claude Code, the Claude Agent SDK, or OpenCode. DeepSeek checked various strings included in inbound requests, tagging users that were using these third-party harnesses. Selected tagged users then had their requests relayed to Claude Opus. This sensitive data was likely routed to Anthropic without the knowledge or consent of DeepSeek’s customers.
https://www.anthropic.com/~
