AntiMalwareJuly 22, 2026🇷🇺Translated from Russian

DeepSeek User Conversations Appear in Google Search Results via Publicly Shared Links

Conversations between home users and the Chinese AI service DeepSeek, including many in Russian, have been discovered in Google search results. Accessing another person’s dialogue with the model requires only a specially crafted search query.

The pages in question are Shared Conversations — dialogues that users voluntarily published via public links. Every question, answer, and the titles of any uploaded documents are visible on these pages, as verified by a TASS correspondent. Journalists were unable to download the actual files, even by inspecting the page source code.

Representatives of MWS AI stated that no new data leak has taken place. They noted that search engines had already indexed thousands of publicly shared chatbot dialogues more than a year ago. No reports of a compromise of DeepSeek or unauthorized access to private conversation histories have emerged.

Most likely, the indexed pages are either old conversations or ones that users deliberately made public. It remains impossible to obtain access to a user’s account or private chats through these links. In effect, DeepSeek did not open doors to personal accounts; users themselves left certain conversations publicly accessible, and Google simply catalogued them.

In parallel, Yandex confirmed that links to dialogues with its Alice AI assistant are blocked from search-engine indexing. Such links are created only at the user’s initiative, remain valid for 14 days, and can be revoked at any time. Attached files are never transmitted to the recipient, and continuing another user’s conversation stays private.

Related articles

AntiMalwarePrivacy & Surveillance

One Underscore, 18 Months in Prison: Username Typo Sends Innocent Man to Jail

Brandon Klaym, a resident of Nova Scotia, spent 18 months in prison after Canadian and U.S. authorities confused two similar Kik usernames during a child exploitation investigation. Police sought records for the account fus__ro_dah but requested data for fus_ro_dah, directing them to the wrong individual. The error originated in a 2018 Wisconsin case involving 125 messages sent to a 12-year-old girl; the real suspect used a Skyrim reference that contained two underscores. Kik supplied Klaym’s subscriber information, and his IP address led investigators to Canada. Despite finding no evidence on his devices and no proof he had ever used Kik during the relevant period, prosecutors charged him with multiple child-sex offenses. He was convicted in 2023, served his full 18-month sentence, and was only exonerated in 2024 when the correct username was examined during appeal proceedings.

AntiMalwarePrivacy & Surveillance

Free VPNs Fail Within Days as Russian Filters Detect Tunnels Without Decrypting Traffic

Free VPN services promoted in Telegram now stop working after just a few days, with Instagram Reels freezing, YouTube stalling in endless loading, and Google Gemini returning 403 errors. Modern Russian content filtering systems have advanced beyond simple IP blocking and can identify proxy tunnels through indirect traffic characteristics such as packet sizes, inter-packet intervals, and TLS handshake structures. A common failure pattern involves connections succeeding initially before data transfer abruptly slows or drops after roughly 16 KB, a behavior linked to deep packet inspection recognizing proxy patterns. Users and developers counter these detections with techniques including packet fragmentation, reduced TCP segment sizes, and tools like zapret to desynchronize analyzers while preserving normal server-side flow. Services such as sing-box employ uTLS to better mimic legitimate browser TLS fingerprints, while ShadowTLS v3 and padding methods help mask connections as ordinary HTTPS sessions to allowed resources. Recommended working options include AmneziaVPN, Cloudflare WARP, Red Shield VPN, and self-hosted setups on Xray or sing-box, though some claims around hynet.cloud lack independent verification.

HabrPrivacy & Surveillance

Why Simple VPNs No Longer Suffice Against Advanced DPI Blocking Telegram, Reels and Google AI Studio

Over the past year or two, users have observed that free VPNs and Telegram proxies often stop working after a few days, with Reels freezing, YouTube failing to load, Telegram stuck on Connecting, and Google AI Studio or Gemini returning errors. Modern filtering systems now analyze traffic behavior such as packet sizes, timing intervals, and TLS handshake characteristics rather than decrypting content. Techniques like TCP desynchronization via nfqws, MSS clamping with iptables, uTLS fingerprint emulation in sing-box, and ShadowTLS v3 for borrowing legitimate sessions are being deployed to evade detection. Padding is added to encrypted streams to reduce entropy and frustrate statistical shaping by TSPU systems. Commercial and self-hosted options including hynet.cloud, AmneziaWG, Red Shield VPN, GoodbyeDPI, and Cloudflare WARP each present distinct advantages and limitations when facing evolving network restrictions.

HabrPrivacy & Surveillance

Personal Digital Resilience: Strategies to Secure Access Chains and Preserve Data Portability

The article explores how individuals can strengthen their digital infrastructure against service outages, lost access, and data loss without turning maintenance into a full-time project. It defines digital resilience through two pillars: security against unauthorized access and reduced dependence on any single provider, especially when regulators in different jurisdictions interfere. The author maps real-world processes to digital services, access methods, and stored data, then outlines recovery formulas for each failure scenario. Practical steps include auditing password-manager entries, eliminating circular dependencies, separating recovery roots by jurisdiction, and exporting data in portable formats. Special attention is given to secrets such as TOTP seeds and recovery codes, which are stored in an encrypted offline archive whose master password exists only on paper. The resulting structure features two independent trees rooted at Yandex and Google, with all critical services backed by verifiable exports and tested recovery paths.