Live data from Hacker News

Tell HN: Whole Yandex Git repository leaked

news.ycombinator.com

21–30 of 369 posts

Re: Tell HN: Whole Yandex Git repository leaked

#21

Could any kind soul out there upload the repositories to a public git instance?

No? It's 44GB of data.

Magnet:

    magnet:?xt=urn:btih:7e0ac90b489baee8a823381792ec67d465488fef&dn=yandexarc&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969&tr=udp%3A%2F%2Fbt1.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fbt2.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.demonii.com%3A1337%2Fannounce
Download at your own risk, comes from a brand new user on BreachForums

Re: Tell HN: Whole Yandex Git repository leaked

#24

What are the short-term and long-term implications of this? I assume a drastically increased attack surface and potentially a boon for open-source development? Anything else?

All of those, assuming there's nothing malicious in the code. Google see if any of their code had been stolen, not like they can do much right now.

Re: Tell HN: Whole Yandex Git repository leaked

#25

What are the short-term and long-term implications of this? I assume a drastically increased attack surface and potentially a boon for open-source development? Anything else?

Probably Yandex will start watching their infrastructure very closely, and go through all known attack vectors that haven't been prioritized before to fix them ASAP.

Won't be a boon for OSS, any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it.

Re: Tell HN: Whole Yandex Git repository leaked

#28
post #23

Yandex reverse image search is very good. I use it more than tineye, bing, or goog. It either gives you the exact matches if it can find them, or else it can infer what is desired and show many similar matches.

Hmm, didn't know they had one, but I'm let down by Google's 90% of the time so I'll try it next time.

Re: Tell HN: Whole Yandex Git repository leaked

#30

What are the short-term and long-term implications of this? I assume a drastically increased attack surface and potentially a boon for open-source development? Anything else?

They are still the most popular search engine in Russia, they have the best brand, etc. Intangible stuff like that is hard to copy. Running a search engine on the scale of Yandex is very expensive so I don't think that they are going to be replaced by some startup that copies their code and adds a few features. Probably a bunch of bugs will be found but that's not the end of the world. Apparently they handle images pretty well so parts of that may be (illegally) copied in some places.
Post reply on HN