Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Whole Yandex Git repository leaked

news.ycombinator.com

Post reply on HN
Print view View original

41–50 of 369 posts

Re: Tell HN: Whole Yandex Git repository leaked

#41

Post by EMIRELADERO »

nyolfen wrote: post #37
EMIRELADERO wrote: post #34

Earlier quoted context omitted.

> Won't be a boon for OSS, any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it. With the current geopolitical situation going on, is this really true? (From a western developer's perspective)

the US and russia are both parties to the berne convention, the law still applies even if a bunch of misc russian people and orgs had their assets seized

It's not about whether it applies, but whether there is any will to enforce it.

Would the US government cooperate in the indictment and prosecution of a US citizen, on behalf of a de-facto enemy nation, for a company that has ties and is allegedly controlled by the government of said nation?

Re: Tell HN: Whole Yandex Git repository leaked

#42

Post by rcfox »

EMIRELADERO wrote: post #34
capableweb wrote: post #25

Earlier quoted context omitted.

Probably Yandex will start watching their infrastructure very closely, and go through all known attack vectors that haven't been prioritized before to fix them ASAP. Won't be a boon for OSS, any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it.

> Won't be a boon for OSS, any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it. With the current geopolitical situation going on, is this really true? (From a western developer's perspective)

Even if Russia were at war with the world, it would still be unethical to loot its citizens' property.

Re: Tell HN: Whole Yandex Git repository leaked

#43

Post by nyolfen »

EMIRELADERO wrote: post #41
nyolfen wrote: post #37

Earlier quoted context omitted.

the US and russia are both parties to the berne convention, the law still applies even if a bunch of misc russian people and orgs had their assets seized

It's not about whether it applies, but whether there is any will to enforce it. Would the US government cooperate in the indictment and prosecution of a US citizen, on behalf of a de-facto enemy nation, for a company that has ties and is allegedly controlled by the government of said nation?

it's not criminal law, yandex can hire a lawyer in the US

Re: Tell HN: Whole Yandex Git repository leaked

#46

Post by llIIllIIllIIl »

coolspot wrote: post #2

Notably Yandex.Search, Yandex.Maps, Yandex.Disk (like Google Drive), Yandex.Mail, Yandex.Alice (voice assistant), Yandex.Taxi (like Uber), Yandex.Delivery (like Postmates), Yandex.Drive (like ZipCar), Yandex.Robot (idk, prob advanced AGI from the future), Yandex.Pay (like Google Pay), Yandex.Docs (like Google Docs/Sheets) all source codes leaked.

There you go, really working and scalable solution for running Mail, Storage, Voice assistant and Documents on your infrastructure and not depend on 3rd parties. End of Joke.

Re: Tell HN: Whole Yandex Git repository leaked

#47

Post by EMIRELADERO »

rcfox wrote: post #42
EMIRELADERO wrote: post #34

Earlier quoted context omitted.

> Won't be a boon for OSS, any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it. With the current geopolitical situation going on, is this really true? (From a western developer's perspective)

Even if Russia were at war with the world, it would still be unethical to loot its citizens' property.

Intellectual property is a social construct that society decided was important enough. Often times there is no direct correlation between the "effort" and the "compensation" that IP enforcement enables.

Re: Tell HN: Whole Yandex Git repository leaked

#48

Post by rcfox »

imglorp wrote: post #23

Yandex reverse image search is very good. I use it more than tineye, bing, or goog. It either gives you the exact matches if it can find them, or else it can infer what is desired and show many similar matches.

I wonder if that's a function of their technology or their database. Google's image search used to be good, but regulations have forced them to cripple it in some ways, and they might have chosen not to surface results in some contexts.

Re: Tell HN: Whole Yandex Git repository leaked

#49

Post by EMIRELADERO »

rcfox wrote: post #39
SeanAnderson wrote: post #20

What are the short-term and long-term implications of this? I assume a drastically increased attack surface and potentially a boon for open-source development? Anything else?

Using stolen code in an open-source project seems like a bad idea.

Someone could still get the uncopyrightable ideas out of it though.

Re: Tell HN: Whole Yandex Git repository leaked

#50

Post by SOLAR_FIELDS »

from wrote: post #30
SeanAnderson wrote: post #20

What are the short-term and long-term implications of this? I assume a drastically increased attack surface and potentially a boon for open-source development? Anything else?

They are still the most popular search engine in Russia, they have the best brand, etc. Intangible stuff like that is hard to copy. Running a search engine on the scale of Yandex is very expensive so I don't think that they are going to be replaced by some startup that copies their code and adds a few features. Probably a bunch of bugs will be found but that's not the end of the world. Apparently they handle images p…

Knowing how stuff like anti-spam algorithms and ranking algorithms work in order to abuse them is probably the much higher value here.
Post reply on HN