Live data from Hacker News

Tell HN: Whole Yandex Git repository leaked

news.ycombinator.com

81–90 of 369 posts

Re: Tell HN: Whole Yandex Git repository leaked

#81
post #64
post #63

Earlier quoted context omitted.

>This generation seems very sensitive to the prospect of computer crime. You're right. I remember a time, maybe 20 years ago, when stuff like this would be generally appreciated by any community of hackers.

I think the problem is people are entering a matured industry, all they know is the professional buttoned up culture we have today. People have no further curiosity beyond working and making money in tech. They do not have memories of a time when people tinkered around doing all kinds of crazy and possibly illegal stuff, just for fun, just to see if the could. Sad really.

Hangout on different forums

Re: Tell HN: Whole Yandex Git repository leaked

#82
post #59

% bzgrep "BEGIN PRIVATE KEY" \*.bz2 disk.tar.bz2:Binary file (standard input) matches drive.tar.bz2:Binary file (standard input) matches extsearch.tar.bz2:Binary file (standard input) matches ...

Checked in private keys are fine if they're just used in tests, local development, etc.

Re: Tell HN: Whole Yandex Git repository leaked

#83

Could any kind soul out there upload the repositories to a public git instance?

No? It's 44GB of data. Magnet: magnet:?xt=urn:btih:7e0ac90b489baee8a823381792ec67d465488fef&dn=yandexarc&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969&tr=udp%3A%2F%2Fbt1.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fbt2.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.demonii.co…

It's a joy seeing flags from all the world in the torrent peers. Special mention to Ukraine and Russia itself.

Re: Tell HN: Whole Yandex Git repository leaked

#85
post #70
post #39

Earlier quoted context omitted.

Using stolen code in an open-source project seems like a bad idea.

Then we can train FancyCodeGeneratorModel on it to bypass this unfortunate licensing problem.

Damn, that's not a bad idea, "convert this code so that it is indistinguishable from the source"

Re: Tell HN: Whole Yandex Git repository leaked

#86

Earlier quoted context omitted.

Why on earth would you execute anything from the dump?

Well there was a critical git RCE less than 7 days ago that could be triggered by cloning a malicious repo so you might not have to execute anything to get owned

this is a torrent of a git repo, not using git to clone

Re: Tell HN: Whole Yandex Git repository leaked

#88

Could any kind soul out there upload the repositories to a public git instance?

No? It's 44GB of data. Magnet: magnet:?xt=urn:btih:7e0ac90b489baee8a823381792ec67d465488fef&dn=yandexarc&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969&tr=udp%3A%2F%2Fbt1.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fbt2.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.demonii.co…

I would not build it, but I am sure just looking at code won't be the end of the world ( cue some ridiculous end of world the scenario Family Guy style ). There are risks, but I am not sure those risks are legal risks in this case. They are more along the lines of.. you wouldn't download and build Ghidra without checking would you?

Who am I kidding.

Re: Tell HN: Whole Yandex Git repository leaked

#90
post #48

Earlier quoted context omitted.

I wonder if that's a function of their technology or their database. Google's image search used to be good, but regulations have forced them to cripple it in some ways, and they might have chosen not to surface results in some contexts.

Not only regulations, Chrome's builtin image search uses Google Lens to find products to sell you instead of simple reverse searches. It has become useless.

100% this. Google Lense is a product search engine, not image search.
Post reply on HN