https://breached.vc/Thread-yandex-git-sources
Anyone else's download stuck? I haven't used torrents in forever, not sure if this is normal or if there's a workaround.
Tell HN: Whole Yandex Git repository leaked
91–100 of 369 posts
Re: Tell HN: Whole Yandex Git repository leaked
#92Seems like the main repository ("arcadia") isn't there.
Looked around and it seems like arcadia is a sort of VCS on top of git/a build system? https://github.com/yandex/CMICOT/blob/master/.arcadia.root
When I've been there arcadia was the primary SVN monorepo where everything was stored (and built by custom flavour of cmake). From what I heard it's still SVN and git was completely eradicated in the company.
Re: Tell HN: Whole Yandex Git repository leaked
#93Earlier quoted context omitted.
>This generation seems very sensitive to the prospect of computer crime. You're right. I remember a time, maybe 20 years ago, when stuff like this would be generally appreciated by any community of hackers.
I think the problem is people are entering a matured industry, all they know is the professional buttoned up culture we have today. People have no further curiosity beyond working and making money in tech. They do not have memories of a time when people tinkered around doing all kinds of crazy and possibly illegal stuff, just for fun, just to see if the could. Sad really.
Tinkering is fine. Even leaking and study is fine.
But re-licensing someone's else code is at the very least impolite. People avoid using BSD-licensed code in GPL code base, or vice versa, just to not violate an open-source license of some fellow hacker who won't sue (but would yawp on Twitter, or something).
Also, cutting proprietary stuff out of the thick scaffolding of proprietary dependencies is often hard. Removing proprietary cruft / tech debt may be even harder. A rewrite from scratch (not clean-room though) may be just easier.
This is to say nothing about any serious business unwilling to depend on code of unclear provenance, with possible legal complications attached; there goes adoption.
Re: Tell HN: Whole Yandex Git repository leaked
#94Earlier quoted context omitted.
I think the problem is people are entering a matured industry, all they know is the professional buttoned up culture we have today. People have no further curiosity beyond working and making money in tech. They do not have memories of a time when people tinkered around doing all kinds of crazy and possibly illegal stuff, just for fun, just to see if the could. Sad really.
Hangout on different forums
Where?
Re: Tell HN: Whole Yandex Git repository leaked
#95Yandex reverse image search is very good. I use it more than tineye, bing, or goog. It either gives you the exact matches if it can find them, or else it can infer what is desired and show many similar matches.
I wonder if that's a function of their technology or their database. Google's image search used to be good, but regulations have forced them to cripple it in some ways, and they might have chosen not to surface results in some contexts.
>but regulations have forced them to cripple it in some ways
the regulations don't apply to Microsoft apparently, because even goddamn Bing has been better at it than Google for years now.
Re: Tell HN: Whole Yandex Git repository leaked
#96What programming languages are they using mostly?
C++ and Python.
Re: Tell HN: Whole Yandex Git repository leaked
#97Re: Tell HN: Whole Yandex Git repository leaked
#98Earlier quoted context omitted.
>This generation seems very sensitive to the prospect of computer crime. You're right. I remember a time, maybe 20 years ago, when stuff like this would be generally appreciated by any community of hackers.
I think the problem is people are entering a matured industry, all they know is the professional buttoned up culture we have today. People have no further curiosity beyond working and making money in tech. They do not have memories of a time when people tinkered around doing all kinds of crazy and possibly illegal stuff, just for fun, just to see if the could. Sad really.
> People have no further curiosity beyond working and making money in tech.
For some, sure.
There are also many who still explore, but qualitatively the overall culture feels very different.
Unfortunately, there are employers who seem to want their employees to tinker, but own virtually everything they do, all while still playing lip service to supporting work-life balance, including parenting. So we get mixed messages and weird hiring priorities.
Re: Tell HN: Whole Yandex Git repository leaked
#99Earlier quoted context omitted.
Well there was a critical git RCE less than 7 days ago that could be triggered by cloning a malicious repo so you might not have to execute anything to get owned
this is a torrent of a git repo, not using git to clone
It doesn't even have any git history either. Just pure source code with some ML models and training data.
Re: Tell HN: Whole Yandex Git repository leaked
#100Earlier quoted context omitted.
Looked around and it seems like arcadia is a sort of VCS on top of git/a build system? https://github.com/yandex/CMICOT/blob/master/.arcadia.root
When I've been there arcadia was the primary SVN monorepo where everything was stored (and built by custom flavour of cmake). From what I heard it's still SVN and git was completely eradicated in the company.
This is pretty interesting to me. Usually companies will gradually switch over to git. This is the first time I've heard of a company using git and ditching it in favor of older technology.