Live data from Hacker News

Tell HN: Whole Yandex Git repository leaked

news.ycombinator.com

181–190 of 369 posts

Re: Tell HN: Whole Yandex Git repository leaked

#181
post #37

Earlier quoted context omitted.

the US and russia are both parties to the berne convention, the law still applies even if a bunch of misc russian people and orgs had their assets seized

It's not about whether it applies, but whether there is any will to enforce it. Would the US government cooperate in the indictment and prosecution of a US citizen, on behalf of a de-facto enemy nation, for a company that has ties and is allegedly controlled by the government of said nation?

yandex is currently based in the Netherlands

Re: Tell HN: Whole Yandex Git repository leaked

#182
post #64

Earlier quoted context omitted.

I think the problem is people are entering a matured industry, all they know is the professional buttoned up culture we have today. People have no further curiosity beyond working and making money in tech. They do not have memories of a time when people tinkered around doing all kinds of crazy and possibly illegal stuff, just for fun, just to see if the could. Sad really.

Not really. If you value your own work, have things you have chosen not to give away and therefore wouldn’t want someone else to steal them, then it makes logical sense to consider the value of other people’s work and not feel comfortable about using a stolen version. Not everyone has to share a political point of view, so while some people are anarchists and are happy to just have a giant free-for all others believe…

I think OP is lamenting the fact that the hacker culture shifted away from what you describe as "anarchism" as the mainstream position. It really was a lot more common among people who self-identified as hackers 20 years ago than it is today.

More broadly speaking, I'd say that the cultural distinction between "hacker" and "corporate" was much wider then, and it manifested in this manner among others.

Re: Tell HN: Whole Yandex Git repository leaked

#183
post #63
post #60

Earlier quoted context omitted.

> Won't be a boon for OSS, any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it. This is naive. This generation seems very sensitive to the prospect of computer crime. The stolen source code will almost certainly be read, and if deemed novel enough will be turned into open source projects. It may be tough to figure out those projects a…

>This generation seems very sensitive to the prospect of computer crime. You're right. I remember a time, maybe 20 years ago, when stuff like this would be generally appreciated by any community of hackers.

Maybe, but I remember when the Windows 2000 source leaked, and the ReactOS developers started forcing all contributors to sign a statement saying that they hadn’t read it.

Re: Tell HN: Whole Yandex Git repository leaked

#184
Curious. On one hand, Yandex being the biggest IT company and inevitably close to Russian gov, an anti-Russia ex employee could do this in protest after leaving country and company since the latest war started (I know people who did). But on the other hand I heard Yandex was planning to relocate completely to an EU country, which seems like distancing from Russian government, and then it could be an attack by pro-Putin hacktivists.

Re: Tell HN: Whole Yandex Git repository leaked

#185

Earlier quoted context omitted.

Lingua franca with all their contractors most likely.

Not at all. People preferred to use english to feel some connection to the world. That was mostly psychological. A Silicon Valley cargo cult if you wish. Also the company always avoided any use of external contractors.

People prefer to use English in software engineering contexts because most terminology is English anyway, so even if you're talking in Russian, you're still коммитишь чейнджсеты с багфиксами для релиза and so on. While most technical terms have nominal translations, they're usually so unwieldy that even people who are aware of them don't use them. But if they try to, others will have a hard time understanding them.

And if it's going to be half-English either way, might as well just do it all in English. If nothing else, it saves time switching keyboard layouts.

Re: Tell HN: Whole Yandex Git repository leaked

#187
post #5
post #3

I was super impressed when I interacted with Yandex ML engineering people like a decade ago on a conf call - they were trying to sell us their services. Very smart and very clearly outward-looking. Haven't followed the company in detail since. Wonder what happened to them. [removed inaccurate details]

> One wonders if this is revenge from the regime. It's not a revenge of the the regime. A decade ago it was a different company, now they all are completely under the cap of FSB, it's basically a Lubyanka filial. It's serfdom all over again, not that strange it got leaked by some unhappy employee.

Is this well known? Seems likely the leak was done by an anti-Putin employee or ex employee in revenge/protest against the war if yes.

Re: Tell HN: Whole Yandex Git repository leaked

#188

What are the short-term and long-term implications of this? I assume a drastically increased attack surface and potentially a boon for open-source development? Anything else?

Probably Yandex will start watching their infrastructure very closely, and go through all known attack vectors that haven't been prioritized before to fix them ASAP. Won't be a boon for OSS, any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it.

> any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it.

What? Why? Isn't this what software developers do — they read a lot of code; they find ideas they like; they mix them together with their own ideas while building something. Isn't this how learning works in general?

Re: Tell HN: Whole Yandex Git repository leaked

#189
post #174

What are the short-term and long-term implications of this? I assume a drastically increased attack surface and potentially a boon for open-source development? Anything else?

Yandex might be the most popular search engine in Russia, but also they're by far the most popular logistics company for private people here. They do deliveries (food, groceries, other goods), taxis, moving vans and so on - all strongly Yandex branded. If you walk around the streets of Russia's big cities, their brand is absolutely omnipresent (and also in some former Soviet countries, like Armenia). Eating into thei…

Part of me is seeing someone with GPT prompt asking for a 'rewrite'. We truly live in interesting times.

For the record, I don't disagree with you on the licensing/copyright front.

Re: Tell HN: Whole Yandex Git repository leaked

#190

Earlier quoted context omitted.

No? It's 44GB of data. Magnet: magnet:?xt=urn:btih:7e0ac90b489baee8a823381792ec67d465488fef&dn=yandexarc&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969&tr=udp%3A%2F%2Fbt1.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fbt2.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.demonii.co…

It's a joy seeing flags from all the world in the torrent peers. Special mention to Ukraine and Russia itself.

Hack the planet! ~
Post reply on HN