Tell HN: Whole Yandex Git repository leaked • Hacker News Board

Re: Tell HN: Whole Yandex Git repository leaked

#221

Post by 123456789hbbh » Thu, Jan 26, 2023, 9:44 AM UTC

capableweb wrote: post #21

EMIRELADERO wrote: post #15

Could any kind soul out there upload the repositories to a public git instance?

No? It's 44GB of data. Magnet: magnet:?xt=urn:btih:7e0ac90b489baee8a823381792ec67d465488fef&dn=yandexarc&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969&tr=udp%3A%2F%2Fbt1.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fbt2.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.demonii.co…

[dead]

Re: Tell HN: Whole Yandex Git repository leaked

#222

Post by dmitriid » Thu, Jan 26, 2023, 9:47 AM UTC

nathancahill wrote: post #220

This whole "build in the open" stuff has gone too far.

Is this the future OSS enthusiasts want?! * shakes fist *

Re: Tell HN: Whole Yandex Git repository leaked

#223

Post by rad_gruchalski » Thu, Jan 26, 2023, 9:52 AM UTC

SXX wrote: post #136

If you want to know what's inside archives without downloading them I'm slowly working on my blog post about this breach. Will try to write a bit about affected Yandex services for those who never been interested in russian internet segment. Also uploaded file lists from most of archives: https://arseniyshestakov.com/2023/01/26/yandex-services-sour...

I have seen your article. This bit caught my attention:

> All files are dated back to 24 February 2022.

If a coincidence, pretty interesting.

Re: Tell HN: Whole Yandex Git repository leaked

#224

Post by psychphysic » Thu, Jan 26, 2023, 9:52 AM UTC

Geee wrote: post #129

How do companies prevent their employees from leaking code?

They fire them in the dead of night after cutting off all credentials silently. And hope the Dev didn't have any local code.

Re: Tell HN: Whole Yandex Git repository leaked

#225

Post by guilhas » Thu, Jan 26, 2023, 9:55 AM UTC

digianarchist wrote: post #4

https://breached.vc/Thread-yandex-git-sources

How is this site allowed to be live?

Yandex source is cool. But there are a lot of leaks with people private data

The US authorities move mountains for TornadoCash, Z-Library, etc... why leave this one?

Re: Tell HN: Whole Yandex Git repository leaked

#226

Post by [deleted] » Thu, Jan 26, 2023, 10:03 AM UTC

[deleted]

Re: Tell HN: Whole Yandex Git repository leaked

#227

Post by psychphysic » Thu, Jan 26, 2023, 10:03 AM UTC

Is there any highlights?

Like any ML that can be run locally or neat code?

Re: Tell HN: Whole Yandex Git repository leaked

#228

Post by vbezhenar » Thu, Jan 26, 2023, 10:07 AM UTC

teetertater wrote: post #180

tazjin wrote: post #174

Earlier quoted context omitted.

Yandex might be the most popular search engine in Russia, but also they're by far the most popular logistics company for private people here. They do deliveries (food, groceries, other goods), taxis, moving vans and so on - all strongly Yandex branded. If you walk around the streets of Russia's big cities, their brand is absolutely omnipresent (and also in some former Soviet countries, like Armenia). Eating into thei…

In Russia the copyright rules are more relaxed though. As long as you stay small nobody will enforce it

Is it different in other countries? Who checks that local pizzeria uses genuine Windows?

Re: Tell HN: Whole Yandex Git repository leaked

#229

Post by capableweb » Thu, Jan 26, 2023, 10:09 AM UTC

rad_gruchalski wrote: post #223

SXX wrote: post #136

If you want to know what's inside archives without downloading them I'm slowly working on my blog post about this breach. Will try to write a bit about affected Yandex services for those who never been interested in russian internet segment. Also uploaded file lists from most of archives: https://arseniyshestakov.com/2023/01/26/yandex-services-sour...

I have seen your article. This bit caught my attention: > All files are dated back to 24 February 2022. If a coincidence, pretty interesting.

In case people aren't aware, that day Russia made a major escalation of the Ukrainian invasion that began back in 2014, starting with the announcement from Putin about a "special military operation" beginning in Ukraine by Russian forces.

Unlikely that was the day of download, it's common practice to mask last-modified/last-accessed/created-at timestamps in dumps, by setting it to some significant date or just initial unix timestamp.

Re: Tell HN: Whole Yandex Git repository leaked

#230

Post by seanhunter » Thu, Jan 26, 2023, 10:11 AM UTC

int_19h wrote: post #182

seanhunter wrote: post #175

Earlier quoted context omitted.

Not really. If you value your own work, have things you have chosen not to give away and therefore wouldn’t want someone else to steal them, then it makes logical sense to consider the value of other people’s work and not feel comfortable about using a stolen version. Not everyone has to share a political point of view, so while some people are anarchists and are happy to just have a giant free-for all others believe…

I think OP is lamenting the fact that the hacker culture shifted away from what you describe as "anarchism" as the mainstream position. It really was a lot more common among people who self-identified as hackers 20 years ago than it is today. More broadly speaking, I'd say that the cultural distinction between "hacker" and "corporate" was much wider then, and it manifested in this manner among others.

I've been programming and part of "hacker" culture for over 40 years now so I get it.

20 years ago you would get people lamenting that 20 years before that everything was all hippy sunshine and rainbows and homebrew computer club, phreaking and shareware etc, and that wasn't true then just like it isn't now.

I don't think anarchism has ever been the mainstream position at least never in my experience. It has always been present but always been fringe.