Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Whole Yandex Git repository leaked

news.ycombinator.com

Post reply on HN
Print view View original

251–260 of 369 posts

Re: Tell HN: Whole Yandex Git repository leaked

#251

Post by fidgewidge »

wizzwizz4 wrote: post #196
azangru wrote: post #188

Earlier quoted context omitted.

> any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it. What? Why? Isn't this what software developers do — they read a lot of code; they find ideas they like; they mix them together with their own ideas while building something. Isn't this how learning works in general?

> What? Why? Isn't this what software developers do — they read a lot of code; they find ideas they like; they mix them together with their own ideas while building something. Not normally. https://en.wikipedia.org/wiki/Not_invented_here#In_computing More to the point: an organisation will usually use cleanroom techniques to clone something like this, if they choose to do so. Anyone who's been in contact with the ori…

You aren't allowed to use cleanroom techniques to clone something that's been stolen. You're still guilty of copyright violation for even downloading the code in the first place, and who knows, maybe also laws against receipt of stolen goods. Cleanroom reverse engineering is usually applied to a product that you've actually bought and paid for. You'd have to be really crazy to try and use this code for anything.

Re: Tell HN: Whole Yandex Git repository leaked

#252

Post by unkulunkulu »

imglorp wrote: post #23

Yandex reverse image search is very good. I use it more than tineye, bing, or goog. It either gives you the exact matches if it can find them, or else it can infer what is desired and show many similar matches.

Our cat once demolished a nice chair in a rental apartment. The chair belonged to the owner. At first we could not find where to get a replacement, but yandex reverse image search helped to my surprise!

Re: Tell HN: Whole Yandex Git repository leaked

#253

Post by GoblinSlayer »

Zetobal wrote: post #13

Interesting that most of the code comments are in English.

Another reason is encoding confusion. If the text is not ascii, then you somehow should guess its encoding. For compatibility reason a lot of tools and editors may default to an old codepage instead of utf-8 (they may respect utf-8 if you have a bom), add to this legacy code already written in who knows what encoding. Is it a windows codepage? DOS codepage? Linux? ISO-8859? If you guess encoding wrong, you can corrupt text.

Re: Tell HN: Whole Yandex Git repository leaked

#254

Post by dewey »

guilhas wrote: post #225
digianarchist wrote: post #4

https://breached.vc/Thread-yandex-git-sources

How is this site allowed to be live? Yandex source is cool. But there are a lot of leaks with people private data The US authorities move mountains for TornadoCash, Z-Library, etc... why leave this one?

"Private people" don't have a powerful lobby group.

Re: Tell HN: Whole Yandex Git repository leaked

#255

Post by GoblinSlayer »

aflag wrote: post #248
gspetr wrote: post #155

Earlier quoted context omitted.

At first I wanted to give a serious reply, but then I saw your (very aptly chosen, given the context) username and found myself wondering if HN rules allow parody accounts... However, I'll give one for those who've missed the irony: It's considered gauche to have ubiquitous non-english comments. Pretty much the only kosher use case is when you have to warn people not to modify otherwise bizarre looking code because o…

In many places I worked at in Brazil people will just write everything, even variable names, in Portuguese. That came down to the developers not speaking English at all. Who considers it gauche to have software written in non-English? The Russians you mean? I certainly find it perfectly acceptable and even desirable depending on the contributor's English fluency.

Portuguese is still latin, isn't it. I suppose much of it is similar to English. Imagine if everything was, say, ελληνικά.

Re: Tell HN: Whole Yandex Git repository leaked

#256

Post by pshirshov »

lostmsu wrote: post #170
pshirshov wrote: post #58

Earlier quoted context omitted.

Skynet is a command execution and metric collection layer used in basic cluster ops. Nothing cool to be honest. Essentially it allows you to run a command on all the hosts matching a predicate. This was the easiest way to disrupt a whole datacenter for those who had enough privileges, I did it at least once. Also several times unnoticed bugs in my code shut down literally everything for noticeable periods of time. I'…

There's no confirmation about the number of machines the script is going to affect?

Yeah, it was extremely easy to fuck up. In some cases though you might have wanted to run something on thousands of hosts to debug a tricky issue. Bad practices, I know.

Re: Tell HN: Whole Yandex Git repository leaked

#257

Post by mschuster91 »

vbezhenar wrote: post #228
teetertater wrote: post #180

Earlier quoted context omitted.

In Russia the copyright rules are more relaxed though. As long as you stay small nobody will enforce it

Is it different in other countries? Who checks that local pizzeria uses genuine Windows?

Windows? No one unless disgruntled ex-employees blow a whistle. Other stuff like pirated pay-tv streams though? These absolutely have agents on the streets scouting out bars and pubs to check if they're paying customers and if they are actually using an (expensive) commercial license or if they are mis-using a residential one.

Re: Tell HN: Whole Yandex Git repository leaked

#258

Post by The_Colonel »

fIREpOK wrote: post #104
29athrowaway wrote: post #102

Earlier quoted context omitted.

It also sucks for privacy.

Its good for privacy if you don't live in Russia... I don't think that they share the data with US governments?

Eh, it shares data with Russian government.

If I have to choose between the two, I'll go with the US one.

Re: Tell HN: Whole Yandex Git repository leaked

#259

Post by pshirshov »

viraptor wrote: post #131
pshirshov wrote: post #61

Earlier quoted context omitted.

Not at all. People preferred to use english to feel some connection to the world. That was mostly psychological. A Silicon Valley cargo cult if you wish. Also the company always avoided any use of external contractors.

I think you're reading to much into this. It's easier to not switch languages in one task. If you're using an English-based programming language and English libraries/frameworks, you're not going to name your own variables in a different language. Comments most often follow that too. Any time I see someone attempt that, it's extremely distracting.

Not really. I've attended a meeting on the subject where people decided to use English "not to be loosers" and I've heard similar stories from other teams and departments.

Re: Tell HN: Whole Yandex Git repository leaked

#260

Post by The_Colonel »

rcfox wrote: post #42
EMIRELADERO wrote: post #34

Earlier quoted context omitted.

> Won't be a boon for OSS, any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it. With the current geopolitical situation going on, is this really true? (From a western developer's perspective)

Even if Russia were at war with the world, it would still be unethical to loot its citizens' property.

Yandex is complicit in the war and willingly helping Russian government with censorship. Its existence is unethical.
Post reply on HN