311–320 of 369 posts
Notably Yandex.Search, Yandex.Maps, Yandex.Disk (like Google Drive), Yandex.Mail, Yandex.Alice (voice assistant), Yandex.Taxi (like Uber), Yandex.Delivery (like Postmates), Yandex.Drive (like ZipCar), Yandex.Robot (idk, prob advanced AGI from the future), Yandex.Pay (like Google Pay), Yandex.Docs (like Google Docs/Sheets) all source codes leaked.
Earlier quoted context omitted.
why?
Russia is currently trying to invade and conquer even larger parts of Ukraine and a significant part of the world is helping Ukraine defend itself at the moment. I prefer handing my data to privacy-breaching companies if the alternative would be handing data over to a state my government is currently holding a proxy war against.
Earlier quoted context omitted.
There are multiple levels of tracking... Governments being the top levels, then maybe global communication companies along with big tech titans... etc... AkA a complicated forest and/or tree of data?
And then we have China, where the big companies are required to share the data with the government if they request it.
That's one thing that is probably the same in most countries... at least we know it is also true for USA and Russia.
Earlier quoted context omitted.
There are multiple levels of tracking... Governments being the top levels, then maybe global communication companies along with big tech titans... etc... AkA a complicated forest and/or tree of data?
That's complicated indeed. When I start thinking about who can track me (wi-fi, bluetooth and RFID scanners and surveillance cameras everywhere, my telecom provider, banks, public transportation, gmail etc., browser fingerprinting…) I just don't see any practical way to ultimately hide. Add the fundamental lack of trust to any device using ICs (evidence-based, field verifiable) and it becomes just insane. In practice…
It is unfortunate that there appears to be only one way to reclaim our privacy,and that is through the passing of new laws and regulations. However, due to the way that laws are passed in the United States, I am not very optimistic. For instance, sometimes unrelated laws are attached to necessary budget bills in order for them to pass, or a three hundred-page bill of legal jargon is given a misleading title such as the "PATRIOT" Act (The unpatriotic bill). Furthermore, both political parties do not seem particularly supportive of privacy, if anything they appear to be opposed to it. We need to somehow make this an important political issue in 2024.
Is there any highlights? Like any ML that can be run locally or neat code?
They only parse Russian and Turkish I think, so the parser/tokenizer/etc would have to be replaced if you wanted to steal and repurpose it for another language, but the rest could probably be translated and you’d get a working production-grade smart assistant for somewhat cheap-ish.
Earlier quoted context omitted.
Eh, it shares data with Russian government. If I have to choose between the two, I'll go with the US one.
why?
If you want to know what's inside archives without downloading them I'm slowly working on my blog post about this breach. Will try to write a bit about affected Yandex services for those who never been interested in russian internet segment. Also uploaded file lists from most of archives: https://arseniyshestakov.com/2023/01/26/yandex-services-sour...
I have seen your article. This bit caught my attention: > All files are dated back to 24 February 2022. If a coincidence, pretty interesting.
https://breached.vc/Thread-yandex-git-sources
How is this site allowed to be live? Yandex source is cool. But there are a lot of leaks with people private data The US authorities move mountains for TornadoCash, Z-Library, etc... why leave this one?
Earlier quoted context omitted.
Russia is currently trying to invade and conquer even larger parts of Ukraine and a significant part of the world is helping Ukraine defend itself at the moment. I prefer handing my data to privacy-breaching companies if the alternative would be handing data over to a state my government is currently holding a proxy war against.
US right now invaded Syria and stealing Syrian oil
They use p0f for TCP fingerprinting in their nginx config :) Edit: Cool spam factors in extsearch/robot/index/metadoc/lib/links/spam_factors.h: SF_WEB_HOST_RANK = 0, SF_GREEN_TRAFFIC_SHARE_NORMALIZED = 1, SF_ADULTNESS_BETA = 2, SF_NOT_FOUND_RANKS = 3, SF_RANK_DOOR_TUMBLR = 4, SF_NASTY_CONTENT = 5, SF_LANGUAGE = 6, SF_IS_SHOP = 7, SF_WEB_HOST_SIZE = 8, SF_RANK_HACKED_NOVA_PHP = 9, SF_IS_FOREIGN_HOST = 10, SF_PESS_LEVE…
SF_RANK_DOOR2_2 hmm...