Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Whole Yandex Git repository leaked

news.ycombinator.com

Post reply on HN
Print view View original

341–350 of 369 posts

Re: Tell HN: Whole Yandex Git repository leaked

#341

Post by throwaway290 »

tryauuum wrote: post #337
throwaway290 wrote: post #184

Curious. On one hand, Yandex being the biggest IT company and inevitably close to Russian gov, an anti-Russia ex employee could do this in protest after leaving country and company since the latest war started (I know people who did). But on the other hand I heard Yandex was planning to relocate completely to an EU country, which seems like distancing from Russian government, and then it could be an attack by pro-Put…

as a russian, when I read "Yandex was planning to relocate completely to an EU country" I feel that it's obvious that it's not possible for it to relocate completely. Yet, I cannot explain why... allegedly the fear of government is so big that in the beginning of the war management in internal meetings said something like "If we publish real news about the war then it will be our 5 minutes of glory, and then the comp…

I know cases where it did happen...

Re: Tell HN: Whole Yandex Git repository leaked

#342

Post by SOLAR_FIELDS »

pshirshov wrote: post #66
SOLAR_FIELDS wrote: post #50

Earlier quoted context omitted.

Knowing how stuff like anti-spam algorithms and ranking algorithms work in order to abuse them is probably the much higher value here.

The code is lot less worthy than the data for the models which is lot better guarded and is not in this leak.

Probably true. I don’t know much about exploiting algorithms like this, but doesn’t even knowing how the algorithms work give a somewhat substantial advantage in stuff like SEO?

Re: Tell HN: Whole Yandex Git repository leaked

#343

Post by hn92726819 »

eatbitseveryday wrote: post #132
capableweb wrote: post #21

Earlier quoted context omitted.

No? It's 44GB of data. Magnet: magnet:?xt=urn:btih:7e0ac90b489baee8a823381792ec67d465488fef&dn=yandexarc&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969&tr=udp%3A%2F%2Fbt1.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fbt2.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.demonii.co…

> Download at your own risk Baseless fear-mongering or is there some truth to this you can elaborate on?

There are many attack vectors with a dump like this. Running any make, mvn, cargo build, ./configure, etc command can run arbitrary code on your system. These can be added by the anonymous uploader or yandex themselves (they could add a dependency to some tracking site to get your IP as the most basic example).

There can also be dangerous git hooks. you're basically downloading a malicious exe, and any seemingly harmless command could be dangerous

Re: Tell HN: Whole Yandex Git repository leaked

#346

Post by pshirshov »

SOLAR_FIELDS wrote: post #342
pshirshov wrote: post #66

Earlier quoted context omitted.

The code is lot less worthy than the data for the models which is lot better guarded and is not in this leak.

Probably true. I don’t know much about exploiting algorithms like this, but doesn’t even knowing how the algorithms work give a somewhat substantial advantage in stuff like SEO?

From my own understanding - not really, most of such stuff is done with ML models. Code worths almost nothing there.

Re: Tell HN: Whole Yandex Git repository leaked

#347

Post by timka »

fIREpOK wrote: post #314
timka wrote: post #245

Earlier quoted context omitted.

That's complicated indeed. When I start thinking about who can track me (wi-fi, bluetooth and RFID scanners and surveillance cameras everywhere, my telecom provider, banks, public transportation, gmail etc., browser fingerprinting…) I just don't see any practical way to ultimately hide. Add the fundamental lack of trust to any device using ICs (evidence-based, field verifiable) and it becomes just insane. In practice…

> That's complicated indeed. When I start thinking about who can track me (wi-fi, bluetooth and RFID scanners and surveillance cameras everywhere, my telecom provider, banks, public transportation, gmail etc., browser fingerprinting…) I just don't see any practical way to ultimately hide. Add the fundamental lack of trust to any device using ICs (evidence-based, field verifiable) and it becomes just insane. It is unf…

Unfortunately it's impossible to fully elaborate my position here in the format of HN comments but I don't think the way you're talking about is really possible. The system is broken so badly that it cannot be fixed from inside by adding more of its rules. It has to be changed entirely. Figuratively speaking it's sort of like Goedel's theorem.

Have you had an opportunity to discuss their views on privacy and the currently established political culture in the US with those in their 70s and 80s?

Re: Tell HN: Whole Yandex Git repository leaked

#349

Post by froggit »

mtnGoat wrote: post #327
computerfriend wrote: post #176

Earlier quoted context omitted.

What records are you talking about?

The history of Justice in the US.

The "history of justice in the US" is an extremely broad generalization. Justice has had a lot of history. If all of it pointed to judges being unable to be impartial than the legal system would likely have failed long ago. Which specific occurences are you referring to? Just one is fine, it only takes a single positive to disprove a negative.

Re: Tell HN: Whole Yandex Git repository leaked

#350

Post by timka »

int_19h wrote: post #185
pshirshov wrote: post #61

Earlier quoted context omitted.

Not at all. People preferred to use english to feel some connection to the world. That was mostly psychological. A Silicon Valley cargo cult if you wish. Also the company always avoided any use of external contractors.

People prefer to use English in software engineering contexts because most terminology is English anyway, so even if you're talking in Russian, you're still коммитишь чейнджсеты с багфиксами для релиза and so on. While most technical terms have nominal translations, they're usually so unwieldy that even people who are aware of them don't use them. But if they try to, others will have a hard time understanding them. A…

In mid-00's I used to be frequent at a pub that was popular among expats and oil and IT industry professionals. I met a guy from the US there who was a professional translator and interpreter. He once told me that when he has to translate a business letter he finds Russian really cumbersome but when it comes to poetry he finds Russian so beautiful that English will never sound close to that.

Also he gave me his copy of Stephenson's Snow Crash. When I complained that it was so hard to read he answered that for him reading Lermontov is also a struggle. What a guy!

Post reply on HN