Live data from Hacker News

Tell HN: Whole Yandex Git repository leaked

news.ycombinator.com

111–120 of 369 posts

Re: Tell HN: Whole Yandex Git repository leaked

#111
post #59

% bzgrep "BEGIN PRIVATE KEY" \*.bz2 disk.tar.bz2:Binary file (standard input) matches drive.tar.bz2:Binary file (standard input) matches extsearch.tar.bz2:Binary file (standard input) matches ...

Checked in private keys are fine if they're just used in tests, local development, etc.

Technically fine yes but from a habits and practice standpoint it's safest to stick to a "not ever" rule and work around the limitations.

Re: Tell HN: Whole Yandex Git repository leaked

#113
post #42

Earlier quoted context omitted.

Even if Russia were at war with the world, it would still be unethical to loot its citizens' property.

Intellectual property is a social construct that society decided was important enough. Often times there is no direct correlation between the "effort" and the "compensation" that IP enforcement enables.

Property rights are a social construct regardless of whether the property in question is intellectual. So what?

Re: Tell HN: Whole Yandex Git repository leaked

#114
post #23

Yandex reverse image search is very good. I use it more than tineye, bing, or goog. It either gives you the exact matches if it can find them, or else it can infer what is desired and show many similar matches.

Their Street View product is also very good, however their coverage is mostly for ex Soviet Union countries

Had no idea this existed. Fascinating

Re: Tell HN: Whole Yandex Git repository leaked

#115

Earlier quoted context omitted.

Probably Yandex will start watching their infrastructure very closely, and go through all known attack vectors that haven't been prioritized before to fix them ASAP. Won't be a boon for OSS, any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it.

any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it. Ah, but will it make its way into Copilot? That could be interesting.

Oh that code, Copilot generated it. I m innocent.

The Copilot Defence

Re: Tell HN: Whole Yandex Git repository leaked

#116
post #2

Notably Yandex.Search, Yandex.Maps, Yandex.Disk (like Google Drive), Yandex.Mail, Yandex.Alice (voice assistant), Yandex.Taxi (like Uber), Yandex.Delivery (like Postmates), Yandex.Drive (like ZipCar), Yandex.Robot (idk, prob advanced AGI from the future), Yandex.Pay (like Google Pay), Yandex.Docs (like Google Docs/Sheets) all source codes leaked.

Yandex.Robot is probably a food delivery robot.

Re: Tell HN: Whole Yandex Git repository leaked

#117

Earlier quoted context omitted.

When I've been there arcadia was the primary SVN monorepo where everything was stored (and built by custom flavour of cmake). From what I heard it's still SVN and git was completely eradicated in the company.

This is pretty interesting to me. Usually companies will gradually switch over to git. This is the first time I've heard of a company using git and ditching it in favor of older technology.

Yandex used (maybe still using) SVN monorepo named Arcadia for most of the source code. As it became too big, they developed an in-house VCS called Arc and were switching to it; there is more context in a presentation about Arc (2020), transcript/recording in Russian[1]

I could assume that this is the leak of Arcadia, and each archive roughly contains one top-level folder.

[1]: https://habr.com/en/company/yandex/blog/482926/

Re: Tell HN: Whole Yandex Git repository leaked

#118
post #23

Yandex reverse image search is very good. I use it more than tineye, bing, or goog. It either gives you the exact matches if it can find them, or else it can infer what is desired and show many similar matches.

Their Street View product is also very good, however their coverage is mostly for ex Soviet Union countries

heh, I remember looking up some satellite maps of French prisons on Google maps. They were blurred!!!!

https://www.google.ca/maps/place/Centre+P%C3%A9nitentiaire+d...

A quick trip over to Yandex, and there they were in their full glory:

https://yandex.com/maps/10502/paris/?l=sat&ll=2.340173%2C48....

Re: Tell HN: Whole Yandex Git repository leaked

#119

Earlier quoted context omitted.

It also sucks for privacy.

Its good for privacy if you don't live in Russia... I don't think that they share the data with US governments?

I tend to think that it's not the govs tracking us that we should care about but the big tech. Yandex is one of them.

Re: Tell HN: Whole Yandex Git repository leaked

#120
post #57
post #43

Earlier quoted context omitted.

it's not criminal law, yandex can hire a lawyer in the US

But could they find a judge/jury sympathetic to any Russian concerns?

It's technically a dutch company. They had to do some business manoeuvres to continue operations.

https://ir.yandex/

Post reply on HN