Live data from Hacker News

Tell HN: Whole Yandex Git repository leaked

news.ycombinator.com

151–160 of 369 posts

Re: Tell HN: Whole Yandex Git repository leaked

#152

Earlier quoted context omitted.

Checked in private keys are fine if they're just used in tests, local development, etc.

Technically fine yes but from a habits and practice standpoint it's safest to stick to a "not ever" rule and work around the limitations.

yolo

Re: Tell HN: Whole Yandex Git repository leaked

#153

Earlier quoted context omitted.

No? It's 44GB of data. Magnet: magnet:?xt=urn:btih:7e0ac90b489baee8a823381792ec67d465488fef&dn=yandexarc&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969&tr=udp%3A%2F%2Fbt1.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fbt2.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.demonii.co…

> Download at your own risk Baseless fear-mongering or is there some truth to this you can elaborate on?

There'd be no harm in poking around.

Re: Tell HN: Whole Yandex Git repository leaked

#155
post #13

Interesting that most of the code comments are in English.

Lingua franca with all their contractors most likely.

At first I wanted to give a serious reply, but then I saw your (very aptly chosen, given the context) username and found myself wondering if HN rules allow parody accounts...

However, I'll give one for those who've missed the irony: It's considered gauche to have ubiquitous non-english comments.

Pretty much the only kosher use case is when you have to warn people not to modify otherwise bizarre looking code because of either regulatory, legal, or domain-specific reasons, and listing them in their native language makes more sense, since developers are not legal experts and translating them into English is not in the job description if the app is solely for domestic market.

Re: Tell HN: Whole Yandex Git repository leaked

#156
post #23

Yandex reverse image search is very good. I use it more than tineye, bing, or goog. It either gives you the exact matches if it can find them, or else it can infer what is desired and show many similar matches.

I think they also made it dumber after Bellingcat used it to identify a secret service officer. Interesting to see if we can find any trace of that in the git history.

Re: Tell HN: Whole Yandex Git repository leaked

#157
post #23

Yandex reverse image search is very good. I use it more than tineye, bing, or goog. It either gives you the exact matches if it can find them, or else it can infer what is desired and show many similar matches.

I think they also made it dumber after Bellingcat used it to identify a secret service officer. Interesting to see if we can find any trace of that in the git history.

Allegedly it's snapshot data, not the actual Git repositories.

Re: Tell HN: Whole Yandex Git repository leaked

#158

That's huge. What takes up most of that 40Gb+?

1. It is basically a regional big tech do-it-all company. 2. Git repos tend to get rather large over time and yandex has been around since before git.

There is no git history in leak. Just a lot of code, test data and occasional binaries / ml train data and few pre-trained models.

Re: Tell HN: Whole Yandex Git repository leaked

#159

Sadly building a maps app, or a search engine, is more about getting lots of data than it is about code. But I do hope that this can be used in arguments, such as saying "We should do it X way because that's what Yandex does!"

> or a search engine

I would guess the crawling to be the easiest part.

Re: Tell HN: Whole Yandex Git repository leaked

#160

Earlier quoted context omitted.

I think they also made it dumber after Bellingcat used it to identify a secret service officer. Interesting to see if we can find any trace of that in the git history.

Allegedly it's snapshot data, not the actual Git repositories.

By the size of the dump, my guess is that each tarball is a repo with the .git or .svn dir intact. But I cannot download it now.
Post reply on HN