Live data from Hacker News

GitHub publishes DMCA deletion notifications sent by Bilibili

github.com

31–40 of 117 posts

Re: GitHub publishes DMCA deletion notifications sent by Bilibili

#31

Heard about this a couple days ago, crazy stuff. For those who don't know, bilibili is a massive video hosting platform in China aimed toward the younger generation. So the question is who leaked it and why? Just a disgruntled employee or the effect of 996?

Elaborating a bit more on the size of bilibili: it has around 100m monthly users and trades as NASDAQ:BILI with a market cap of ~$5.7B.

This is not some small-time shop, as far as social media companies go bilibili is one of the more established companies out there.

Re: GitHub publishes DMCA deletion notifications sent by Bilibili

#33

As far as I know, an employee who was illegally laid off by bilibili put part of the company's background code on GitHub to vent his anger. And then GitHub has directionally shielded the keywords "bilibili" and "go-common", But it can be bypassed by typing only one character less. there are still a lot of projects alive. It is not yet known who leaked it. Also for the reason.

> illegally laid off

Source please?

Re: GitHub publishes DMCA deletion notifications sent by Bilibili

#35
post #33

As far as I know, an employee who was illegally laid off by bilibili put part of the company's background code on GitHub to vent his anger. And then GitHub has directionally shielded the keywords "bilibili" and "go-common", But it can be bypassed by typing only one character less. there are still a lot of projects alive. It is not yet known who leaked it. Also for the reason.

> illegally laid off Source please?

You can find some reports here by using Translation software(If this report hasn't been deleted yet)。 BiliBili once made a statement on Weibo, but delete in a few minutes. https://www.heibai.org/post/1214.html

Re: GitHub publishes DMCA deletion notifications sent by Bilibili

#36
Not great...

MD5 password hashing: https://github.com/swituo/openbilibili-go-common/blob/8866d1...

Hardcoded credentials: https://github.com/swituo/openbilibili-go-common/blob/8866d1...

More hard coded secrets: https://github.com/swituo/openbilibili-go-common/blob/8866d1...

This configuration is my favourite: https://github.com/swituo/openbilibili-go-common/blob/8866d1...

And of course, RSA keys which they use for all of their RSA encryption: https://github.com/swituo/openbilibili-go-common/blob/8866d1...

... their problem is not that the source code is all public over the internet now... their problem is the engineering team. If source code leaks the worst outcome should be some IP leakage, but not a compromised live system. That can and should be easily avoided by not having everything in your source code, especially when you are such a big company with so many employees...

Re: GitHub publishes DMCA deletion notifications sent by Bilibili

#38
post #33

As far as I know, an employee who was illegally laid off by bilibili put part of the company's background code on GitHub to vent his anger. And then GitHub has directionally shielded the keywords "bilibili" and "go-common", But it can be bypassed by typing only one character less. there are still a lot of projects alive. It is not yet known who leaked it. Also for the reason.

> illegally laid off Source please?

> illegally laid off for this part, I can't give credible sources, I know it from hearsay

Re: GitHub publishes DMCA deletion notifications sent by Bilibili

#39
post #32

HERO.md: https://gitlab.com/wkingfly/openbilibili/blob/master/HERO.md I have no idea what it means, but I like it.

These are playable races and character classes from Warcraft III (and the expansion The Frozen Throne).

Most of these probably also appear in World of Warcraft, though I cannot say for sure.

As to why this file is in the top directory of the repo, your guess is as good as mine.

Re: GitHub publishes DMCA deletion notifications sent by Bilibili

#40
post #18

Code base is fair game DMCA-wise. I wonder about the private keys though. I don't think they are copyrightable (although it would cool to have a poem as the private key). So, does DMCA cover that too?

Good question. My guess is that the only thing needed to be copyrightable is the one thing which is not.
Post reply on HN