What are the short-term and long-term implications of this? I assume a drastically increased attack surface and potentially a boon for open-source development? Anything else?
[deleted]
Tell HN: Whole Yandex Git repository leaked
31–40 of 369 posts
Re: Tell HN: Whole Yandex Git repository leaked
#32Could any kind soul out there upload the repositories to a public git instance?
No? It's 44GB of data. Magnet: magnet:?xt=urn:btih:7e0ac90b489baee8a823381792ec67d465488fef&dn=yandexarc&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969&tr=udp%3A%2F%2Fbt1.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fbt2.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.demonii.co…
[dead]
Re: Tell HN: Whole Yandex Git repository leaked
#33[dead]
Re: Tell HN: Whole Yandex Git repository leaked
#34What are the short-term and long-term implications of this? I assume a drastically increased attack surface and potentially a boon for open-source development? Anything else?
Probably Yandex will start watching their infrastructure very closely, and go through all known attack vectors that haven't been prioritized before to fix them ASAP. Won't be a boon for OSS, any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it.
> Won't be a boon for OSS, any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it.
With the current geopolitical situation going on, is this really true? (From a western developer's perspective)
Re: Tell HN: Whole Yandex Git repository leaked
#35Yandex reverse image search is very good. I use it more than tineye, bing, or goog. It either gives you the exact matches if it can find them, or else it can infer what is desired and show many similar matches.
Yandex regular search is very good too, especially at surfacing results which appear to be censored by Google. The only problem is the interface language keeps flipping back to Russian.
Re: Tell HN: Whole Yandex Git repository leaked
#36Re: Tell HN: Whole Yandex Git repository leaked
#37Earlier quoted context omitted.
Probably Yandex will start watching their infrastructure very closely, and go through all known attack vectors that haven't been prioritized before to fix them ASAP. Won't be a boon for OSS, any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it.
> Won't be a boon for OSS, any author would be idiotic to read stolen source code and then decide to create a OSS library/project based on what they learn from it. With the current geopolitical situation going on, is this really true? (From a western developer's perspective)
the US and russia are both parties to the berne convention, the law still applies even if a bunch of misc russian people and orgs had their assets seized
Re: Tell HN: Whole Yandex Git repository leaked
#38What are the short-term and long-term implications of this? I assume a drastically increased attack surface and potentially a boon for open-source development? Anything else?
They are still the most popular search engine in Russia, they have the best brand, etc. Intangible stuff like that is hard to copy. Running a search engine on the scale of Yandex is very expensive so I don't think that they are going to be replaced by some startup that copies their code and adds a few features. Probably a bunch of bugs will be found but that's not the end of the world. Apparently they handle images p…
I can still see many companies trying. If the opportunity is there to make money off of this leak then someone will attempt it.
Re: Tell HN: Whole Yandex Git repository leaked
#39What are the short-term and long-term implications of this? I assume a drastically increased attack surface and potentially a boon for open-source development? Anything else?
Using stolen code in an open-source project seems like a bad idea.
Re: Tell HN: Whole Yandex Git repository leaked
#40Interesting that most of the code comments are in English.
So you can confirm they are legit? Anything look exciting?