Tell HN: Whole Yandex Git repository leaked

Re:Tell HN: Whole Yandex Git repository leaked by capableweb on Wednesday January 25, 2023 @07:58PM (#34526431)

No? It's 44GB of data.

Magnet:

    magnet:?xt=urn:btih:7e0ac90b489baee8a823381792ec67d465488fef&dn=yandexarc&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969&tr=udp%3A%2F%2Fbt1.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fbt2.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.demonii.com%3A1337%2Fannounce

Download at your own risk, comes from a brand new user on BreachForums

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by ASalazarMX on Wednesday January 25, 2023 @09:16PM (#34526932)

It's a joy seeing flags from all the world in the torrent peers. Special mention to Ukraine and Russia itself.

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by int_19h on Thursday January 26, 2023 @03:22AM (#34529126)

Hack the planet! ~

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by GoblinSlayer on Thursday January 26, 2023 @07:57AM (#34531072)

It's VPN.

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by A4ET8a8uTh0 on Wednesday January 25, 2023 @09:19PM (#34526962)

I would not build it, but I am sure just looking at code won't be the end of the world ( cue some ridiculous end of world the scenario Family Guy style ). There are risks, but I am not sure those risks are legal risks in this case. They are more along the lines of.. you wouldn't download and build Ghidra without checking would you?

Who am I kidding.

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by rl3 on Thursday January 26, 2023 @12:20AM (#34527974)

>They are more along the lines of.. you wouldn’t download and build Ghidra without checking would you?

Ah, I think Ghidra is trustworthy now that it’s been OSS for years. I’ve heard it’s especially good for debugging performance issues with certain SCADA systems. Your centrifuges aren’t behaving? Better fire up Ghidra and figure it out!

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by eatbitseveryday on Wednesday January 25, 2023 @11:08PM (#34527572)

> Download at your own risk

Baseless fear-mongering or is there some truth to this you can elaborate on?

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by xcdzvyn on Thursday January 26, 2023 @12:44AM (#34528097)

There'd be no harm in poking around.

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by capableweb on Thursday January 26, 2023 @04:01AM (#34529370)

More like: might be illegal in your country to even download (don't know where the downloader is from, laws differ and bittorrent dht is easy to spy on) and I'm not the first-hand source of the torrent nor have I downloaded it myself, just forwarding a download link.

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by ormax3 on Thursday January 26, 2023 @08:11AM (#34531197)

just means that given the nature of BitTorrent, you will be exposing your IP address to other peers and trackers

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by hn92726819 on Friday January 27, 2023 @12:37AM (#34542891)

There are many attack vectors with a dump like this. Running any make, mvn, cargo build, ./configure, etc command can run arbitrary code on your system. These can be added by the anonymous uploader or yandex themselves (they could add a dependency to some tracking site to get your IP as the most basic example).

There can also be dangerous git hooks. you're basically downloading a malicious exe, and any seemingly harmless command could be dangerous

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by alfalf on Thursday January 26, 2023 @01:38AM (#34528394)

magnet:?xt=urn:btih:7e0ac90b489baee8a823381792ec67d465488fef&dn=yandexarc&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969&tr=udp%3A%2F%2Fbt1.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fbt2.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.demonii.com%3A1337%2Fannounce

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by zadrot-lol on Saturday January 28, 2023 @06:04AM (#34556689)

magnet:?xt=urn:btih:7e0ac90b489baee8a823381792ec67d465488fef&dn=yandexarc&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969&tr=udp%3A%2F%2Fbt1.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fbt2.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.demonii.com%3A1337%2Fannounce

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by wqewqewqe on Monday January 30, 2023 @10:35AM (#34581007)

magnet:?xt=urn:btih:7e0ac90b489baee8a823381792ec67d465488fef&dn=yandexarc&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969&tr=udp%3A%2F%2Fbt1.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fbt2.archive.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.demonii.com%3A1337%2Fannounce

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by haidev on Wednesday January 25, 2023 @07:59PM (#34526438)

Would that kind soul get sued or flagged by the Kremlin

[ Parent | on HN ]

Re:Tell HN: Whole Yandex Git repository leaked by spak9 on Wednesday January 25, 2023 @07:53PM (#34526400)

Please!

[ Parent | on HN ]