News for hackers. Stuff that matters.
Re:Tell HN: Whole Yandex Git repository leaked by htzhcfzubhfjk on Wednesday January 25, 2023 @11:39PM (#34527728)
Ukrainians probably hacked Yandex, because they thought, it is a Russian engine, but it is actually from Netherland/EU. They should be careful, otherwise Netherland will stop helping them with weapons pretty quickly.
Re:Tell HN: Whole Yandex Git repository leaked by ipaddr on Wednesday January 25, 2023 @11:51PM (#34527786)
.com is but not .ru
Re:Tell HN: Whole Yandex Git repository leaked by matrix_overload on Thursday January 26, 2023 @12:18AM (#34527962)
It's a Russian company incorporated in Netherlands for the same reason why the Chinese buy real estate in Canada rather than at home.
Re:Tell HN: Whole Yandex Git repository leaked by Nekorosu on Thursday January 26, 2023 @02:43AM (#34528839)
your pathetic attempt at humor will be remembered for ages to come
Re:Tell HN: Whole Yandex Git repository leaked by sereja on Thursday January 26, 2023 @03:35AM (#34529203)
You don't need to hack Yandex. The entire monorepostory is synced on every intern's laptop, and you can do whatever your want with the files. I always wondered how it hasn't been leaked before to be honest.
Re:Tell HN: Whole Yandex Git repository leaked by wizzwizz4 on Thursday January 26, 2023 @04:01AM (#34529374)
> The entire monorepostory is synced on every intern's laptop,

If they're still using Subversion, why would that be? Subversion lets you check out just part of a repo. (Then again, interns, I guess.)

Re:Tell HN: Whole Yandex Git repository leaked by COMMENT___ on Thursday January 26, 2023 @04:13AM (#34529443)
1. Subversion lets you configure granular permissions.

2. Subversion lets you check out portions of your repository.

3. Subversion working copy does not have all regions history. Just a snapshot of the checked out revision.

So at least Subversion would have allowed them to limit the amount of leaked data + no revision history leaked.

Re:Tell HN: Whole Yandex Git repository leaked by Meegoo on Thursday January 26, 2023 @02:23PM (#34537308)
They don't. SVN is an option, but the vast majority use in-house VCS called Arc.
Re:Tell HN: Whole Yandex Git repository leaked by flas9sd on Thursday January 26, 2023 @06:27AM (#34530400)
my cards for the source on the leak are more on dissent than outside party infiltrating. If you were brought up on working in open source the last 20-30 years with contributors from all over the world, getting into the friend/foe mindset is much harder.
Re:Tell HN: Whole Yandex Git repository leaked by thdespou on Thursday January 26, 2023 @05:20AM (#34529925)
I don't think the Dutch would mind. They are giving Leopards to Ukraine.
Re:Tell HN: Whole Yandex Git repository leaked by arianvanp on Thursday January 26, 2023 @05:26AM (#34529973)
it's just in Netherlands for tax evasion like many Russian Oligarchs (https://www.deondernemer.nl/politiek/oekraine/oekraine-houth...)

We don't care. burn it to the ground

Re:Tell HN: Whole Yandex Git repository leaked by comonoid on Thursday January 26, 2023 @05:30AM (#34529998)
It's not even tax invasion, it is for sake of European legal system.