News for hackers. Stuff that matters.

A comment on Tell HN: Whole Yandex Git repository leaked. Parent comment

Re:Tell HN: Whole Yandex Git repository leaked by sereja on Thursday January 26, 2023 @03:35AM (#34529203)
You don't need to hack Yandex. The entire monorepostory is synced on every intern's laptop, and you can do whatever your want with the files. I always wondered how it hasn't been leaked before to be honest.
[ Parent | on HN ]
Re:Tell HN: Whole Yandex Git repository leaked by wizzwizz4 on Thursday January 26, 2023 @04:01AM (#34529374)
> The entire monorepostory is synced on every intern's laptop,

If they're still using Subversion, why would that be? Subversion lets you check out just part of a repo. (Then again, interns, I guess.)

[ Parent | on HN ]
Re:Tell HN: Whole Yandex Git repository leaked by COMMENT___ on Thursday January 26, 2023 @04:13AM (#34529443)
1. Subversion lets you configure granular permissions.

2. Subversion lets you check out portions of your repository.

3. Subversion working copy does not have all regions history. Just a snapshot of the checked out revision.

So at least Subversion would have allowed them to limit the amount of leaked data + no revision history leaked.

[ Parent | on HN ]
Re:Tell HN: Whole Yandex Git repository leaked by Meegoo on Thursday January 26, 2023 @02:23PM (#34537308)
They don't. SVN is an option, but the vast majority use in-house VCS called Arc.
[ Parent | on HN ]
Re:Tell HN: Whole Yandex Git repository leaked by flas9sd on Thursday January 26, 2023 @06:27AM (#34530400)
my cards for the source on the leak are more on dissent than outside party infiltrating. If you were brought up on working in open source the last 20-30 years with contributors from all over the world, getting into the friend/foe mindset is much harder.
[ Parent | on HN ]