Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
winddude
on Jan 26, 2023
|
parent
|
context
|
favorite
| on:
Tell HN: Whole Yandex Git repository leaked
Can anyone confirm there's nothing obviously malicious implanted in the code and they are legit?
MonkeyMalarky
on Jan 26, 2023
[–]
Why on earth would you
execute
anything from the dump?
ghostpepper
on Jan 26, 2023
|
parent
|
next
[–]
Well there was a critical git RCE less than 7 days ago that could be triggered by cloning a malicious repo so you might not have to execute anything to get owned
drekipus
on Jan 26, 2023
|
root
|
parent
|
next
[–]
this is a torrent of a git repo, not using git to clone
SXX
on Jan 26, 2023
|
root
|
parent
|
next
[–]
It doesn't even have any git history either. Just pure source code with some ML models and training data.
Aleksdev
on Jan 26, 2023
|
parent
|
prev
[–]
You know why.
MonkeyMalarky
on Jan 26, 2023
|
root
|
parent
|
next
[–]
No, I really don't
Aleksdev
on Jan 26, 2023
|
root
|
parent
|
next
[–]
These are various yandex products. Yandex is the Google of Russia, people will run the code out of curiosity alone.
winddude
on Jan 26, 2023
|
root
|
parent
|
prev
[–]
lazy
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
