4 ms·
If you want to know what's inside archives without downloading them I'm slowly working on my blog post about this breach. Will try to write a bit about affected
by SXX 4y ago
If you want to know what's inside archives without downloading them I'm slowly working on my blog post about this breach. Will try to write a bit about affected Yandex services for those who never been interested in russian internet segment.
Also uploaded file lists from most of archives:
https://arseniyshestakov.com/2023/01/26/yandex-services-source-code-leak/ https://arseniyshestakov.com/2023/01/26/yandex-services-sour...
- rad_gruchalski 4y agoI have seen your article. This bit caught my attention: > All files are dated back to 24 February 2022. If a coincidence, pretty interesting.
- capableweb 4y agoIn case people aren't aware, that day Russia made a major escalation of the Ukrainian invasion that began back in 2014, starting with the announcement from Putin about a "special military operation" beginning in Ukraine by Russian forces. Unlikely that was the day of download, it's common practice to mask last-modified/last-accessed/created-at timestamps in dumps, by setting it to some significant date or just initial unix timestamp.
- Slava_Propanei 4y ago[dead]
- deleted 4y ago[deleted]
- Zvez 4y agonot a coincidence yandex has its own VCS (called arkadia). But not all services used it, some used github public and private. After war started, they had to migrate everything to internal vcs for obvious reasons. So it makes sense they stopped committing to other repos somewhat around that date. I don't have any inside knowledge now, but my guess would be that the leak is from 'on-prem' github.
- FelixDeSouza 4y agoIt's not coincidence :)