Yandex Code Leak Inozivisa akati wandei eRussia Injini Yekutsvagisa Zviyero

Yandex

Yandex injini yekutsvaga uye yewebhu portal

Mamwe mazuva apfuura ruzivo rwekudonha kweinenge 45 GB rakaburitswa kubva kuRussia tech giant source code mafaera "Yandex", inonzi yakabiwa neaimbova mushandi uye izvo zvakafumura zvekutanga zveinjini yekutsvaga maapplication akawanda uye masevhisi ayo asingawanzo kuburitswa kune veruzhinji.

Iyo "git sources yeYandex" yakaburitswa se torrent faira muna Ndira 25 uye inoratidza mafaera sezviri pachena akatorwa muna Chikunguru 2022 uye kubva muna Kukadzi 2022. Software engineer Arseniy Shestakov anoti akatarisa nevashandi veYandex ikozvino kuti mamwe mafaera "zvechokwadi ane kodhi kubva mabasa ekambani."

Russian tekinoroji kambani Yandex yakakumbira ruregerero mushure mekusarura kwemarudzi kwakawanikwa mune iyi kodhi source yakaburitswa, ichiti hapana kutyora data. Manongedzero akati wandei nezverusaruraganda, kusanganisira iyo "N-izwi," yakawanikwa mune iyo kambani kodhi kodhi svondo rapfuura.

Software mainjiniya Arseniy Shestakov akaongorora yakadeuka Yandex Git repository ndokuti ine tekinoroji data uye kodhi yezvinotevera zvigadzirwa:

  • Yandex yekutsvaga injini uye indexing bot
  • Yandex Mepu
  • Alice (AI mubatsiri)
  • Yandex Taxi
  • Yandex Direct (ad sevhisi)
  • Yandex mail
  • Yandex Disk (gore rekuchengetedza sevhisi)
  • Yandex musika
  • Yandex Kufamba (yekufamba kubhuka chikuva)
  • Yandex360 (nzvimbo yebasa sevhisi)
  • Yandex-cloud
  • Yandex Pay (mubhadharo wekugadzirisa sevhisi)
  • Yandex Metrika (web analytics).

Shestakov akagoverawo dhairekitori rondedzero yemafaira akaburitswa paGitHub kune avo vanoda kuona kuti ndeipi kodhi kodhi yakabiwa.

"Kune mashoma makiyi eAPI, asi anogona kungoshandiswa kuyedza kuita," Shestakov akadaro nezve data rakaburitswa.

Icho chirevo, Yandex yakataura kuti masisitimu ayo haana kubirwa uye kuti aimbove mushandi akaburitsa repository kubva kusource code:

Yandex haina kubiwa. Sevhisi yedu yekuchengetedza yakawana macode snippets kubva mukati meruzhinji domain repository, asi zvirimo zvinosiyana neshanduro yazvino yenzvimbo inoshandiswa muYandex masevhisi.

A repository chishandiso chekuchengeta uye kushanda nekodhi. Iyo kodhi inoshandiswa nenzira iyi mukati nemakambani mazhinji.

Repositories anodiwa pakushanda nekodhi uye haana kuitirwa kuchengetedza wega mushandisi data. Tiri kuita ongororo yemukati mezvikonzero zvekuburitswa pachena kwechinyorwa kodhi snippets, asi isu hationi chero kutyisidzira kune data remushandisi kana kuita kwepuratifomu.

Zvinyorwa zvinotanga kusvika muna Kukadzi 2022, apo Russia yakatanga kurwisa kwakazara kweUkraine. Mumwe aimbova mukuru weYandex akadana iyo leak "zvematongerwo enyika," achicherechedza kuti aimbova mushandi akanga asina kuedza kutengesa code kune vakwikwidzi veYandex. Iyo antispam kodhi haina kuburitswa pachena.

Nguva hazvina kujeka kana kuburitswa kweYandex source kodhi ine zvimiro kana zvekuchengetedza, Kudonha kwe1.922 mamiriro ezvinhu muYandex yekutsvaga algorithm zvirokwazvo iri kukonzera manzwiro.

Kambani yeRussia tech Yandex yakakumbira ruregerero mushure mekupokana kwerudzi kwawanikwa mune yakaburitswa sosi kodhi. Manongedzero akati wandei ekunyomba kwemarudzi akawanikwa mukodhi yekambani. Mumwe muongorori akatanga kuburitsa mashandisirwo emazwi anogumbura munhevedzano yezvinyorwa paTwitter muna Ndira 26, zvichikonzera kushoropodzwa kwakasimba.

Mune chirevo, Yandex yakataura kuti ongororo yekutanga yakaratidza kuti iyo yakaburitswa kodhi "inoratidzika seyakasiyana snippets kubva kune yazvino vhezheni mune repository yekambani." Kambani yakawedzera kuti kodhi yakaburitswa "yaisazombokanganisa chero masevhisi ekambani."

"Tinodemba zvikuru kuti mazwi aya akaonekwa mumakodhi edu emukati," akadaro Yandex. "Izvi hazvigamuchirike uye kutyora kuri pachena kwetsika dzedu dzekambani." "Parizvino tiri kuita ongororo yemukati kuti tinzwisise zviri nani kuti izvi zvakaitika sei, uye tichatora matanho akakodzera, kusanganisira kuona kuti izvi hazviitike zvakare."

Racial slurs yakapfapfaidzwa paYandex yakadeuka. Iwo akashandiswa mukushanda uye mazita akasiyana, akadhindwa mameseji, uye dzimwe nzvimbo mumafaira ekugadzirisa.

Vagadziri vanowanzo shandisa mazwi chaiwo kana mazita kubatsira vamwe vanogadzira kuti vanzwisise mashandiro kana chiito chinoitwa neimwe mutsara wekodhi.

Zvakakodzera kutaura izvozvo iyi haisi yekutanga dambudziko rakadaro rakatarisana neYandex, kubvira muna 2015 akaona kodhi yake yekutsvaga injini ichinyangarika, apo aimbova mushandi akaedza kuitengesa pamusika mutema nemadhora makumi maviri nemasere emadhora kuti awane mari yekutanga. Nhamba inoshamisa yakaderera yekodhi huru yeYandex chigadzirwa chakaratidza kuti yakanga isingazivi kukosha kwayo kwechokwadi. Mushandi uyu akapihwa mutongo wemakore maviri akamiswa uye kodhi haina kumboonekwa pachena.

Finalmente Kana iwe uchifarira kuziva zvakawanda nezvazvo, unogona kutarisa ruzivo Mune inotevera chinongedzo.


Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa. Raida minda anozivikanwa ne *

*

*

  1. Inotarisira data: AB Internet Networks 2008 SL
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako