Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Privacy Pass Authentication for Kagi Search

blog.kagi.com

Post reply on HN
Print view View original

331–340 of 359 posts

Re: Privacy Pass Authentication for Kagi Search

#331

Post by _Algernon_ »

moksha256 wrote: post #301
literallyroy wrote: post #289

Earlier quoted context omitted.

They are compliant, the code being used is under the MIT license.

Yeah I'm as big of a FOSS fan as the next guy on here but you really can't complain about how someone uses your code if you used the MIT License...one of the most permissive licenses in existence. If someone wants attribution or something then they should use a license that requires that thing.

You can if they don't include the copyright header: "The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software."

Which, as far as I can tell they haven't done. Their MIT licence claims their own copyright. No reference to the library used in readme.

https://github.com/kagisearch/privacypass-lib/blob/main/LICE...

https://github.com/kagisearch/privacypass-lib/blob/main/READ...

Usually when using apps that use MIT licensed libs they also implement a notice in a user-facing way. Google maps for instance has a (albeit hidden) section in their settings menu referencing at least one MIT licensed library.

Re: Privacy Pass Authentication for Kagi Search

#332

Post by matthews2 »

ignoramous wrote: post #311
literallyroy wrote: post #289

Earlier quoted context omitted.

They are compliant, the code being used is under the MIT license.

Kagi isn't MIT compliant if they lifted code and removed the copyright of the original author (as claimed by OP) only to replace it with theirs. https://github.com/kagisearch/privacypass-lib/blob/83c9be8cb...

Kagi's repository doesn't contain any of raphaelrobert's code directly. It's used as a library: https://github.com/kagisearch/privacypass-lib/blob/main/src/...

Re: Privacy Pass Authentication for Kagi Search

#333

Post by _Algernon_ »

literallyroy wrote: post #289
SamuelAdams wrote: post #287

Earlier quoted context omitted.

So if they add “credit to raphaelrobert”, or a copy of your license to their code somewhere, Kagi will be compliant? I’ve never had any of my open source software used, and I typically license it with MIT, so I’m curious how other groups and organizations actually comply with the license.

They are compliant, the code being used is under the MIT license.

MIT licence explicitly requires maintaining the original copyright header, and licence.

>Copyright (c)

>Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

>*The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.*

>[...]

Re: Privacy Pass Authentication for Kagi Search

#334

Post by sanbor »

faeranne wrote: post #193
MostlyStable wrote: post #100

One of the biggest complaints about Kagi from people who have not yet adopted it is their privacy concerns around having to login and have payment information. I'm not one of the people that has been concerned about that, but I'm curious to what extent this alleviates those concerns among those that have had them.

Assuming the cryptography does what they say it does (am not a cryptography expert, so I can't verify that part), this would completely disjoin a search request from any account info. The account generates several "search tokens", and for each search request, one of those tokens is spent. The tokens are generated on-device, and until spent, never leave the device, so in theory there's no way for Kagi to know which ac…

Most of the time I have ProtonVPN in my phone and computer, which solves the IP association problem for me

Re: Privacy Pass Authentication for Kagi Search

#335

Post by kobieps »

lawn wrote: post #295
kobieps wrote: post #283

Earlier quoted context omitted.

If $0.27 is an expensive fee then I don't have any answers to that. Yeah routing can suck. First timers should use a lightning wallet with built in LSP support like ZEUS, BitKit, Phoenix, etc. Then routing is a non-issue.

Bitcoin average transaction fees is rarely under $1: https://ycharts.com/indicators/bitcoin_average_transaction_f... I think it's better to use another cryptocurrency like Monero than having to rely on a centralized service just to get a half-decent user experience.

People regularly overpay, so I'm not sure looking at average fees it the right lens. Monero is great, but it's trivial to get an excellent user experience with lightning nowadays that doesn't require custodians.

Re: Privacy Pass Authentication for Kagi Search

#336

Post by kobieps »

akimbostrawman wrote: post #300
kobieps wrote: post #288

Earlier quoted context omitted.

Anyone claiming high fees is straw manning

Lightning is a meme. Imagine needing a sperate glued on system to be somewhat tolerable at the thing it was created for.

Calling it an experiment would be more accurate than declaring it has already failed.

Re: Privacy Pass Authentication for Kagi Search

#337

Post by lawn »

kobieps wrote: post #335
lawn wrote: post #295

Earlier quoted context omitted.

Bitcoin average transaction fees is rarely under $1: https://ycharts.com/indicators/bitcoin_average_transaction_f... I think it's better to use another cryptocurrency like Monero than having to rely on a centralized service just to get a half-decent user experience.

People regularly overpay, so I'm not sure looking at average fees it the right lens. Monero is great, but it's trivial to get an excellent user experience with lightning nowadays that doesn't require custodians.

The reason people overpay is that it's impossible to foresee what fee will get you into the next block, so they overpay to not get stuck potentially for hours or more.

Not requiring custodians is just one part, having to rely on third-party services for basic functionality is another.

Re: Privacy Pass Authentication for Kagi Search

#340

Post by Throwaway123129 »

_Algernon_ wrote: post #331
moksha256 wrote: post #301

Earlier quoted context omitted.

Yeah I'm as big of a FOSS fan as the next guy on here but you really can't complain about how someone uses your code if you used the MIT License...one of the most permissive licenses in existence. If someone wants attribution or something then they should use a license that requires that thing.

You can if they don't include the copyright header: "The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software." Which, as far as I can tell they haven't done. Their MIT licence claims their own copyright. No reference to the library used in readme. https://github.com/kagisearch/privacypass-lib/blob/main/LICE... https://github.com/kagisearch/privacyp…

They’re pulling it in as a dependency. it’s not a fork.

As soon as you run cargo build the source code will be fetched including the original license. That’s better than a settings menu with just a license!

Post reply on HN