Hacker News Reader

Comment by Nition | Hacker News Reader

If anyone from Kagi is reading this: Now that you have search without an account, is there any chance we can finally get a DNS-based enforced safesearch option like every other major search engine has? It's been in the feedback requests since May 2022[1].

Anyone on an enforced-safesearch network can now go to kagi.com, turn SafeSearch off, and search for porn or anything else, which is just going to get kagi blocked completely on all those networks. If you add a SafeSearch-enforced alternative IP address, then Kagi can still be used.

[1] https://kagifeedback.org/d/3285-safe-search-dns-locking-for-...

View on HN

Yes, we can look into prioritizing this internally.

Thanks!

What legitimate reason is there for stuff like that? Workspaces should not be enforcing policies like that - trust your workers - and parental nonsense shouldn't be a goal of an ethical business.

It can be useful at home for parents with kids as well. A decent number of people use Pi-hole, NextDNS, or some other DNS blocker service.

Either way, ultimately the result of not offering the option will more likely be getting blocked entirely, than workers being freed from the shackles of SafeSearch.

What's even the point of DNS based safe search? Anyone can change their DNS and use DNS over https, how does DNS safe search work in that instance?

Also blocking the search is pretty weird, what prevents me of typing the URL directly?

It can be used to keep bad content away from kids. DNS over TLS can be blocked on the network router / firewall and DNS safe search enforced by forwarding lookups to something like Adguard

Enterprise and school devices often configure browsers to not allow modifying DoH settings and configure the OS to not accept unapproved programs like sideloaded browsers that may not obey that device policy.

> Anyone can change their DNS and use DNS over https

Not if the machine is locked down. Blocking all search engines is not a feasible approach, though, hence the Safe Search mechanism.

> Also blocking the search is pretty weird, what prevents me of typing the URL directly?

That URL can be blocked at the router level, but one can still see cached search engine images when safe search is off.

There are at least a few 8 year olds who have yet to learn what DNS is.

> What legitimate reason is there for stuff like that? Workspaces should not be enforcing policies like that - trust your workers

It's not just porn, it could be a way to prevent successful phishing through employees filling out a malicious form or whatever.

"Trust your workers" is bad infosec.

Yeah people are dumb if they can get an Amazon gift card or a job offer, see what happened to Binance.

But blocking alternative search engines and AI engines goes a bit far IMO especially if they dont use training. Especially if you're just afraid they will see a nipple on a search engine. That's ridiculous.

Check this guy's hard drive

That isn't an acceptable way to respond to others.

For schools

Ah, the good old "you don't need privacy if you have nothing to hide" argument.

> trust your workers

Some companies just know their workers, i.e. if you have a bigger company you will have some idiots. We heard things like "you shouldn't be paying an escort with your company credit card" and the reason was because it was done, multiple times.

Kagi is already blocked in my workplace due to their AI features, so a 'sanitised', search-only version of the site would be very useful

> Kagi is already blocked in my workplace due to their AI features

Can you expand upon this? Why is there an AI block?

Usually it's "You can only use CoPilot"

Ya Microsoft lobbies for that, at our place too.

The reason is that copilot resells other people's models (they're just a middle man) and there's an easy way to cut them out. So they blow up the dangers of other people's AI. Whereas if your data is in M365 they have it all anyway whether you use copilot or not. So they're trying to build a moat so they don't easily get cut out.

So that people don't feed proprietary data into a model that will train itself from it. Standard DLP practice.

> s there any chance we can finally get a DNS-based enforced safesearch option like every other major search engine has? It's been in the feedback requests since May 2022[1].

Not working with Kagi, but while they have RU contracts this will not be possible, can guarantee.

You mean Yandex/Russia? Yandex itself has an enforced SafeSearch IP (213.180.193.56) so I would have thought Kagi could too.

It does appear to me @HNReply99 just wants to watch pornography? You can do it man, although some on this site may suggest SICP instead, or few radical ones even suggest programming in Rust.

Reply on news.ycombinator.com