Hacker Newsnew | past | comments | ask | show | jobs | submit | Kesseki's commentslogin

No. Absolutely not. The vast majority of such "debt relief" or "debt settlement" offerings are scams, including several of the ones this article promotes. If you're looking at a debt relief plan, you should only consult a licensed non-profit that's a member of a credible organization like the Financial Counseling Association of America or the National Foundation for Credit Counseling.


This is, in turn, making the world of comment and forum spam much worse. Site operators could tag all user-submitted links as "nofollow," making their sites useless for SEO spammers. But spammers have learned that most LLM content scraper bots don't care about "nofollow," so they're back to spamming everywhere.


It reminds me of non-radioactive steel, the kind you can only get from ships sunk before the atomic bomb. Someday, we’ll be scavenging for clean data the same way: pre-AI, uncontaminated by the AI explosion of junk.


I’m not sure if even for traditional search engines “nofollow” means that the scraper doesn’t follow the link, or that it just does not include it in the PageRank or whatever graph but still uses it for to discover new pages. (Of course, LLMs are far too impenetrable for such a middle ground to exist.)


What are you doing to prevent phishing scammers from using your service to create fake login pages en masse? This has plagued similar services to yours.

How can brand owners opt out of your service's infringing their intellectual property rights in their logos?


> What are you doing to prevent phishing scammers from using your service to create fake login pages en masse? This has plagued similar services to yours.

I check what websites are fetching the logos constantly and block any that seem malicious including canceling their api keys.

> How can brand owners opt out of your service's infringing their intellectual property rights in their logos?

I fetch publicly available assets for any brand, i'm not passing them off as my own. Let me know what gave you that impression please :)


By monetising the assets via a paid API you are infringing intellectual property rights and could be sued. If either you or the owner of the copyright protected assets is based in the US you could be liable for statutory damages.

Just because something is publicly available doesn’t mean it is public domain. Many brands allow their logos to be used but only in certain circumstances (even down to how the logo appears, eg what background colors, how much space around it, etc) which they will publish as part of their brand guidelines, and they will normally make it clear that any use beyond the narrow parameters they publish must be negotiated directly.

That said, your service looks both slick and useful, so my criticism is abstract rather than direct. But it’s still a risk.


I would think this is mostly an issue for the consumer of this API, no?


The primary risk is not for the provider of the API, not the consumer. There may be some risk for the consumer on the copyright side but not necessarily, but there may also be a contractual risk (see below).

In US law, there are fair use exceptions that may allow use of a copyright protected logo (or any other copyright protected material) without causing infringement - but those are relatively narrow. It may also be that a brand whose logo is generally available is OK for that logo to be used, without it taking action for infringement - but that doesn't necessarily remove their right to ask for uses that they are not happy with to be stopped.

So simply using a logo may not be copyright infringement - and, for example, the use cases presented by the service here - company logos in transaction statements, etc - may be allowed by a brand, but if they were unhappy with how someone was using their logo they would be within their rights, under copyright, to ask for that use to be stopped, or ask the person or organisation using the logo to enter into a licensing agreement.

As soon as you start charging money for someone else's copyright protected works without a licence that allows you to do that, it is almost certainly copyright infringement. So by making a copyright protected logo available via a paid API without the copyright owners permission, you're very likely immediately opening yourself up to being sued, and in the US you could probably be sued for statutory damages for each time you've infringed. Which would mean that if a logo has been served through a paid API to 10 different customers, suddenly you could have a potential liability of $1.5 million.

So there may be a issue for the consumer of the API depending on what they are doing with the logo, but it's unlikely that they would be pursued for damages. But it is 100% an issue for an organisation providing an API that explicitly makes money off someone else'e copyright. And that means that if the terms and condition of the API say "we have the rights from the copyright owners to provide the logo to you" then they are also in breach of contract with the API consumer. If they don't include wording to that effect in their terms of use, then use of the service would not pass due diligence by anyone serious. So if you're a financial services application and you want to display logos in your application, you'd want to be certain that your use of those logos is legally permitted, and you'd look for that assurance from the API provider. If you don't, then there's a potential liability, which is what I meant about a contractual risk. If you, as the application provider, are making an onward warranty that your application is fully licensed (for example, as a white label version to an enterprise customer) then that could present a risk for you as the application service provider, because of the API's non-compliance. But that's an adjacent thing, really.

Copyright gives a couple of fundamental rights: first of all to allow you to control how your work is copied, and by whom; second, to allow you to choose who you allow to copy your work, and on what terms. The second means that you can grant someone a licence you copy your work in exchange for money.

If someone else starts copying your work and charging money for it, they are very clearly in breach of the protections copyright gives.

So in this case the service is explicitly creating copies of something protected by copyright for money. There's presumably a copy being made at the point it is scraped - which could be covered by fair use - but certainly at the point that the logo is being served to a paying API consumer a copy is being created and the API being charged for that copy, and that would almost certainly negate any fair use argument.

Unfortunately, the only real way to offer a service like this as a paid API is to go and get agreement from every brand whose logo you want to use. Now, it may well be that they would be happy to do that, if you can also offer them a brand protection element to the service - e.g. something like "the only way you can use our logo online is via this API, either as a dynamically served logo (which can be revoked at any time) or as a watermarked logo, tied back to the API consumer (who assumes liability for infringement)". Add in search and enforcement for infringing uses of the logo (and other brand assets) and brands may happily licence the logo to the API provider for free, as part of a wider service.

There's a whole other - potentially bigger - issue to do with trademarks. That's harder for brands, because if you don't enforce infringement of your trademark then you may lose the rights in the trademark. However, that'a a much more complex area and varies a lot from territory to territory.


This is absolutely fascinating, thank you for elaborating! I'll need to dig into this much deeper it seems.

My train of thought was that i was basically offering a hyper-opinionated scraping service since all im doing is scraping publicly available data and packaging it for a particular usecase (similar to say, zoominfo which also provides logos for example).

I will dive into this.

Out of curiosity, what's your background to have all this info? Are you a lawyer of some sort? It was a great writeup.


Not them, but copyright law is something everyone trying to distribute content should be aware of(especially if you want to redistribute content that you didn't generate).

I'm not a lawyer, but from my understanding as long as you're not actually sending the logo image data through your paid API(e.x. if you just link to the logo file on the MasterCard/airbnb/etc. server instead of hosting it on your own) you should be ok.


This is super informative, thank you for taking the time to write it up!


You're very welcome.

There's a lot of misunderstanding about how copyright works, and unless it's something you work with regularly it's basically just a load of abstract handwaving!


Interesting write-up. Does this mean that all of OP's competitors are facing the same legal issues? I wonder what (if anything) they do about this.


This is permitted: https://github.com/cabforum/servercert/blob/main/docs/BR.md#...

But it hasn't really caught on; a lot of registrars don't seem to want the complexity of being (or integrating with) a CA, and vice versa.


Cloudflare offers at least two options that don’t require them to proxy TLS: Spectrum and Magic Transit.


Yes, there is usually a floor value. Most states enumerate some types and amounts of property, and some amounts of income, that are exempt from civil judgment collection. It's the same thing for bankruptcy: there are exemptions that allow you to keep a certain amount.

A bankruptcy discharge does usually ensure a clean slate for new ventures. However, some types of debt are "nondischargeable" and can survive a bankruptcy. That includes "intentional torts" like these instances of defamation. So, it's likely that these plaintiffs/creditors will be able to go after his new ventures.


I think if I was in law school and I was being told about these defamation laws and the potential for someone to be sued out of virtually their entire wealth, that would not have sat well with me. But here we are, and Alex Jones' antics prove to be an excellent rejoinder to those doubts.

Still however, I wish the laws were more selective about which funds are ripe for being taken from. E.g., Alex Jones should have to pay up for money that was made from the source of the problem (the podcasts in this case), if he had, say, funds attained from a side-business of roofing, those should be untouched. And if he continues with his roofing business, maybe we shouldn't be taking all of those funds. Otherwise, I fear we are really just erecting disincentives for them to be good and upstanding contributors to society. As losing defendants of these battles are likely to be a perilous group, the issue probably deserves more careful handling. What are your thoughts?


That's an interesting point about the disincentive. I fear, though, that rules around this wouldn't be feasible to administer; it could open a whole new world of hiding assets, which is already pretty easy to do.


The full list of affected certificates and domains is now available: https://community.letsencrypt.org/t/170449/



There's a plan to make this information available to clients in the future: https://datatracker.ietf.org/doc/draft-aaron-acme-ari/


No. Absolutely do not act as your own patent lawyer - ever - especially in litigation. It is correctly considered an arcane and difficult field even by other lawyers.


The ability to sue is not the same as suing. Simply the threat of a lawsuit is enough to discourage some transactions. That's the point.

In my case, I used a hybrid approach: I studied the law, drew up a response, and then hired a lawyer at $900/hour (as he was a law professor) to put out a response though his firm. By understanding the basics, I could hypothesize a response, on my own time, and then verify that hypothesis with an expert.

[update]

Actually, I just re-read my above post, and didn't make the point very well. Thanks for pointing that out.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: