5 ms·

Curious to try Kite, I started to integrate Kite plugin into PyCharm until I saw they keep our code in the cloud which enables Kite do what it does. I'm not sur

by rohit33 10y ago

Curious to try Kite, I started to integrate Kite plugin into PyCharm until I saw they keep our code in the cloud which enables Kite do what it does. I'm not sure how many of them would be ok with their code being stored in a private cloud!

badthingfactory 10y ago
My largest concern is how frequently is my code sent to the cloud? Sometimes when building integrations, I hard code private keys just to get things working and then pull them out into config files that aren't checked into source control. Not knowing where that key might have gone would bother me.
- alexflint 10y ago
  One of the big things we've worked on over the past few months is giving users fine grained control of which files are indexed by kite: - Kite only indexes directories that you have explicitly enabled - You can create a .kiteignore file (same semantics as .gitignore) to exclude specific files / patterns.
  - badthingfactory 10y ago
    That clarifies things. Thanks!
  - semi-extrinsic 10y ago
    Do you have a sanitizer that detects stuff that looks like crypto keys and censors it before upload? Offhand, sounds like it would be pretty easy to compute just using an appropriate entropy measure.
  - askvictor 10y ago
    It would probably make sense to default to using .gitignore if a .kiteignore hasn't been specified; likely the same things that you'd want hidden.
  - deleted 9y ago
    [deleted]
- autotune 10y ago
  Why not set them as environment variables? Add a debug mode or whatever and then if set, pull from environment vars instead of config files. Not saying you should trust Kite to keep your code, but as a general practice might be a better idea.
alexflint 10y ago
Totally legit concern. when we started working on this we realized if we wanted to index tens of thousands of libraries, we wouldn't be able to ship the entire index along with the client. Hence the cloud-based architecture. We've thought a lot about privacy and written up our thoughts here: kite.com/security. The short answer is: we don't index anything on your computer that you don't explicitly ask us to, and our plan is to earn trust the hard (i.e. only) way: transparency, published policies, and a track record of good decision making.
- mpfundstein 10y ago
  how easy is it for one of your programmers to look at code that is currently residing on your cloud?
- IanCal 10y ago
  How big is the index? Could you offer it as an option (even paid)? I imagine some would be happy using up a good few gigs and paying a bit more to not have to post their code to you.
- matthewaveryusa 10y ago
  I'm sorry but the true intention is to have recurring revenue and not have licensing issues with open-source software you're leveraging on your backend. It's fine to be a capitalist, and I'm looking forward to using and paying for kite once my language of choice is supported, but come on, just be honest that you need a source of income to create this amazing product and this model is the one that fits the bill best. Again, there's nothing wrong with that. I'll gladly give you 1TB of HD space, help seed the giant chunk of data, and pay a bit moreif that's what it takes.
  - alexflint 10y ago
    It wouldn't be a viable business unless we thought we could add real value _and_ thought that we could capture some of that value. Yes, being on the cloud allows us to set up an attractive subscription model. But Kite won't succeed as a business unless it turns out to actually be a value-add over local solutions. That's what we're betting on.
Wonnk13 10y ago
So can I use this without an internet connection? The environments I work in are basically SCIFs. Think i'll stick with Jedi for now.
- alexflint 10y ago
  Yeah, as of today (and probably for the foreseeable future) you can't use Kite while you're not connected to the internet. But honestly most programmers I speak to already rely a _lot_ on looking up material online while coding. Kite won't break your dev environment if you're disconnected, it just won't add anything.
pbasista 10y ago
I certainly would not. Thanks for pointing that out. Their landing page does not mention it at all. There is a lot of publicly available source code which Kite can scrap and use. Expecting that users will be happily uploading their code into a private cloud is weird.

by rohit33 10y ago

badthingfactory 10y ago

My largest concern is how frequently is my code sent to the cloud? Sometimes when building integrations, I hard code private keys just to get things working and then pull them out into config files that aren't checked into source control. Not knowing where that key might have gone would bother me.

alexflint 10y ago
One of the big things we've worked on over the past few months is giving users fine grained control of which files are indexed by kite: - Kite only indexes directories that you have explicitly enabled - You can create a .kiteignore file (same semantics as .gitignore) to exclude specific files / patterns.
- badthingfactory 10y ago
  That clarifies things. Thanks!
- semi-extrinsic 10y ago
  Do you have a sanitizer that detects stuff that looks like crypto keys and censors it before upload? Offhand, sounds like it would be pretty easy to compute just using an appropriate entropy measure.
- askvictor 10y ago
  It would probably make sense to default to using .gitignore if a .kiteignore hasn't been specified; likely the same things that you'd want hidden.
- deleted 9y ago
  [deleted]
autotune 10y ago
Why not set them as environment variables? Add a debug mode or whatever and then if set, pull from environment vars instead of config files. Not saying you should trust Kite to keep your code, but as a general practice might be a better idea.

alexflint 10y ago

Totally legit concern. when we started working on this we realized if we wanted to index tens of thousands of libraries, we wouldn't be able to ship the entire index along with the client. Hence the cloud-based architecture. We've thought a lot about privacy and written up our thoughts here: kite.com/security. The short answer is: we don't index anything on your computer that you don't explicitly ask us to, and our plan is to earn trust the hard (i.e. only) way: transparency, published policies, and a track record of good decision making.

mpfundstein 10y ago
how easy is it for one of your programmers to look at code that is currently residing on your cloud?
IanCal 10y ago
How big is the index? Could you offer it as an option (even paid)? I imagine some would be happy using up a good few gigs and paying a bit more to not have to post their code to you.
matthewaveryusa 10y ago
I'm sorry but the true intention is to have recurring revenue and not have licensing issues with open-source software you're leveraging on your backend. It's fine to be a capitalist, and I'm looking forward to using and paying for kite once my language of choice is supported, but come on, just be honest that you need a source of income to create this amazing product and this model is the one that fits the bill best. Again, there's nothing wrong with that. I'll gladly give you 1TB of HD space, help seed the giant chunk of data, and pay a bit moreif that's what it takes.
- alexflint 10y ago
  It wouldn't be a viable business unless we thought we could add real value _and_ thought that we could capture some of that value. Yes, being on the cloud allows us to set up an attractive subscription model. But Kite won't succeed as a business unless it turns out to actually be a value-add over local solutions. That's what we're betting on.

Wonnk13 10y ago

So can I use this without an internet connection? The environments I work in are basically SCIFs. Think i'll stick with Jedi for now.

alexflint 10y ago
Yeah, as of today (and probably for the foreseeable future) you can't use Kite while you're not connected to the internet. But honestly most programmers I speak to already rely a _lot_ on looking up material online while coding. Kite won't break your dev environment if you're disconnected, it just won't add anything.

pbasista 10y ago

I certainly would not. Thanks for pointing that out. Their landing page does not mention it at all. There is a lot of publicly available source code which Kite can scrap and use. Expecting that users will be happily uploading their code into a private cloud is weird.