-2

I used to use a program called mps-YouTube. It allows to easily play YouTube playlists. Currently it doesn't work anymore, since the Limit has been reached (presumably because every mps-YouTube user shared the same API key).

This made me wonder. You need to register an API key with google, yet you can just use YouTube for free (even adblocking works without any issues).

Since I have to use the API anyway for watching YouTube videos with my browser and don't have an API key, why does mps-YouTube need an API key?

And what would prevent someone from just snatching the key from an open source project like mps-YouTube and using it anywhere else?

Linda Lawton - DaImTo
  • 106,405
  • 32
  • 180
  • 449
user2741831
  • 2,120
  • 2
  • 22
  • 43

1 Answers1

2

Since I have to use the API anyway for watching YouTube videos with my browser and don't have an API key, why does mps-YouTube need an API key?

API key is used by Google to identitfy the application making the requests to its api. If to many requests come from this application then the application will be shutdown or throttled.

And what would prevent someone from just snatching the key from an open source project like mps-YouTube and using it anywhere else?

It is against Googles TOS which application developers agree to when they create their projects. To share any google keys or credentials with others including putting them in opensource projects. So this isn't an issue as it wouldn't / shouldn't happen. See: Can I really not ship open source with Client ID?

mps-YouTube TOS violation

I did a quick search of the source code for that project and found the API key in the code is in fact still live i have posted an issue for them Google TOS violation explaining why this is a bad idea.

Linda Lawton - DaImTo
  • 106,405
  • 32
  • 180
  • 449
  • 1
    No that means each application needs its own key. If you download their code and run their application you need your own api key. If i down load their application and run their code i need my own api key. – Linda Lawton - DaImTo Oct 27 '20 at 10:53
  • @DaImTo: I saw your issue post; that's a good point, but, unfortunately, I suppose that the project developers wouldn't care much about it: only look at their README file that states their app do *download audio/video* from YouTube. This is already out of compliance with YouTube's DTOS. (Disclaimer: didn't looked into the source code to see whether downloading actually happens or not.) – stvar Oct 27 '20 at 10:56