Live data from Hacker News

Duck Duck Go: Illusion of Privacy (2013)

etherrag.blogspot.com

41–50 of 128 posts

Re: Duck Duck Go: Illusion of Privacy (2013)

#41
post #7

Recently I have been using the free and open source Searx more and more (admittedly mostly using the !searx shortcut from DDG). Results seem better than DDG sometimes. Would be interesting to try and host my own instance or write something that picks a random public instance. https://asciimoo.github.io/searx/

Along that same line is YaCy.

https://yacy.net/en/index.html

Re: Duck Duck Go: Illusion of Privacy (2013)

#42

If you're worried that DDG may log your IP you can simply use it with the Tor Browser (it's the default search engine) or use their onion service ( https://3g2upl4pq6kufc4m.onion/ ) for increased security and anonymity.

Tor is far from perfect and there are several ways in which one could connect traffic at some endpoint with a user at a specific IP. Do not rely on Tor if you really want anonymity.

Tor offers a layer of protection. It is possible to stay anon on Tor.

Re: Duck Duck Go: Illusion of Privacy (2013)

#43
post #16

Earlier quoted context omitted.

Solving the problem with technology is 1000000 times easier than solving it from the "social" side.

Sure, if you're a fairly affluent and educated hacker news reader. But there are far more people who I routinely work with who struggle with the concept of a password but need to use the internet to apply for work, register for disability, social security, communicate with family, etc. Do those people deserve less privacy?

Nom they deserve the same privacy. I wish there was a solution for them, but I don't think there is.

Better software and newer generations that know how to use them will, however, come before anyone can make a government that respects his population.

Re: Duck Duck Go: Illusion of Privacy (2013)

#44
post #42

Earlier quoted context omitted.

Tor is far from perfect and there are several ways in which one could connect traffic at some endpoint with a user at a specific IP. Do not rely on Tor if you really want anonymity.

Tor offers a layer of protection. It is possible to stay anon on Tor.

> It is possible to stay anon on Tor.

That is an extremely dangerous statement to make and one I do not agree with.

Keep in mind that:

- you will have to trust that a large chunk of the nodes is not in the hands of someone that you count as your enemy

- that even if your enemy is not in charge of a substantial part of the network they may still be monitoring entry and egress and that that alone can be enough to figure out who is talking to who

- that any data present at egress that can be intercepted might still reveal who you are

So no, Tor is not 100% secure and it is very well possible that even if you use Tor your identity will be connected with some activity or even all of your activity while using the network.

Re: Duck Duck Go: Illusion of Privacy (2013)

#45
post #42

Earlier quoted context omitted.

Tor offers a layer of protection. It is possible to stay anon on Tor.

> It is possible to stay anon on Tor. That is an extremely dangerous statement to make and one I do not agree with. Keep in mind that: - you will have to trust that a large chunk of the nodes is not in the hands of someone that you count as your enemy - that even if your enemy is not in charge of a substantial part of the network they may still be monitoring entry and egress and that that alone can be enough to figur…

You didn't actually disagree with your parent comment. It is possible to be anonymous on TOR. It does not come for free.

Re: Duck Duck Go: Illusion of Privacy (2013)

#47
post #5

Most of the points is arguing that NSA could compel the company Duck Duck Go, Inc to install equipment and then forbidding the company from disclosing that fact. Doing so does carry quite a bit of political risk. There have been quite a few lawsuits from EFF and ACLU in regard to do so, and as the comment from CEO of Duck Duck Go says in the comment thread, all existing cases has been about turning over records. Goin…

>Most of the points is arguing that NSA could compel the company Duck Duck Go, Inc to install equipment and then forbidding the company from disclosing that fact.

You don't need to do anything like that. DDG doesn't crawl the web itself, it uses API providers like Bing (Microsoft/NSA) and Yandex (Russian/FSB). They're legally required to disclose that on their site.

It's possible to identify people solely through anonymised credit card transactions[0] so doing the same for search results is pretty much the same.

DDG isn't private, it just gives the illusion of privacy, same as TOR. That said though if you're a high profile target then there's much more direct means to track what you're searching.

[0]http://www.sciencemag.org/lookup/doi/10.1126/science.1256297

Re: Duck Duck Go: Illusion of Privacy (2013)

#48
post #34

Earlier quoted context omitted.

I'm not sure if they really need to compel DDG in the first place. I know if I was a three letter agency, I'd start a "secure" service like DDG myself as kind of a honeypot. Not that I'm saying that such an agency is actually behind DDG -- I have no way of knowing. But I would be very surprised if a large number of services promising "security" and "privacy" weren't run by such agencies or their agents. That's why I…

While that is always possible, I think its more plausible that they then simply buy out key companies rather than found a bunch of new companies in hope that one will succeed. The question then is, what is the likelihood that NSA is the secret owner and operator of Microsoft, Apple or Yahoo, which each would likely be the cost effective choice if one wanted access to all search queries done on the Internet. Independe…

"I think its more plausible that they then simply buy out key companies rather than found a bunch of new companies in hope that one will succeed."

How many new search engines were focusing on privacy and security as their main differentiator from the competition?

I know of only one: DDG

Re: Duck Duck Go: Illusion of Privacy (2013)

#49

Earlier quoted context omitted.

> It is possible to stay anon on Tor. That is an extremely dangerous statement to make and one I do not agree with. Keep in mind that: - you will have to trust that a large chunk of the nodes is not in the hands of someone that you count as your enemy - that even if your enemy is not in charge of a substantial part of the network they may still be monitoring entry and egress and that that alone can be enough to figur…

You didn't actually disagree with your parent comment. It is possible to be anonymous on TOR. It does not come for free.

Well, if you want to trust your anonymity to luck or not being monitored then yes, you can be anonymous on Tor. But that's little comfort. It's possible to cross a highway blindfolded too. But it isn't smart to do so and it is even less smart to assume that it will always work just because you can't see the danger with your silly blindfold on.
Post reply on HN