Live data from Hacker News

DuckDuckGo browser seemingly sends domains a user visits to DDG servers

github.com

71–80 of 531 posts

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#71
seems like the ticket author found this by reading code (presumably was grepping for duckduckgo.com URLs)

this would never happen with a consumer-facing product from apple or google; someone would have to MITM their whole OS to discover phone-home

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#72

Earlier quoted context omitted.

I guess the problem is when you want to quickly provide a favicon with the search result (beit in the omnibar or actual search page), as you're typing and results are being displayed you cannot send off a request to the site, wait for HTML html to finish up downloading, send off a request to the manifest if its defined for multiple sites at once. On a technical level of course its doable but in reality it's a complet…

Oh, this is for putting an icon next to search results? Yeah, that changes the calculus considerably. I thought this was about showing the favicon in the browser for a site the user visits (per the issue title). In that case, yeah, I don't think the icons are necessary to show at all...

I feel like the only user benefit is to see the favicons of sites you are familiar with, so caching those locally after you visit sites is probably good enough.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#73

I have a hard time understanding the problem. The favicon is acquired from DDG servers for the result you've just retrieved from DDG servers. How is this leaking anything? What additional privacy would you gain from getting the favicons from the domains directly of search results delivered by DDG?

This is the DDG mobile browser app, NOT the DDG search engine.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#74
post #51

Earlier quoted context omitted.

Why ungoogled-chromium over Firefox?

Faster + less bloat

Disagree on most points, actually:

>Faster, less bloat

Stock Firefox doesn't actually have that much bloat, and it's not noticeably slower than Chrome on reasonably modern hardware (i.e.: most page loads are near-instant, same as in Chrome on a good connection).

>Extension support for Chromium is way better too

Until Google decides that your extension is unworthy of being in their store. This notably happened with Pushbullet quite recently: https://news.ycombinator.com/item?id=23168874

... Until Google inexplicably restored it a few days later, but not before lots of accusations were thrown around.

---

IMO it's also worth noting that ungoogled-chromium is (obviously) an unofficial fork of Chromium. Google may at any time change Chromium so substantially as to either require Google integration at some fundamental level for even the most basic functionality, causing too much work for such a low-profile effort to continue, or just make Chromium closed-source. With Firefox, that risk doesn't exist because of the business motivations of the company that develops it.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#75

Formerly worked with DuckDuckGo My advice: Install ungoogled-chromium: https://github.com/Eloston/ungoogled-chromium Install these extensions: https://github.com/gorhill/uBlock https://github.com/ilGur1132/Smart-HTTPS There is also a Chromium extension that lets you install from Chrome Web Store: https://github.com/NeverDecaf/chromium-web-store Set duckduckgo.com as your default search engine with a blank home page.…

ForwardEmail is a great service, thanks for making it!

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#76

EDIT: I didn't notice that this topic was about the DDG browser (which I didn't know existed) and responded assuming this was about the site/extension. For a browser, yes, a client-side solution is possible and probably preferable. Please check and upvote other comment trees. This makes sense to me and is not alarming. Getting favicons actually is difficult to do robustly; many applications and websites use Google's…

"This is not to say that DDG is perfect: links you click do seem to be redirected through a /l/ page on their domain ..." I am surprised the user is not complaining about this instead of the favicons. Their privacy policy goes on about the privacy implications of Referer headers and instead of calling out browsers for sending Referer by default, they instead give themselves power to record all the user's clicked resu…

Unable to reproduce. Links appear to be plain links and no JS intercepts clicks.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#77
post #52

DuckDuckGo staff here. As mentioned in the linked page, the purpose of the request is to retrieve a website's favicon so that it can be displayed in certain places within the app or on the results page. We use an internal favicon service because it can be complicated to locate a favicon for a website. They can be stored in a variety of locations and in a variety of formats. The service understands these edge cases an…

How can users turn this off?

Route icons.duckduckgo.com to null.

Sidenote: The more I use pi-hole the more I realise how essential it is!

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#78

Earlier quoted context omitted.

An auto-suggestion is not a redirect. Also that just makes me trust them more – they are the only browser vendor that are trying to find business models that don't involve selling my data or selling out to someone who does.

The issue is that nothing is as pure as ungoogled-chromium is right now. I've also felt that Brave was slow, and not best for developers. As a power user I'm very biased, so Brave may work better for folks that are not as technically skilled and have no idea how to install from GitHub/brew/etc. Edit: I feel it is slow because it has extra bloat added. Like I said, take my comments here with a grain of salt because I'…

> I've also felt

Data or stop spreading FUD. There is nothing "slow" about Brave.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#79
post #2

Very weak argument for why they do it. Using a service to retrieve a favicon? Surely there's a way to implement the same logic locally.

We had already had created this anonymous favicon service for our private search engine. In addition, doing it this way avoids another request (and potentially multiple) to the end site.

The service is private as we do not collect any personal information (e.g. IP addresses) on any requests for this or any service and the requests are all end-to-end encrypted.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#80

Formerly worked with DuckDuckGo My advice: Install ungoogled-chromium: https://github.com/Eloston/ungoogled-chromium Install these extensions: https://github.com/gorhill/uBlock https://github.com/ilGur1132/Smart-HTTPS There is also a Chromium extension that lets you install from Chrome Web Store: https://github.com/NeverDecaf/chromium-web-store Set duckduckgo.com as your default search engine with a blank home page.…

ForwardEmail is a great service, thanks for making it!

Thanks! I'm rolling out the following within probably the next 7 days:

- All new load balanced infrastructure - Browser extension + API wrapper - Support for pixel tracking blocker (opt-in checkbox or TXT setting) - Smart alerting - Globby/regex support

If you follow my Twitter or the GitHub releases you will get updates.

Post reply on HN