Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

DuckDuckGo browser seemingly sends domains a user visits to DDG servers

github.com

Post reply on HN
Print view View original

411–420 of 531 posts

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#411

Post by st3fan »

jan_Inkepa wrote: post #312
sillysaurusx wrote: post #278

Earlier quoted context omitted.

Yeah... the gesture is nice, but good luck extracting any code from a massive project. Might as well say “Here’s some free oil; all you have to do is dig for it.” Unlike oil, this might not be worth the excavation. It’s a bit telling that they linked to the GitHub repositories rather than specific lines of code they were talking about.

Looking at the iOS project linked, https://github.com/mozilla-mobile/firefox-ios/blob/76faae8c6... , other than being written swift, it looks pretty self-contained/ok?

There is also a content script I think and storage for these icons and their meta data. It is probably less generic on iOS than on Android but should be fairly simply to take some big chunks for reuse.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#412

Post by pschastain »

MfromB123456 wrote: post #399
yegg wrote: post #340

Hi all, Founder and CEO of DuckDuckGo here. I’m literally just waking up and reading the comments here. I’m new to this issue and happy to commit us to move to doing this locally in the browser and will have us move on that ASAP. That said, I want to be clear that we did not and have not collected any personal information here. As other staff have referenced, our services are encrypted and throw away PII like IP addr…

Why do you develop features without considering privacy in the first place? Every developer on earth could have told you, that your favicon service is potentially violating users privacy. One could guess you don't know much about how to keep users privacy. Other guess would be, you implemented this service that way deliberately.

Completely over-looked the 3rd - that they're human and made an honest mistake that they're attempting to rectify.

But from your attitude I'm guessing that think you've never made a mistake...

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#413

Post by ryuukk_ »

yegg wrote: post #340

Hi all, Founder and CEO of DuckDuckGo here. I’m literally just waking up and reading the comments here. I’m new to this issue and happy to commit us to move to doing this locally in the browser and will have us move on that ASAP. That said, I want to be clear that we did not and have not collected any personal information here. As other staff have referenced, our services are encrypted and throw away PII like IP addr…

liar

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#414

Post by christophilus »

throwaway_pdp09 wrote: post #313

There's an interesting disease showing up here in the responses. I accept DDG's statement that this is about a favicon and that they "do not collect or share any personal information", and despite that, I also agree with others that DDG should be on the safe side and just stop doing this small thing. It's just the safer and more moral thing to do (So DDG, as many are suggesting, plz stop doing it. Today is good). But…

> There's no measure of proportion in the responses

Man. You just described 2020.

Anyway, I’m now using the DDG browser, which until today, I didn’t know existed. I think DDG will do the right thing, ultimately.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#415

Post by fredoliveira »

MfromB123456 wrote: post #402
chrispauley wrote: post #365

Earlier quoted context omitted.

This response validates my trust in DDG as has happened so many times before. Seriously cool company you've built here.

Really, just a response, saying everything is ok, validates your trust? Bought some wirecard stocks latly?

Creating a throwaway account to disparage a particular point of view is also questionable, no?

At what point did we stop taking people's word and commitment as valid? Sure, I too want to see proof that they are doing the right thing here (because I don't understand the design decisions that led to the creation of that service in the first place), but because these changes are not immediate, this statement does at least answer some of the questions I personally had (Like "will this be fixed"? "when"?).

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#416

Post by MfromB123456 »

pschastain wrote: post #412
MfromB123456 wrote: post #399

Earlier quoted context omitted.

Why do you develop features without considering privacy in the first place? Every developer on earth could have told you, that your favicon service is potentially violating users privacy. One could guess you don't know much about how to keep users privacy. Other guess would be, you implemented this service that way deliberately.

Completely over-looked the 3rd - that they're human and made an honest mistake that they're attempting to rectify. But from your attitude I'm guessing that think you've never made a mistake...

Sure humans make errors, but this service is for a privacy-concered-company like you or me walking over a red traffic light without looking to the left or right and beeing crashed by the biggest Truck one can imagine. Anyone who belives in an error is beyond help.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#417

Post by vikramkr »

hanspeter wrote: post #394
throwaway_pdp09 wrote: post #342

Earlier quoted context omitted.

Google: stripmines everything. Would collect your soul if it could[0]. DDG: favicon fuckup. And you can't see the difference? > Why use DDG at all, if they're not safely protecting your private data 100%? Says the man who's willingly chosen to spunk his real name, the company he works for, his position within said company, his photograph and I'm sure I could find much else besides, over the web. Then asks for 100% pr…

I don't know how the rules are here about getting personal, but aside from making other users be uncomfortable you're missing the point completely. I don't personally feel a need for a high level of privacy, but I can understand other people who do. And if they are using DuckDuckGo for that purpose, this issue would seem like a big thing. If you served a dish for a vegan with 5 % meat in it, you wouldn't justify it b…

I'm fairly certain that personal attacks arent allowed on this platform...

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#418

Post by TLightful »

nsomaru wrote: post #331
throwaway_pdp09 wrote: post #313

There's an interesting disease showing up here in the responses. I accept DDG's statement that this is about a favicon and that they "do not collect or share any personal information", and despite that, I also agree with others that DDG should be on the safe side and just stop doing this small thing. It's just the safer and more moral thing to do (So DDG, as many are suggesting, plz stop doing it. Today is good). But…

Google don’t sell privacy. Anyways, what’s this got to do with Google? “Privacy browser violates basic privacy to do something useless” is actually ridiculous. And the response is even more ridiculous! How does literally every single other browser do it? I’m disappointed because I put my reputation on the line to recommend DDG to users based on...privacy. But here we see they actually do not hold true to their stated…

>Google don’t sell privacy.

LOOOOOOOOOOOOOOOOOL

Thanks, made my day

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#419

Post by kjaftaedi »

abc-xyz wrote: post #203
dabbernaught420 wrote: post #104

Earlier quoted context omitted.

In my view, anyone who trusts ddg is a bit silly - founder has a bad track record on user privacy. Founded Names Database[1], a social media website designed to collect user information as aggressively as possible, before selling all the information to classmates.com. [1] https://en.wikipedia.org/wiki/Names_Database

Also worth mentioning they're closed-source, US-based and for-profit. Why exactly do people trust them? Simply because they write a few articles/ads saying "privacy is important"? If you're willing to sacrifice search quality for privacy, as in switching from Google to DuckDuckGo, then you might as well take a step further and switch from Google to Searx/Ask.Moe.

Never heard of searx .. attempted to use it.

I couldn't figure out which searx instance to use and found no good way of knowing who to trust, most of the engines i used were broken and telling me to find another searx engine.

It looks like it's pulling most of its info from duckduckgo anyway.

Personally I'd rather trust a known entity than an unknown entity anyday, especially when the unknown entity is slow, complicated, buggy and broken in many places.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#420

Post by minitech »

anyzen wrote: post #368
nsomaru wrote: post #331

Earlier quoted context omitted.

Google don’t sell privacy. Anyways, what’s this got to do with Google? “Privacy browser violates basic privacy to do something useless” is actually ridiculous. And the response is even more ridiculous! How does literally every single other browser do it? I’m disappointed because I put my reputation on the line to recommend DDG to users based on...privacy. But here we see they actually do not hold true to their stated…

> Google don’t sell privacy. Of course they do. They sell users' privacy for advertising dollars. I am not defending DDG here, as they are clearly in the wrong - but let's not pretend that their error is even close to what Google does.

It’s an explanation of why complaints are being directed at DuckDuckGo (privacy is their raison d’être) even when Google is worse (privacy is not their product – or, in wording that’s more ambiguous in isolation, Google don’t sell privacy).
Post reply on HN