Live data from Hacker News

DuckDuckGo browser seemingly sends domains a user visits to DDG servers

github.com

421–430 of 531 posts

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#421

There's an interesting disease showing up here in the responses. I accept DDG's statement that this is about a favicon and that they "do not collect or share any personal information", and despite that, I also agree with others that DDG should be on the safe side and just stop doing this small thing. It's just the safer and more moral thing to do (So DDG, as many are suggesting, plz stop doing it. Today is good). But…

Oh, please. There's a million threads on HN complaining about Google and Facebook. Doesn't even matter if they did something, any post will still have those comments. You can't consider the proportionality of the response by just one thread.

It's really quite amazing that when a company that's hitched it's brand entirely to privacy first commits a big privacy faux pas, hides it for a year, and then doubles down on it not being a problem, you have somehow managed to turn the top voted thread to a discussion on the failings of other companies instead. Bravo.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#422
post #369

Earlier quoted context omitted.

I've already posted this somewhere else, but I'll copy it here again as well: It's not immediately obvious whether it is more privacy preserving if the client automatically makes a request to each site in the search results while scrolling through the results, especially since you're already trusting DDG when performing the search. Maybe this should be an opt-in rather than an opt-out feature? All in all its really n…

> not as big of an issue as people here make it out to be. Please refrain from speaking for others without being asked to.

I don’t think that line is speaking for others. It is characterizing what others are actually saying.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#423
post #340

Hi all, Founder and CEO of DuckDuckGo here. I’m literally just waking up and reading the comments here. I’m new to this issue and happy to commit us to move to doing this locally in the browser and will have us move on that ASAP. That said, I want to be clear that we did not and have not collected any personal information here. As other staff have referenced, our services are encrypted and throw away PII like IP addr…

Thank you, keep up the good work!

(I always knew there was a business model for privacy and I'm glad someone is working to figure it out)

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#424
post #368

Earlier quoted context omitted.

Google don’t sell privacy. Anyways, what’s this got to do with Google? “Privacy browser violates basic privacy to do something useless” is actually ridiculous. And the response is even more ridiculous! How does literally every single other browser do it? I’m disappointed because I put my reputation on the line to recommend DDG to users based on...privacy. But here we see they actually do not hold true to their stated…

> Google don’t sell privacy. Of course they do. They sell users' privacy for advertising dollars. I am not defending DDG here, as they are clearly in the wrong - but let's not pretend that their error is even close to what Google does.

Do they sell PII data ?

Because I don’t think they do.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#425
Something is not adding up. Why would you go through so much trouble and over-engineer a favicon retrieval service? Really, favicon? Since when did they become so essential?

I'm pretty sure 90% of websites provide one in a standard way. If not, just draw a letter there, or anything.

But I don't know. I think that either there is more to this story, or DDG team completely lost common sense.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#426
post #340

Hi all, Founder and CEO of DuckDuckGo here. I’m literally just waking up and reading the comments here. I’m new to this issue and happy to commit us to move to doing this locally in the browser and will have us move on that ASAP. That said, I want to be clear that we did not and have not collected any personal information here. As other staff have referenced, our services are encrypted and throw away PII like IP addr…

Thanks. What kind of process changes are you putting in place to prevent things like this from happening again?

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#427
post #340

Hi all, Founder and CEO of DuckDuckGo here. I’m literally just waking up and reading the comments here. I’m new to this issue and happy to commit us to move to doing this locally in the browser and will have us move on that ASAP. That said, I want to be clear that we did not and have not collected any personal information here. As other staff have referenced, our services are encrypted and throw away PII like IP addr…

It's a little confusing to see 2 accounts, with very different usernames (epi0Bauqu and yegg), that appear to be posting as Gabriel Weinberg . Are these both legitimate? And if they are, what's the reason for two of them?

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#428
post #427
post #340

Hi all, Founder and CEO of DuckDuckGo here. I’m literally just waking up and reading the comments here. I’m new to this issue and happy to commit us to move to doing this locally in the browser and will have us move on that ASAP. That said, I want to be clear that we did not and have not collected any personal information here. As other staff have referenced, our services are encrypted and throw away PII like IP addr…

It's a little confusing to see 2 accounts, with very different usernames (epi0Bauqu and yegg), that appear to be posting as Gabriel Weinberg . Are these both legitimate? And if they are, what's the reason for two of them?

Yeah that's my bad. epi0Bauqu is my original account, but since no one knew who I was under that account I, some years later, made the yegg account and I try to post from there. The issue here is I logged in to post the comment, and then switched to my laptop where I was already logged in this other account.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#429
post #52

DuckDuckGo staff here. As mentioned in the linked page, the purpose of the request is to retrieve a website's favicon so that it can be displayed in certain places within the app or on the results page. We use an internal favicon service because it can be complicated to locate a favicon for a website. They can be stored in a variety of locations and in a variety of formats. The service understands these edge cases an…

Does Gabriel know about this? If not could you please clue him in and get some guidance because you are absolutely getting roasted here and are wrecking DDG's carefully built up reputation. I can easily see how this might seem to be a good idea to you and other DDG engineers but it goes 180 degrees against DDG's stated mission. In other words: you may be well outside your paygrade on this.

For me it does the opposite. Hearing engineers speaking off-message inspires trust, while pr-evasion and weasel speak makes me think they have something to hide.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#430

Earlier quoted context omitted.

Completely over-looked the 3rd - that they're human and made an honest mistake that they're attempting to rectify. But from your attitude I'm guessing that think you've never made a mistake...

Sure humans make errors, but this service is for a privacy-concered-company like you or me walking over a red traffic light without looking to the left or right and beeing crashed by the biggest Truck one can imagine. Anyone who belives in an error is beyond help.

The issue was highlighted from open-source code from a company who proactively works to reduce privacy.

It seems rather reasonable to assume that in the goal of maximising privacy in search engines, it would be wise to add user-friendly and convenient features so that the alternative is appealing and does not sacrifice too much convenience.

Post reply on HN