Live data from Hacker News

DuckDuckGo browser seemingly sends domains a user visits to DDG servers

github.com

431–440 of 531 posts

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#431

There's an interesting disease showing up here in the responses. I accept DDG's statement that this is about a favicon and that they "do not collect or share any personal information", and despite that, I also agree with others that DDG should be on the safe side and just stop doing this small thing. It's just the safer and more moral thing to do (So DDG, as many are suggesting, plz stop doing it. Today is good). But…

[deleted]

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#432
post #338

Earlier quoted context omitted.

I think what angered people was actually that a company saying to hold privacy high was simply refusing to change something after a mistake was pointed out and instead kept on defending it with a technical argument, which makes no sense at all. The reaction would have been actually a lot different if someone from the company admitted the mistake and promised it will be changed. Update: Gabriel Weinberg has promised t…

Yeah people burnt witches in the past ... If they are confident that this feature has no privacy implications they are right to defend the point, despite what people say or think People don't run DDG, the company People can use another search engine if they want I'll keep using DDG anyway

DDG can do what they want and people can as a result publicly state their opinions on it. Freedom goes both ways.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#433
post #427

Earlier quoted context omitted.

It's a little confusing to see 2 accounts, with very different usernames (epi0Bauqu and yegg), that appear to be posting as Gabriel Weinberg . Are these both legitimate? And if they are, what's the reason for two of them?

Yeah that's my bad. epi0Bauqu is my original account, but since no one knew who I was under that account I, some years later, made the yegg account and I try to post from there. The issue here is I logged in to post the comment, and then switched to my laptop where I was already logged in this other account.

Good to know, I just wanted to be sure that someone wasn't attempting an impersonation.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#434
post #421

There's an interesting disease showing up here in the responses. I accept DDG's statement that this is about a favicon and that they "do not collect or share any personal information", and despite that, I also agree with others that DDG should be on the safe side and just stop doing this small thing. It's just the safer and more moral thing to do (So DDG, as many are suggesting, plz stop doing it. Today is good). But…

Oh, please. There's a million threads on HN complaining about Google and Facebook. Doesn't even matter if they did something, any post will still have those comments. You can't consider the proportionality of the response by just one thread. It's really quite amazing that when a company that's hitched it's brand entirely to privacy first commits a big privacy faux pas, hides it for a year, and then doubles down on it…

It's because DDG has been shilling on HN for quite a while.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#435
post #387

Earlier quoted context omitted.

> But... the reaction here is "they made a mistake, let's pile on like kids in a playground" It's not one mistake, but several. Other then the initial mistake there is also the sloopy reaction and the fact they just closed the issue without bothering to fix it. And this was 1 year(!) ago. Nothing changed in the meanwhile. Now someone pushed it to public and after just some hours they reopen the issue and promise to f…

Part of the point is that likely this has zero privacy implications (except potentially disclosing to someone monitoring your traffic that you are using their browser). The mistake is rather an area of improvement where they can change something that respect privacy by policy to something that respect privacy by design.

>Part of the point is that likely this has zero privacy implications (except potentially disclosing to someone monitoring your traffic that you are using their browser).

It has zero implications if you trust DDG and good privacy is not based on blind trust. Keep in mind that you also need to trust the government under which DDG acts to not require them to disclose this data, trust the government to not put black boxes in the DDG data center, trust DDG's security apparatus against external state actors, trust any rogue DDG employee to not use this data and so on.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#436
post #340

Hi all, Founder and CEO of DuckDuckGo here. I’m literally just waking up and reading the comments here. I’m new to this issue and happy to commit us to move to doing this locally in the browser and will have us move on that ASAP. That said, I want to be clear that we did not and have not collected any personal information here. As other staff have referenced, our services are encrypted and throw away PII like IP addr…

> That said, I want to be clear that we did not and have not collected any personal information here.

So, you do collect information just not the kind you would classify as 'personal information'. I wonder if my personal domain with my full name qualifies?

There is no way this feature would be created in a company built on privacy considerations.

Like, wow!

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#437
post #429

Earlier quoted context omitted.

Does Gabriel know about this? If not could you please clue him in and get some guidance because you are absolutely getting roasted here and are wrecking DDG's carefully built up reputation. I can easily see how this might seem to be a good idea to you and other DDG engineers but it goes 180 degrees against DDG's stated mission. In other words: you may be well outside your paygrade on this.

For me it does the opposite. Hearing engineers speaking off-message inspires trust, while pr-evasion and weasel speak makes me think they have something to hide.

That's nice. But in this particular case the engineer says things that I know for a fact are not in line with DDG's mission statement so even if he speaks off-message he's actually destroying that trust. There is nothing about @yegg's response that strikes me as weasel speak, it is the content that is different and exactly where it matters: privacy first.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#438
post #340

Hi all, Founder and CEO of DuckDuckGo here. I’m literally just waking up and reading the comments here. I’m new to this issue and happy to commit us to move to doing this locally in the browser and will have us move on that ASAP. That said, I want to be clear that we did not and have not collected any personal information here. As other staff have referenced, our services are encrypted and throw away PII like IP addr…

Good. Thank you.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#439

There's an interesting disease showing up here in the responses. I accept DDG's statement that this is about a favicon and that they "do not collect or share any personal information", and despite that, I also agree with others that DDG should be on the safe side and just stop doing this small thing. It's just the safer and more moral thing to do (So DDG, as many are suggesting, plz stop doing it. Today is good). But…

I disagree, or maybe we read different responses, but the ones I read where more critical of how (a) ddg (employee) handled this. Didn't see anyone claim that this was on a google-level of bad, more like pointing out that google started out as a small company wanting to "do no evil", but slowly turned into what it is today. Is it really that weird that people are worried that this might be the first of many small ste…

I didn't have to go through the posted link for long to find people reacting as though this was more than a slippery slope issue:

> But instead to react professionally and contritely you made it worse to stamp on the shards to make sure no useful piece of trust will survive.

> I've just de-installed the Duckduckgo app and also won't be using their search engine anymore. Trust is lost. Their CEO can put his statement where the sun doesn't shine.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#440

Earlier quoted context omitted.

> not as big of an issue as people here make it out to be. Please refrain from speaking for others without being asked to.

I don’t think that line is speaking for others. It is characterizing what others are actually saying .

Exactly. Everyone should decide for themselves how big of an issue it is for them and not one person who just shrugs it off. That person made their statement sound like a universal fact.
Post reply on HN