Live data from Hacker News

PRISM fears give private search engine DuckDuckGo its best week ever

venturebeat.com

31–40 of 213 posts

Re: PRISM fears give private search engine DuckDuckGo its best week ever

#32

Not that this is going to help. The NSA is probably tapping the fiber at the ISP's backbone in front of Google. Why do you think it is called PRISM? It's probably named for the way they are splitting the fiber and recording everything.

In the case of DDG, that would be difficult. DDG uses SSL. If you make a mistake and type "duckduckgo.com" instead of "https://duckduckgo.com", it will automatically redirect you to the secure page. Unfortunately, that redirect gives a man-in-the-middle and opportunity to hijack your connection, even with SSL; however, that's tricky enough that its hard to imagine anyone pulling it off without ever being noticed.

Re: PRISM fears give private search engine DuckDuckGo its best week ever

#33
post #8

Why would anyone believe that DuckDuckGo isn't already penetrated?

Why would anyone believe his own computer isn't already penetrated?

Why bother infiltrating PCs when you can monitor the traffic?

Re: PRISM fears give private search engine DuckDuckGo its best week ever

#35

I ceased using Google search except as a last resort when this story broke, and I had no idea what I had been missing out on with DDG: Excellent keyboard navigation . Also, DDG's results compared to a year ago are night-and-day. It seems to listen to my keywords better than Google did too, a growing annoyance I had. If you haven't, you really should try out DDG for a week.

I second the observation that the results have improved considerably over the last year. There are still holes where I have to resort to using the !g option and use google (non-English searches would be the most prominent example) but I've set all my default search options to DDG and haven't regretted it!

Re: PRISM fears give private search engine DuckDuckGo its best week ever

#37
post #8

Why would anyone believe that DuckDuckGo isn't already penetrated?

Why would anyone believe his own computer isn't already penetrated?

"Why would anyone believe DDG isn't already penetrated?" should be read as, "Why would anyone believe that DDG isn't already penetrated and that their own computers are not already penetrated?" Your trust chain has to start somewhere.

Re: PRISM fears give private search engine DuckDuckGo its best week ever

#38

I ceased using Google search except as a last resort when this story broke, and I had no idea what I had been missing out on with DDG: Excellent keyboard navigation . Also, DDG's results compared to a year ago are night-and-day. It seems to listen to my keywords better than Google did too, a growing annoyance I had. If you haven't, you really should try out DDG for a week.

> Also, DDG's results compared to a year ago are night-and-day.

Still looks 2nd rate. I replicated one of my last searches (learning rails): rails find if element is in array

First hit on google is the stackexchange answer with .include? (which I was spacing-out on)

DDG yields the Array docs, which is correct but is a helluva lot of info when I'm looking for a concise answer.

Re: PRISM fears give private search engine DuckDuckGo its best week ever

#39
post #25

Glad to see them succeeding, but personally the privacy of my web searches doesn't bother me - as long as they aren't being passed along with personally identifying information. I'm far more worried about emails, messaging, video, storage etc. Can someone explain to me (or point me in the direction of something that explains) what Google and Bing store in terms of tracking when you are not logged in? Obviously you ca…

TOR is not that safe. If the exit node is compromised you’re f*cked for good. As for Google the thing is that they’re also an advertising network so basically they track you all around the web.

If the exit node is compromised you’re fcked for good.*

It's not that simple, otherwise there wouldn't be any value in using an Onion architecture. Assuming you're using HTTPS, which every decent search engine supports, they either also need to create a fake but acceptable certificate for the domain, or to also control entry nodes and match the entering requests with the exit ones.

The NSA might be able to do it, but it's not just a matter of controlling an exit node.

Re: PRISM fears give private search engine DuckDuckGo its best week ever

#40
post #10
post #8

Why would anyone believe that DuckDuckGo isn't already penetrated?

Because look at the logo and the design, that duck is cool! And it says it's private! /s

If ducks were the secret to being cool, Aflac would be cool by now ;)

https://en.wikipedia.org/wiki/Aflac

Post reply on HN