151–160 of 213 posts
I like DDG, but has it ever mentioned how this TRACKING data is used? http://duckduckgo.com/l/?kh=-1&uddg=http%3A%2F%2Fwww.dmv.org... (every time you click on a search result you actually click on a link like this,which redirects you to the actual page) Is it just for pagerank?
It's not safe to assume the NSA doesn't log DDG searches. Look at the PRISM logo - it's a beam splitter. Read the slide, look at the "Upstream" portion. http://commons.wikimedia.org/wiki/File:Upstream_slide_of_the... They're logging all your URLs and headers. How much are you willing to bet they can't decrypt https? I dont understand all the hubbub _is focused solely_ on direct server access (the bottom half of the s…
There's no question that they're monitoring upstream traffic. In fact they may still be doing the old ECHELON trick in which the US eavesdrops on non-Americans, the rest of the world spies on Americans (among others) - and then everyone swaps the data received. But in the light of the PRISM documents it's even more likely than it was before that the NSA doesn't have the ability to decrypt HTTPS, or at the minimum tha…
Earlier quoted context omitted.
This is most likely that Google has more user behavior data than DDG. If enough people use DDG and click on the StackExchange link for that query (or similar queries), DDG will be able to get that to the top. On the other hand, did DDG just use Bing API, and only Blekko crawls the web? Or do I get my search engines mixed up?
That's correct, blekko does have our own multi-billion page crawl and index. And we're private, too. Every web search engine depends on one of these indexes: google, bing, blekko, yandex, baidu.
Earlier quoted context omitted.
"How much are you willing to bet they can't decrypt https?" I'd bet quite a bit, though not "my life", that they do not have a generalized "read everything" ability for all forms of SSL. They may have what cryptographers would call "a crack", but that's a low bar, and doesn't prove they have a practical attack. However, DDG is currently using 128-bit RC4, which is very weak. [1] I wouldn't care to bet anything that t…
OTOH, if they can get a CA - any CA - to cooperate, they can MITM anyone without having to break SSL.
For internal (or routed through) US traffic - while Verizon's lack of interest in protecting customer data is probably shared by major backbone providers - I _strongly_ doubt even the NSA has enough gear hanging off backbones to actively MITM any significant proportion of the firehose that'd represent. Even the AT&T "secret room" probably doesn't house enough gear to be able to create fake(signed)certs and MITM every SSL connection for millions or more simultaneous users browsing every https site under the sun.
Having said that, I'd bet good money the _do_ target specific SSL traffic - has anyone checked the SSL connections to TOR entry and exit points recently? That'd be one spectacularly obvious path to try "speculative MITM attacks".
It's not safe to assume the NSA doesn't log DDG searches. Look at the PRISM logo - it's a beam splitter. Read the slide, look at the "Upstream" portion. http://commons.wikimedia.org/wiki/File:Upstream_slide_of_the... They're logging all your URLs and headers. How much are you willing to bet they can't decrypt https? I dont understand all the hubbub _is focused solely_ on direct server access (the bottom half of the s…
While I haven't heard explicitly about Amazon being part of PRISM, the duckduckgo ips all point to amazon's EC2 platform.
Earlier quoted context omitted.
That's correct, blekko does have our own multi-billion page crawl and index. And we're private, too. Every web search engine depends on one of these indexes: google, bing, blekko, yandex, baidu.
Don't forget Gigablast, Procog, Yioop and Samuru which also have their own crawled index.
Earlier quoted context omitted.
> Also, DDG's results compared to a year ago are night-and-day. Still looks 2nd rate. I replicated one of my last searches (learning rails): rails find if element is in array First hit on google is the stackexchange answer with .include? (which I was spacing-out on) DDG yields the Array docs, which is correct but is a helluva lot of info when I'm looking for a concise answer.
This is most likely that Google has more user behavior data than DDG. If enough people use DDG and click on the StackExchange link for that query (or similar queries), DDG will be able to get that to the top. On the other hand, did DDG just use Bing API, and only Blekko crawls the web? Or do I get my search engines mixed up?
Earlier quoted context omitted.
There's a straightforward way to make sure your email is always encrypted in transit: encrypt it before you send. No promises about making sure your email can always be read by the recipient, though...
And here's the problem. Email needs to be able to be read by the recipient, so until a significant portion of email recipients can handle encrypted mail - the NSA doesn't need to attack my encrypted email storage, because enough of my correspondence ends up in cleartext in gmail/hotmail/yahoo et al. This is a hard one to solve. GPGmail seems to get broken with every Mac Mail.app release. Vast numbers of people rely o…
If I implement this, will I become famous?