PRISM fears give private search engine DuckDuckGo its best week ever

Post by dllthomas » Mon, Jun 17, 2013, 5:35 AM UTC

bigiain wrote: post #203

SilasX wrote: post #201

Earlier quoted context omitted.

What's the normal procedure for making a call whose output depends on a file that must be kept secret? Is there a typical OS API pattern that's seen in the various programs like ssh, scp, and so on?

I think the one of the problems is that software like GPG and OpenSSL go to a lot of trouble to make sure private keys don't hang around in memory for any longer than absolutely required - minimising the risk of having the OS preempt the executing code and write the key out to swap (or having malicious code slurp it up out of ram). The bare-metal hoop-jumping required to get that right might not be possible in the co…

Post by umsm » Tue, Jun 25, 2013, 11:15 PM UTC

babby wrote: post #147

umsm wrote: post #14

Earlier quoted context omitted.

Just because they say they don't collect your info, it doesn't mean that google doesn't get it. Look at the source of a search page and you'll notice that they include scripts directly from google.com...

Google assuredly gets info, just not from the user. There aren't any google requests from Firebug's net tab, either, so perhaps you are mistaken.