Live data from Hacker News

DuckDuckGo browser seemingly sends domains a user visits to DDG servers

github.com

211–220 of 531 posts

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#211

Earlier quoted context omitted.

I appreciate you answering, probably knowing you'd face some negative feedback. Saying "we should trust you, it's for a good reason" is what google and everyone else says. You'll be better off if you just end this. The loss of the fav icon is less important than keeping your credibility.

> is what google and everyone else says. Do Chrome, Firefox, or Safari do this? I would assume they do it on-device.

Chrome, according to my understanding, hardcodes a few favicon URLs for builtin search engines, and caches everything else on site visit. There's SQLite3 database named Favicons in your profile directory (e.g. on macOS it's ~/Library/Application Support/Google/Chrome//Favicons). Here's the schema:

  CREATE TABLE meta(key LONGVARCHAR NOT NULL UNIQUE PRIMARY KEY, value LONGVARCHAR);
  CREATE TABLE icon_mapping(id INTEGER PRIMARY KEY,page_url LONGVARCHAR NOT NULL,icon_id INTEGER);
  CREATE TABLE favicons(id INTEGER PRIMARY KEY,url LONGVARCHAR NOT NULL,icon_type INTEGER DEFAULT 1);
  CREATE TABLE favicon_bitmaps(id INTEGER PRIMARY KEY,icon_id INTEGER NOT NULL,last_updated INTEGER DEFAULT 0,image_data BLOB,width INTEGER DEFAULT 0,height INTEGER DEFAULT 0,last_requested INTEGER DEFAULT 0);
  CREATE INDEX icon_mapping_page_url_idx ON icon_mapping(page_url);
  CREATE INDEX icon_mapping_icon_id_idx ON icon_mapping(icon_id);
  CREATE INDEX favicons_url ON favicons(url);
  CREATE INDEX favicon_bitmaps_icon_id ON favicon_bitmaps(icon_id);
Related source code: https://github.com/chromium/chromium/blob/master/components/...

I haven't looked at Firefox and Safari but I assume they do something similar.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#212
post #52

DuckDuckGo staff here. As mentioned in the linked page, the purpose of the request is to retrieve a website's favicon so that it can be displayed in certain places within the app or on the results page. We use an internal favicon service because it can be complicated to locate a favicon for a website. They can be stored in a variety of locations and in a variety of formats. The service understands these edge cases an…

I appreciate you answering, probably knowing you'd face some negative feedback. Saying "we should trust you, it's for a good reason" is what google and everyone else says. You'll be better off if you just end this. The loss of the fav icon is less important than keeping your credibility.

This is the correct answer. We all remember "Do No Evil" and have been around long enough to see that sentiment die. Don't go down this path.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#213

Earlier quoted context omitted.

How can users turn this off?

Route icons.duckduckgo.com to null. Sidenote: The more I use pi-hole the more I realise how essential it is!

Are you able to block youtube ads using pi-hole?

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#214

Earlier quoted context omitted.

A common fallacy I see, though I don't know if there's a name for it, is assuming that just because what someone is doing can be described by the name of a fallacy that what the person is doing is fallacious.

> Argument from fallacy is the formal fallacy of analyzing an argument and inferring that, since it contains a fallacy, its conclusion must be false. It is also called argument to logic (argumentum ad logicam), the fallacy fallacy, the fallacist's fallacy, and the bad reasons fallacy. https://en.wikipedia.org/wiki/Argument_from_fallacy

So what does any fallacy tell me then? Especially the fallacy fallacy? If it does invalidate the invalidation of fallacies it is in itself untrue...bz...recursion error..bz stack overflow

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#215

Seems a bit much, but k-anonymity could work here. Hash the domain, take the prefix, get a batch of favicons back. They won’t know which you visited, but still get the benefits of consistent favicon support.

And how would they get the "batch of favicons" in the first place?

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#216

Earlier quoted context omitted.

In my view, anyone who trusts ddg is a bit silly - founder has a bad track record on user privacy. Founded Names Database[1], a social media website designed to collect user information as aggressively as possible, before selling all the information to classmates.com. [1] https://en.wikipedia.org/wiki/Names_Database

Also worth mentioning they're closed-source, US-based and for-profit. Why exactly do people trust them? Simply because they write a few articles/ads saying "privacy is important"? If you're willing to sacrifice search quality for privacy, as in switching from Google to DuckDuckGo, then you might as well take a step further and switch from Google to Searx/Ask.Moe.

As a DDG user I don't feel like I'm sacrificing anything. Two sets of results are better than one (I can see Google results by adding !g, which I do less than once per day on average) and, ironically, DDG bangs are the easiest way to use even Google services like Translate and Scholar.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#217
post #213

Earlier quoted context omitted.

Route icons.duckduckgo.com to null. Sidenote: The more I use pi-hole the more I realise how essential it is!

Are you able to block youtube ads using pi-hole?

Sadly, not anymore - used to be the case quite a while ago, but not today anymore as the ads come from the same domains the videos are streamed from.

Those simpler popover-ads which can be closed clicking an X in the upper right corner still are blocked tho...

Spilling my secret tho (and YouTube execs hate me for it!): i block YouTube in my mind and only rarely go to it if i really need to watch a video (which, for me, is rarer than i ever thought it'd be).

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#218
post #213

Earlier quoted context omitted.

Route icons.duckduckgo.com to null. Sidenote: The more I use pi-hole the more I realise how essential it is!

Are you able to block youtube ads using pi-hole?

It's complicated and a quickly moving target. I use pi-hole plus local browser blocking like uBlock origin.

Re: DuckDuckGo browser seemingly sends domains a user visits to DDG servers

#219
post #52

DuckDuckGo staff here. As mentioned in the linked page, the purpose of the request is to retrieve a website's favicon so that it can be displayed in certain places within the app or on the results page. We use an internal favicon service because it can be complicated to locate a favicon for a website. They can be stored in a variety of locations and in a variety of formats. The service understands these edge cases an…

[deleted]
Post reply on HN