Slashdot Mirror


DuckDuckGo Denies Using Fingerprinting To Track Its Users (betanews.com)

Mark Wilson writes: Responding to a forum post that accused it of 'fingerprinting users', privacy-centric search engine DuckDuckGo says that fears are unfounded and that it is not tracking its users. The allegation was made after the Firefox extension CanvasBlocker showed a warning to users. The suggestion of fingerprinting -- gathering as much information as possible about a user through their browser to create a unique identifier that can be used for tracking -- is clearly something that would seem to sit in opposition to what DuckDuckGo claims to stand for. The company CEO says the accusation is simply wrong.

27 of 165 comments (clear)

  1. Re:Silly name by mattyj · · Score: 2, Interesting

    Because of the aforementioned not-tracking stuff? And the results are as good as Google, which is apparently a non-goofy name now?

    If you care about your privacy then you use DuckDuckGo.

  2. this is based on a forum post? by GregMmm · · Score: 5, Insightful

    So, one guy on posts on a forum a certain API is being blocked by his Firefox extension CanvasBlocker. Not that the one individual has anything showing some tracking and data gathering, he just sees an API being used. Without any real evidence what so ever. Sounds like someone wants to sow seeds of mistrust at DuckDuckGo.

  3. The problem with DuckDuckGo by OneHundredAndTen · · Score: 2, Insightful

    The problem with DuckDuckGo is that, when it comes to searching, it simply sucks. I used it as my default search engine for a week, and I had to return to Google - the results from DuckDuckGo were very mediocre. Which is a shame, for I am really sick and tired of the Google bastards (Don't Be Evil? Assholes!) but DuckDuckGo will have to improve a heck of a lot before that quality of its search results is comparable to Google's.

    1. Re:The problem with DuckDuckGo by gringer · · Score: 4, Informative

      Use "!g " in the DDG search box to initiate a google search with those terms.

      --
      Ask me about repetitive DNA
    2. Re:The problem with DuckDuckGo by BenFenner · · Score: 3, Interesting

      My experience is the exact opposite. I've been using DuckDuckGo since I moved away from AltaVista, and it has always provided me with the results I desire.

      This is just one example, but search Google for "how many stars in the solar system" and the first handful of results are not related, and the quick-answer is absolutely wrong.
      http://lmgtfy.com/?q=how+many+...

      Search DuckDuckGo for the same and you'll get the right answer in the first result.
      https://lmddgtfy.net/?q=how%20...

      As a bonus, my custom captcha uses these horrible results from Google to weed out bots (and ignorant users I'd rather not have to deal with).

    3. Re:The problem with DuckDuckGo by farble1670 · · Score: 2

      Oh, it's not the search and indexing of the internet that's hard.. I participated in building a web crawler that could index the internet if you let it run long enough

      def index(url):
          links = parse_page(url)
          for (u in links):
              index(u)

      I just wrote Google for you.

    4. Re:The problem with DuckDuckGo by lgw · · Score: 2, Insightful

      The problem with DuckDuckGo is that, when it comes to searching, it simply sucks.

      You post this every time DDG comes up, presumably b/c you're astroturfing for Google. You've never given an example, or shown anything but FUD. DDG's search results are fine.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    5. Re:The problem with DuckDuckGo by fbobraga · · Score: 3, Insightful

      results from DuckDuckGo were very mediocre

      not lately to me: I migrated from google to exclusively DDG about a year ago

  4. Re:Silly name by OneHundredAndTen · · Score: 4, Insightful

    Because of the aforementioned not-tracking stuff? And the results are as good as Google.

    In my experience they are not. Not even close. I wish I could ditch Google, but DuckDuckGo cannot (yet) fill Google's search shoes.

  5. The inevitable attack could be a good sign by Lucas123 · · Score: 5, Interesting

    Support Duckduckgo.com. I've been using it for years and have seen the amount of spam in my inbox and even social media go WAY down. We need more services like Duckduckgo.com, not fewer.

    But, perhaps the inevitable attack on them is showing some success. I'm hopeful.

  6. Re:I think browsers allowing fingerprinting by farble1670 · · Score: 2

    is something that should be disabled (by default).

    It's not a feature that can be switched off. Fingerprinting works by collecting as many attributes about the host browser as possible. This might be things like your language, browser version, installed plugins, settings, IP address, and many other things. Most of these have potential legit uses, but when combined they build a "fingerprint" of you.

    I suppose you could disable collection of some of the fingerprint components. This is however contradictory to a world where we want web apps to have the same power as "native" apps. Either web apsp are more secure than native apps, or as powerful as native apps. It's not both.

    Cool site that can show the details of your browser fingerprint:
    https://amiunique.org/

  7. Re:Silly name by ArchieBunker · · Score: 5, Informative

    They still index torrent sites while google keeps shuffling them further down the listings.

    --
    Only the State obtains its revenue by coercion. - Murray Rothbard
  8. Re:Silly name by jbmartin6 · · Score: 2

    How about Qwant? Anyone have any yea/nay votes for that as an alternative?

    --
    This posting is provided 'AS IS' without warranty of any kind, implied or otherwise.
  9. Re:Silly name by Anonymous Coward · · Score: 5, Informative

    Google search has become useless for me (search tech related issues) - too many sponsored ads and content farms.

    Duck Duck go doesn't have all the advertising, and I am getting useful results when searching for issues.

  10. Sources of DuckDuckGo's revenue by tepples · · Score: 5, Informative

    The difference is that while some other services show ads based on interests inferred from your previous viewing history, DuckDuckGo shows ads based only on the context of your search query. DuckDuckGo also adds its referral tag to Amazon product URLs in search results.

    (Source: "How Does DuckDuckGo Make Money? DuckDuckGo Business Model Explained")

  11. A canvas grab is suspicious by gweihir · · Score: 2

    It maybe, but does not need to be a tracking attempt. It should be conclusively explained and removed.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  12. Re:Follow the Money by sacrilicious · · Score: 2

    You are not paying for their service. Therefore, you are not the customer. You are the product.

    Ok, but only in the sense of being exposed to ads. If that makes me the product, then I know about the extents and times when I am said product and can make an informed choice.

    They are no different than facebook or any other 'free' thing.

    Facebook, by design, is a privacy-invading/selling ethics-free piece of shit. They sell all kinds of thing about you to people behind your back, make inferences about you that you have no idea of (and in many cases are not supportable, yet are packaged as "truths" to the buyers), and would deprive you of oxygen if they could think of a way to do so for profit. Being "free" does NOT make everything equivalent, and if your post was earnest then frankly I'm embarrassed on your behalf that you would see such a grand equivalency... wake up.

    --
    - First they ignore you, then they laugh at you, then ???, then profit.
  13. Why use !g when you can use !sp by Anonymous Coward · · Score: 4, Informative

    If you use !sp instead, you can use Startpage, which anonymizes Google search results.

  14. Re:Silly name by Rockoon · · Score: 3, Insightful

    huh? Googles boolean qualifiers havent worked in literally years

    --
    "His name was James Damore."
  15. Re:Been hearing a lot of FUD about duckduckgo... by Excelcia · · Score: 3

    Duckduckgo doesn't do their own web indexing. They purchase web indexing from many sources. Most of Duckduckgo's results are actually purchased through Bing, some is from Google. Many smaller search engines purchase and offer search results from larger entities. The fact that Google, Bing, or anyone else is selling them raw data doesn't mean that Duckduckgo is collecting information for them. None of what you are searching for makes it to Google or Bing that way.

    A bang, of which "!g" is just one (!w for wikipedia, !r is reddit, etc) is something different. It's just a quick way of getting results directly from somewhere else - a way that you can have Duckduckgo as your home page but get quick results from other places directly. Of course, when you use one and are redirected, you have no guarantees what the target site is doing with that search data. But if you are coming up dry with the results from Duckduckgo, then !g is one way to try the query to see what Google makes of it.

    My personal assessment of Duckduckgo is this. I use it directly for about 95% of my search, and for normal to moderately difficult queries, it works great. For more advanced searches, searches where there might be less signal and more noise (searches with key words that are common jargon but in the context of the search it's not the jargon I'm looking for), then I do find that Google is slightly superior at parsing the search and returning what I want to see. At times like that, when getting the result is more important to me than watching my privacy, then I'll use a !g and try Google if I come up dry on Duckduckgo. Though I find that Duckduckgo is getting better, and there have even been cases where I've gone directly to Google with something I didn't expect would work well on DDG and where I came up dry there and where DDG found me what I wanted.

  16. Re:Silly name by NormalVisual · · Score: 2

    Just because Google documents it that way doesn't mean it actually works. I just searched for "ibanez and rb-800", and it wasn't until the third result that it actually matched.

    --
    Please stand clear of the doors, por favor mantenganse alejado de las puertas
  17. I use DDG because there I can direct copy links... by fbobraga · · Score: 2

    ... and the results are, today, good as google searches - no tracking bullshit on all links (it's why I avoid using Gmail without a IMAP client too)

  18. Re:I think browsers allowing fingerprinting by Actually,+I+do+RTFA · · Score: 3, Insightful

    So a browser say wouldn't need to know the screen size?

    A browser needs to know it to render properly. A website serving it certainly doesn't. And I have no idea why it would.

    . A web app wouldn't need to know my timezone?

    Why would it? And why would a website? Why would Slashdot? Or (choose a news site)? Or Reddit?

    My browser's time (clock skew is an identifying attribute)?

    Certainly not. Unlike timezone where a webapp might need to know it, knowing time isn't something that should be communicated client-to-server ever.

    My host OS (you know, for suggesting the right download package for things)?

    This is the only time you actually suggested a use case for the data you're collecting. That said, why does it need to get reported back to the server. The whole point you're making is that the site can display it on its own. So, again, it wouldn't be usable for fingerprinting if it stayed clientside

    Again, NOT an exhaustive list. I can keep going.

    Instead of just listing features, you should explain what benefit I get out of letting that data leak out of my browser. Cause I don't see it.

    So you want to go back to the web of 1992.

    Whoa. First, I would think 2002 would be far enough back. Second, the cool stuff that happened since then are things like embedded video/audio. Or CSS advances. I'm not sure what cool stuff's been enabled by new tech since then, rather than faster pipes and the smartphone form-factor.

    --
    Your ad here. Ask me how!
  19. Re:Silly name by markdavis · · Score: 3, Informative

    >"In my experience they are not. Not even close. I wish I could ditch Google"

    You can. Just use:

    https://startpage.com/

    and get the same Google results but without the tracking.

  20. Re:Silly name by jimbo · · Score: 2

    https://duck.co/help/results/sources

    "In fact, DuckDuckGo gets its results from over four hundred sources. These include hundreds of vertical sources delivering niche Instant Answers, DuckDuckBot (our crawler) and crowd-sourced sites (like Wikipedia, stored in our answer indexes). We also of course have more traditional links in the search results, which we also source from a variety of partners, including Oath (formerly Yahoo) and Bing."

  21. Re:Been hearing a lot of FUD about duckduckgo... by Excelcia · · Score: 2

    I don't trust Google with 100% of my search traffic. I prefer to keep them as a secondary resource - I don't trust that startpage.com can have zero tracking by Google and here's why. About 75% of web sites have some sort of traffic monitoring aid or ad source that relates in some way back to Google. However Startpage.com munges Google's results, when I click on one of their links and end up on a page that has any Google presence, Google knows two things. It knows that it served up search results through Startpage.com that included that page I clicked on, it may know the referrer information (depending on how deeply Google's hooks are into that site), but it certainly knows that I ended up on that site and what my IP address is. It's not a stretch for Google's servers to piece together the exact search that took you there from start to finish. Given that it's Google's bread and butter to do this, I think it's a stretch to think they don't. So if I end up on one of the 75% of web sites where Google has some presence, then I might as well have gone to google.com and typed in the search there, since they will know just as much about me.

    Using startpage as my secondary resource rather than Google is a possibility. I'll have to give that some thought. It will never be my primary search choice, though.

  22. Re:Silly name by AmiMoJo · · Score: 4, Informative

    That's not the right syntax for Google, hasn't been for years. The syntax is now that double quotes mean the search term must appear on the page for it to be included in the results. So double quotes are like a logical AND, everything else is logical OR but obviously heavily weighted.

    You correct search term should be:

    "ibanez" "rb-800"

    First result looks correct but I don't know much about guitars.

    --
    const int one = 65536; (Silvermoon, Texture.cs)
    SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC