10 ms·
Woah woah woah Duckduckgo delegates to Bing? If many/most searches are unique that means they can't live up to their privacy statements.
by hawkice 8y ago
Woah woah woah Duckduckgo delegates to Bing? If many/most searches are unique that means they can't live up to their privacy statements.
- zaptheimpaler 8y agoIf they hide the users IP, HTTP headers etc. and proxy searches to Bing through their own servers it would be anonymous.
- fragsworth 8y agoUnless your query leaks private information. Or a series of unique queries could leak private information.
- jstanley 8y agoBing would be unable to associate series of queries with users. As long as DDG are doing it properly (and I believe they are), Bing would only learn that the contents of each individual query are associated together, they would learn nothing about which other queries were performed by the same user.
- tedsanders 8y agoI think the concern isn't necessarily that Bing would associate query X with person Y. The concern is that Bing would even know that query X exists. For example, if Bing saw a spike in searches for "Aramco IPO July 4, 2018" and were to reveal it to a human or store it, that might be a serious leak of non-public information. Many searches reveal private information, even when they aren't associated with a user.
- y4mi 8y agothta has little to do with privacy though. and i believe thats the only thing they assure?
- lowkeyokay 8y agoI think that’s pretty far fetched. Such a spike would most likely be the product of an already very well known rumour.
- FartyMcFarter 8y agoThere's no practical technology that would get around that problem. Homomorphic encryption might do the trick (?), but it's too slow at the moment.
- qznc 8y agoIntel SGX is only answer at the moment. The Signal messenger uses it, do address book matching is private. It requires the user to trust the server hardware vendor (Intel) instead of also the cloud provider.
- jstanley 8y agoThat would not stop the Bing query matcher (or indeed the Signal address book matcher) from being able to look at the contents of its own secure enclave.
- qznc 8y agoThe trick is that every user uploads his own matcher. The server only sees encrypted matchers, feeds them data and returns the encrypted results. You as a user decrypt your results and nobody (except Intel) was able to see them.
- Sean1708 8y ago> if Bing saw a spike in searches for "Aramco IPO July 4, 2018" and were to reveal it to a human or store it, that might be a serious leak of non-public information Maybe I'm missing something obvious here, but how is that any different from Google or DuckDuckGo seeing the same spike?
- sammorrowdrums 8y agoWell you might trust DDG as a good actor but not a third party. To discover that this information is discoverable to a third party (even if un-attributable) would breach their trust in DDG. Whether that's reasonable or DDG are misleading people in that regard is another matter. Personally I still use them a lot, and will continue. I just think there is a point to be made here. Even generally it's often opaque what third parties have what data and I don't really think GDPR has fixed that. It's surprising for people the Bing might have the contents of their DDG search history, somewhere in the huge dataset of DDG searches that pass through. Also they might not want to help improve Bing search but I'm guessing they do inadvertently?
- Vinnl 8y agoIIRC DDG delegates the crawling to Bing, but does the actual searching itself.