5 ms·
Why would anyone believe that DuckDuckGo isn't already penetrated?
by jpdoctor 13y ago
Why would anyone believe that DuckDuckGo isn't already penetrated?
- jafaku 13y agoBecause look at the logo and the design, that duck is cool! And it says it's private! /s
- oneye 13y agoOr because their entire business differentiation from the beginning has been privacy. This does not mean that it is not compromised, of course. But its why people would believe it isn't compromised. And its a much better reason than your sarcastic imitation.
- betterunix 13y ago"Or because their entire business differentiation from the beginning has been privacy." The same is true of Hushmail. How did that work out?
- oneye 13y agoI have no idea. I (as I said) was not trying to assert that DuckDuckGo is not compromised, I was asserting that the reason that people believe it to be secure is because they've differentiated on privacy since the beginning. Mostly, I don't like seeing condescending, inaccurate statements.
- betterunix 13y agoWell, the Hushmail story is pretty famous: http://www.wired.com/threatlevel/2007/11/encrypted-e-mai/ http://www.wired.com/threatlevel/2007/11/encrypted-e-mai/ There is nothing inaccurate about claiming that people believe that DDG is protecting their privacy because of how the website presents itself and the claims made by the company. That is exactly why people believed (and many continue to believe) that Hushmail is protecting their privacy. The way companies advertise themselves is not necessarily reflective of reality.
- TylerE 13y agoI can't take their privacy stuff quite seriously, considering they are partnered with Microsoft.
- jafaku 13y agoJust like Google and Microsoft "take your privacy very seriously"? Not based in the US has become an undeniable feature.
- hkmurakami 13y agoIf ducks were the secret to being cool, Aflac would be cool by now ;) https://en.wikipedia.org/wiki/Aflac https://en.wikipedia.org/wiki/Aflac
- vinceguidry 13y agoAflac is pretty cool. That duck has serious swag.
- darkstar999 13y agoHave a look-see at this section of their Privacy Policy. https://duckduckgo.com/privacy#s2 https://duckduckgo.com/privacy#s2 Of course, they could be completely full of shit or unknowingly compromised. My concern is this: even though they don't _collect_ information, they could still forward it on to authorities and not violate this policy. However, they have a freaking TOR node, so it's almost a moot point.
- marshray 13y agoWhy would anyone believe his own computer isn't already penetrated?
- elorant 13y agoWhy bother infiltrating PCs when you can monitor the traffic?
- marshray 13y agoSSL for example.
- betterunix 13y ago"Why would anyone believe DDG isn't already penetrated?" should be read as, "Why would anyone believe that DDG isn't already penetrated and that their own computers are not already penetrated?" Your trust chain has to start somewhere.
- kostya-kow 13y agoBecause I am running GNU/Linux.
- bigiain 13y agoWhy do you trust any binaries you've got? Where did your first-use/bootstrapping compiler come from? And even if you wrote your own OS and compiler from the ground up - who wrote your BIOS? Your network card firmware? Your disk controller software? Your CPU microcode? We _all_ abdicate our trust-chain _somewhere_
- brvs 13y agoThis is why it's important to look at PRISM as a political issue and not merely a technical one, like I see a ton of people doing now. The best solution to government spying isn't to tell everyone to use Linux and DuckDuckGo, it's to change the spying itself.
- GameOfTrolls 13y agoYou should see the kind of results you get when you type "penetrated" in duckduckgo.
- riquito 13y agoIt's a fair question, I'm ashamed by the snarky answers. If Google can't oppose the NSA in installing backdoors (by the way, this has to be demonstrated), DuckDuckGo can't oppose them neither. Best luck to the team of DuckDuckGo, it's a nice project.
- lurkinggrue 13y agoThey probably didn't install back doors and are just pulling in the data from the internet backbone. Tapping off the fiber.
- meowface 13y agoDuckduckgo redirects all requests to HTTPS and uses only HTTPS; it is highly unlikely the NSA or anyone would be able to decrypt that traffic, unless of course they force DDG to divulge their SSL private key. Which I suppose is plausible.
- missing_cipher 13y agoReally. If understood correctly, the NSA had direct lines to the fiber. It doesn't matter what search engine you use.
- VladRussian2 13y agothe issue is with HTTPS. To read that traffic NSA collects private keys from limited number of [big] companies as collecting them from all companies would be a very public affair. Thus from NSA's price/performance point of view smaller enterprises may be still be off the hook (for now).
- ewbuoi 13y agoThey could get a valid key pair from a CA and MITM the connection. It could be detected if the user knows what the public key should be and compares it with what they received, but that seems pretty unlikely.
- VladRussian2 13y ago>It could be detected if the user knows what the public key should be and compares it with what they received, but that seems pretty unlikely. there is no need to know what the public key should be - only that there are several [more than expected] different keys. Any distributed organization (including Google itself who can be fully expected to monitor which certs their users receive especially after Iran/Diginotar story) could notice it and thus identify the MITM. Thus Google must be on it. Thus no need to involve extra certs from CA though of course i'm not arguing NSA's ability to do that.
- ig1 13y agoBecause it's too small for them to care about.
- fmendez 13y agoExactly, I think what we might be needing is a non-US (perhaps Iceland or NZ) based alternative. The moment, duckduckgo becomes relevant enough (i.e significant traffic) then is game over IMO.
- bigiain 13y agoAsk Kim Dotcom about how well NZ's liberal laws worked out in practice when the US copyright police showed up asking the local cops to wildly overstep their legal authority… I mean _seriously?_ Helicopters, silenced assault rifles, security dogs, and 72 cops - sent in against someone accused of _copyright infringement?_ And then a Hollywood showreel of the raid gets produced and publicised? I _like_ New Zealand, they talk the talk, but when it comes to walking the walk - they're lead around by the nose to do whatever the US wants.