4 ms·

Hey, while you're here, one thing about Duck Duck Go that concerns me is that it can be killed on a per-IP basis by locking on "safe" search. If I accidentiall

by joeyh 17y ago

Hey, while you're here, one thing about Duck Duck Go that concerns me is that it can be killed on a per-IP basis by locking on "safe" search. If I accidentially do this at home, or if I find that I have to use tor too often while in coffee shops to ensure I see all search results, (or if I use tor and some idiot has forced it on for those IPs), that could be a problem. Also, I wonder how hard it would be to spoof packets to kill IPs one doesn't even have access too? Do you send a nonce back to the user and check it before completing the banning process?

epi0Bauqu 17y ago
The short answer is when we start running into collisions we'll change the parameters of this service, or perhaps sooner. That is, I'm fully aware of these limitations/issues and am actively monitoring them. I wanted to try the extreme case (at least for a time) to see if a lot of schools and businesses that use one static IP would find the process super simple and just use it. After all, they could set all their computers to safe search in one click. This experiment is ongoing, but it will probably evolve into a program where we have more of a back and forth opt-in process. I hope this addresses your concern!