ari/ari.lt
1
0
Fork 0
mirror of https://git.ari.lt/ari.lt/ari.lt.git synced 2025-02-04 17:49:24 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

update @ Mon 8 Nov 15:34:03 EET 2021

Browse source
This commit is contained in:
Ari Archer 2021-11-08 15:34:03 +02:00
parent 20729ee62c
commit 9c22b62c41
3 changed files with 213 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

206
page/blog/blogs/DuckDuckGo?-more-like-DuckDuckNo.html Normal file
View file

@ -0,0 +1,206 @@
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8"/>
<meta content="IE=edge" http-equiv="X-UA-Compatible"/>
<meta content="width=device-width, initial-scale=1.0" name="viewport"/>
<title>
Ari::web -&gt; Blog
</title>
<meta content="website webdev linux programming ari terminal dark blog javascript opensource free" name="keywords"/>
<meta content="Blog on 2021-11-08 15:33:02 EET - DuckDuckGo? more like DuckDuckNo" name="description"/>
<meta content="follow" name="robots"/>
</head>
<body>
<div>
<h1>
DuckDuckGo? more like DuckDuckNo
</h1>
<p>
2021-11-08 15:33:02 EET |
<a href="..">
back
</a>
|
<a href="/">
home
</a>
|
<a href="/git">
git
</a>
</p>
<hr/>
<p>
DuckDuckOH... OH NO....
</p>
<p>
DuckDuckGo (more commonly called ddg) is probably the most popular
"privacy respecting search engine", but we can debate that, DuckDuckGo is a company, not your friend,
their ultimate goal is to make money and usually companies do that by farming your data.
</p>
<h2>
Why I have doubts about DuckDuckGo
</h2>
<p>
First things first - as I already mentioned, ddg is a company an their goal is to make money,
nothing else.
</p>
<p>
Then there is a fact that ddg is proprietary so you can be sure that it has loads of
unwatched vulnerabilities and as nobody can see the code, they're probably collecting the same, if not
more data about you than google as some stupid criminals might use ddg for illegal things so they can
use the data against them to make $money$.
</p>
<p>
After that there's the fact they they leave a lot of data in your browser storage
with cookies so I feel like they're doing a lot of identity storing.
Even though it's less than google, it's not as much, from my usage expierience
duckduckgo leaves ~15 cookies where google - ~35, but I use gmail for example, so I think
duckduckgo as it has no other services that I use still tracks you quite a lot.
</p>
<p>
DuckDuckGo also has !bangs, which is a convenient thing, but breaks all BASIC privacy rules...
It doesn't even fetch it server side when to be private it should, it just redirects you instead with is just
a horrible idea...
</p>
<p>
They say they don't censor anything, but they have to if they don't want to get in trouble with
the US government, amazon and in general people with higher powers than them.
</p>
<p>
It's hosted in the US by amazon, even if they didn't collect any data, amazon is, which collects
even more data than google usually and as it's hosted in the US so you don't really get much privacy
by law.
</p>
<h2>
What I suggest using instead of DuckDuckGo
</h2>
<p>
What I liked about ddg:
</p>
<ul>
<li>
It was minimal
</li>
<li>
Had semi-decent search results
</li>
<li>
AT LEAST claimed they didn't collect any data
</li>
<li>
!bangs were convenient
</li>
<li>
Had a good dark mode
</li>
</ul>
<p>
So I looked around and found
<a href="//searx.space">
searx
</a>
, it's basically what duckduckgo is trying to be.
Though note that searx is not a search engine, it's
<a href="//en.wikipedia.org/wiki/Metasearch_engine">
a meta search engine
</a>
, which basically means it fetches results server-side and brings them to you, privately.
</p>
<p>
Searx and its instances are
<a href="//github.com/searx/searx">
open source
</a>
, they have minimal CSS and javascript,
where its back-end is written in python, as they're fully open source you can self host it or you can trust
its instances and use them, I personally use
<a href="//searx.tiekoetter.com">
searx.tiekoetter.com
</a>
, though it's
(the instance) is hosted in the US, which is not preferred for privacy respecting search engines.
</p>
<p>
Searx collects no data about you and they're pretty open about what they collect, even your
preferences are stored on the back-end, I personally don't have any cookies from it from using it
for longer than duckduckgo, not even any browser data (I.e localstorage, cookies, etc.).
</p>
<p>
Searx as far as I can see fills in the holes ddg has:
</p>
<ul>
<li>
Searx is open source
</li>
<li>
being a meta search engine gives you better results
</li>
<li>
has bangs, but fetched server-side
</li>
<li>
It's minimal
</li>
<li>
Has a good dark and light modes
</li>
<li>
<strong>
Really
</strong>
doesn't collect any data about you AFAIK
</li>
<li>
Doesn't market itself as hard as duckduckgo
</li>
<li>
Is not a company
</li>
<li>
Does not censor beyond the search engines you configure censor you
</li>
<li>
Has a good tor secret service
</li>
</ul>
<p>
And in general seems like what ddg is trying to accomplish, but is failing because it has become like
every company, power and data hungry
</p>
<h2>
Privacy in general
</h2>
<p>
There is
<strong>
nothing
</strong>
private on the internet, you can just try to minimise it, which ddg is not doing,
it still is identifying you, which is the only huge part you can really try mitigate.
Its tor service is set up semi-correctly, I feel like it's still not good enough, I don't trust ddg
like you shouldn't.
</p>
<p>
DuckDuckGo is trying to make look itself the best private thing out there when it just
covers itself with the privacy cloak, when under is hiding the same evil its talking shit
about, as I said, ddg is a company, it doesn't care about you, it's just another power hungry
asshole that you should not trust and only use in a very isolated box.
</p>
<p>
And if you use ddg you can see how marketing and youtubers shilling ddg got to you, the same
as with
<a href="/novpn">
VPNs
</a>
, you trusted someone and now you made a choice that hurt you when
you thought it will help you, never trust anyone but yourself. The art of marketing and lying
is evil so please, before you use anything, DYOR (do your own research) and think to yourself if
the person telling you to use something is bias, there was money involved, if the product seems too
good to be true and in general, get deeper into it than just trusting someone.
</p>
</div>
</body>
</html>
<!-- this is automatically generated by scripts/add_blog -->

5
page/blog/index.html
View file

@ -72,6 +72,11 @@
Rust bad
</a>
</li>
<li>
<a href="/page/blog/blogs/DuckDuckGo?-more-like-DuckDuckNo.html">
DuckDuckGo? more like DuckDuckNo
</a>
</li>
</ul>
</div>
</body>

3
page/blog/index.md
View file

@ -9,4 +9,5 @@
* [I am in love with scheme/racket](/page/blog/blogs/I-am-in-love-with-scheme_racket.html)
* [My GPG key](/page/blog/blogs/My-GPG-key.html)
* [Tech normies, companies and digital freedom](/page/blog/blogs/Tech-normies,-companies-and-digital-freedom.html)
* [Rust bad](/page/blog/blogs/Rust-bad.html)
* [Rust bad](/page/blog/blogs/Rust-bad.html)
* [DuckDuckGo? more like DuckDuckNo](/page/blog/blogs/DuckDuckGo?-more-like-DuckDuckNo.html)