mirror of
https://git.ari.lt/ari.lt/ari.lt.git
synced 2025-02-05 10:09:23 +01:00
206 lines
6.4 KiB
HTML
206 lines
6.4 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8"/>
|
|
<meta content="IE=edge" http-equiv="X-UA-Compatible"/>
|
|
<meta content="width=device-width, initial-scale=1.0" name="viewport"/>
|
|
<title>
|
|
Ari::web -> Blog
|
|
</title>
|
|
<meta content="website webdev linux programming ari terminal dark blog javascript opensource free" name="keywords"/>
|
|
<meta content="Blog on 2021-11-08 15:33:02 EET - DuckDuckGo? more like DuckDuckNo" name="description"/>
|
|
<meta content="follow" name="robots"/>
|
|
</head>
|
|
<body>
|
|
<div>
|
|
<h1>
|
|
DuckDuckGo? more like DuckDuckNo
|
|
</h1>
|
|
<p>
|
|
2021-11-08 15:33:02 EET |
|
|
<a href="..">
|
|
back
|
|
</a>
|
|
|
|
|
<a href="/">
|
|
home
|
|
</a>
|
|
|
|
|
<a href="/git">
|
|
git
|
|
</a>
|
|
</p>
|
|
<hr/>
|
|
<p>
|
|
DuckDuckOH... OH NO....
|
|
</p>
|
|
<p>
|
|
DuckDuckGo (more commonly called ddg) is probably the most popular
|
|
"privacy respecting search engine", but we can debate that, DuckDuckGo is a company, not your friend,
|
|
their ultimate goal is to make money and usually companies do that by farming your data.
|
|
</p>
|
|
<h2>
|
|
Why I have doubts about DuckDuckGo
|
|
</h2>
|
|
<p>
|
|
First things first - as I already mentioned, ddg is a company an their goal is to make money,
|
|
nothing else.
|
|
</p>
|
|
<p>
|
|
Then there is a fact that ddg is proprietary so you can be sure that it has loads of
|
|
unwatched vulnerabilities and as nobody can see the code, they're probably collecting the same, if not
|
|
more data about you than google as some stupid criminals might use ddg for illegal things so they can
|
|
use the data against them to make $money$.
|
|
</p>
|
|
<p>
|
|
After that there's the fact they they leave a lot of data in your browser storage
|
|
with cookies so I feel like they're doing a lot of identity storing.
|
|
Even though it's less than google, it's not as much, from my usage expierience
|
|
duckduckgo leaves ~15 cookies where google - ~35, but I use gmail for example, so I think
|
|
duckduckgo as it has no other services that I use still tracks you quite a lot.
|
|
</p>
|
|
<p>
|
|
DuckDuckGo also has !bangs, which is a convenient thing, but breaks all BASIC privacy rules...
|
|
It doesn't even fetch it server side when to be private it should, it just redirects you instead with is just
|
|
a horrible idea...
|
|
</p>
|
|
<p>
|
|
They say they don't censor anything, but they have to if they don't want to get in trouble with
|
|
the US government, amazon and in general people with higher powers than them.
|
|
</p>
|
|
<p>
|
|
It's hosted in the US by amazon, even if they didn't collect any data, amazon is, which collects
|
|
even more data than google usually and as it's hosted in the US so you don't really get much privacy
|
|
by law.
|
|
</p>
|
|
<h2>
|
|
What I suggest using instead of DuckDuckGo
|
|
</h2>
|
|
<p>
|
|
What I liked about ddg:
|
|
</p>
|
|
<ul>
|
|
<li>
|
|
It was minimal
|
|
</li>
|
|
<li>
|
|
Had semi-decent search results
|
|
</li>
|
|
<li>
|
|
AT LEAST claimed they didn't collect any data
|
|
</li>
|
|
<li>
|
|
!bangs were convenient
|
|
</li>
|
|
<li>
|
|
Had a good dark mode
|
|
</li>
|
|
</ul>
|
|
<p>
|
|
So I looked around and found
|
|
<a href="//searx.space">
|
|
searx
|
|
</a>
|
|
, it's basically what duckduckgo is trying to be.
|
|
Though note that searx is not a search engine, it's
|
|
<a href="//en.wikipedia.org/wiki/Metasearch_engine">
|
|
a meta search engine
|
|
</a>
|
|
, which basically means it fetches results server-side and brings them to you, privately.
|
|
</p>
|
|
<p>
|
|
Searx and its instances are
|
|
<a href="//github.com/searx/searx">
|
|
open source
|
|
</a>
|
|
, they have minimal CSS and javascript,
|
|
where its back-end is written in python, as they're fully open source you can self host it or you can trust
|
|
its instances and use them, I personally use
|
|
<a href="//searx.tiekoetter.com">
|
|
searx.tiekoetter.com
|
|
</a>
|
|
, though it's
|
|
(the instance) is hosted in the US, which is not preferred for privacy respecting search engines.
|
|
</p>
|
|
<p>
|
|
Searx collects no data about you and they're pretty open about what they collect, even your
|
|
preferences are stored on the back-end, I personally don't have any cookies from it from using it
|
|
for longer than duckduckgo, not even any browser data (I.e localstorage, cookies, etc.).
|
|
</p>
|
|
<p>
|
|
Searx as far as I can see fills in the holes ddg has:
|
|
</p>
|
|
<ul>
|
|
<li>
|
|
Searx is open source
|
|
</li>
|
|
<li>
|
|
being a meta search engine gives you better results
|
|
</li>
|
|
<li>
|
|
has bangs, but fetched server-side
|
|
</li>
|
|
<li>
|
|
It's minimal
|
|
</li>
|
|
<li>
|
|
Has a good dark and light modes
|
|
</li>
|
|
<li>
|
|
<strong>
|
|
Really
|
|
</strong>
|
|
doesn't collect any data about you AFAIK
|
|
</li>
|
|
<li>
|
|
Doesn't market itself as hard as duckduckgo
|
|
</li>
|
|
<li>
|
|
Is not a company
|
|
</li>
|
|
<li>
|
|
Does not censor beyond the search engines you configure censor you
|
|
</li>
|
|
<li>
|
|
Has a good tor secret service
|
|
</li>
|
|
</ul>
|
|
<p>
|
|
And in general seems like what ddg is trying to accomplish, but is failing because it has become like
|
|
every company, power and data hungry
|
|
</p>
|
|
<h2>
|
|
Privacy in general
|
|
</h2>
|
|
<p>
|
|
There is
|
|
<strong>
|
|
nothing
|
|
</strong>
|
|
private on the internet, you can just try to minimise it, which ddg is not doing,
|
|
it still is identifying you, which is the only huge part you can really try mitigate.
|
|
Its tor service is set up semi-correctly, I feel like it's still not good enough, I don't trust ddg
|
|
like you shouldn't.
|
|
</p>
|
|
<p>
|
|
DuckDuckGo is trying to make look itself the best private thing out there when it just
|
|
covers itself with the privacy cloak, when under is hiding the same evil its talking shit
|
|
about, as I said, ddg is a company, it doesn't care about you, it's just another power hungry
|
|
asshole that you should not trust and only use in a very isolated box.
|
|
</p>
|
|
<p>
|
|
And if you use ddg you can see how marketing and youtubers shilling ddg got to you, the same
|
|
as with
|
|
<a href="/novpn">
|
|
VPNs
|
|
</a>
|
|
, you trusted someone and now you made a choice that hurt you when
|
|
you thought it will help you, never trust anyone but yourself. The art of marketing and lying
|
|
is evil so please, before you use anything, DYOR (do your own research) and think to yourself if
|
|
the person telling you to use something is bias, there was money involved, if the product seems too
|
|
good to be true and in general, get deeper into it than just trusting someone.
|
|
</p>
|
|
</div>
|
|
</body>
|
|
</html>
|
|
<!-- this is automatically generated by scripts/add_blog -->
|