Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 51 down vote favorite
12

DuckDuckGo is a search engine that claims it will not share your results with others. Many of my skeptical coworkers think it may be a scam.

Is there any proof that any web search engine will protect your privacy as it advertises?

share|improve this question
10  
The founder, Gabriel Weinberg, has a blog at: gabrielweinberg.com/blog It's not "proof" by itself, but taken together will all the other indicators that have been mentioned by others, the amount of effort someone would have to go to in order to fake all these signals of authenticity is very significant! – scuzzy-delta Mar 13 '12 at 22:59
4  
I've suggested an edit to this. Why single out DuckDuck? The same question applies to Google (especially to Google), Bing, Yahoo and all the others. – deworde Mar 14 '12 at 9:56
2  
@deworde: It applies to DuckDuckGo. Specifically because of their privacy policy, your edit changes the question. – Dave Mar 14 '12 at 10:30
4  
I have edited this back to be specific around DuckDuckGo - I think the answers given are applicable to other providers if they use the same sort of privacy policy, but the question was sparked from this specific provider. – Rory Alsop♦ Mar 14 '12 at 11:14
2  
I say close this question as too localized. You'd need the founder of the company or someone who makes decisions there to answer this question... Whoa, wait a sec! – Kalamane Mar 14 '12 at 15:27
show 2 more comments

8 Answers

up vote 68 down vote accepted

There is no proof that DuckDuckGo operates as advertised. (There never is, on the web.) However, that is the wrong question.

DuckDuckGo is very clear in its privacy policy. DuckDuckGo says it doesn't track you, it doesn't send your searches to other sites, by default it does not use any cookies, it does not collect personal information, it does not log your IP address or other information about your computer that may be sent automatically with your searches, it doesn't store any personal information at all. Those are pretty strong promises, with no weasel-wording. And, as far as I can see, DuckDuckGo's privacy policy seems like a model privacy policy. It is a model of clarity, plain language, and lack of legal obfuscation.

And privacy policies have bite. The FTC has filed lawsuits after companies that violate their own advertised privacy policy. (Not just little companies you've never heard of: They even went after Facebook!) The way privacy law works in the US is, basically, there are almost no privacy rules that restrict what information web sites can collect -- except that if they have a privacy policy, they must abide by it. Breaching your own privacy policy may be fraud, which is illegal. Also, violating your own privacy policy represents "unfair or deceptive acts or practices", and the FTC is empowered to pursue anyone who engages in "unfair or deceptive acts or practices" in court. DuckDuckGo would be pretty dumb to breach their own privacy policy; their privacy policy is clear and unambiguous and leaves them little wiggle room.

No, I don't think that DuckDuckGo is a scam. I think that's crazy talk. Given the incentives and legal regime, I think you should assume DuckDuckGo follows their own privacy policies, until you find any information to the contrary.

share|improve this answer
7  
Your reliance on legal incentives seems to assume the site or owner are located in the US. I never feel very trusting of a site when whois tells me Registrant Contact: WhoisGuard Protected. – Hugh Allen Mar 14 '12 at 1:26
@HughAllen - Since whois can be completely faked, what's to prevent someone from spoofing a legitimate address from a business in NYC to the Whitehouse? Well one may be fishy, but ultimately I need a D&B number to prove incorporation of some type. – makerofthings7 Mar 14 '12 at 5:12
3  
@HughAllen There are perfectly legitimate reasons to guard against another site revealing your information, and just because WhoIs shows as US isn't proof that the business is registered there. Paranoia will destroy ya, but the right place to look would be a registry of incorporated businesses. – deworde Mar 14 '12 at 10:01
@HughAllen Also, even if it was registered internationally, these laws are generally applied globally. And in most places you'd be able to get around them, your site's reliability would be severly compromised. – deworde Mar 14 '12 at 10:02
1  
@HughAllen consider also that there were cases of US government taking over .com domains of entities outside US which violated US laws. So having .com site and committing a felony in the US is usually not a very smart move for an entity whose business is entirely web-based. – StasM Mar 14 '12 at 17:29
show 1 more comment
up vote 14 down vote

What D.W. said. But also, You don't have to trust DuckDuckGo. You don't log in, you can clear cookies, you can change your IP address, you can access it via Tor. Not being an appendage of an identity company (e.g., Google) is a big privacy plus to begin with.

share|improve this answer
up vote 8 down vote

It is not possible to prove that it will operate this way, but it is very easy to use it the way they advertise it.

I also agree with D.W. and started using it some days ago. I deleted google from my search engine list but had some problems trusting ddg too, since I'm a slightly paranoid person, but it provides a secure connection, I use it over tor and always have a look for my privacy. I couldn't find any problems yet. There is no ID to track you. They could fingerprint you with your privacy settings, but nothing more.

I joined their irc channel and asked some questions, you should do that too, it's irc.freenode.net #duckduckgo

If you are afraid of a dataleak you can try to visit a page and look into the logs. Visit it once over google and once over ddg. Google will leak your search term over the referer.

share|improve this answer
3  
+1 Good point; Google leaks search terms to the target site. ddg doesn't. – makerofthings7 Mar 14 '12 at 14:18
up vote 72 down vote

I'm the founder of DuckDuckGo. D.W. is right, if we were to violate our privacy policy we could get in a lot of trouble. Additionally, I've tried to be as transparent as possible on how we operate, both in our privacy policy and on my blog.

I've thought and explored external verification, from someone like the EFF for instance, but I don't think that really would do much to assuage the core of the comment.

share|improve this answer
30  
welcome to stack exchange! – antony.trupe Mar 14 '12 at 0:45
3  
@Yegg Based on one of the comments below, could you edit your answer to confirm how someone could verify that you're based in the US, and thus subject to privacy policy laws? – deworde Mar 14 '12 at 10:03
5  
Sure, go to delecorp.delaware.gov/tin/GINameSearch.jsp and search for DuckDuckGo. – yegg Mar 14 '12 at 13:30
7  
Since we are on security.se.com I'm curious; how do we know you (user yegg) are Gabriel Weinberg of DuckDuckGo? – Paul Cager Mar 14 '12 at 21:23
4  
@Ramhound - I have absolutely no reason to doubt what he says, but the original poster asked for proof that the DDG will protect you. On a site specialising in security I was surprised that we didn't want to authenticate his identity. – Paul Cager Mar 15 '12 at 15:29
show 9 more comments
up vote 3 down vote

It is never easy to prove these things, but people are moving to DuckDuckGo often for privacy reasons. It takes ages for a brand to gain a positive name and in the Internet age it can take as little as a few minutes to see your good name destroyed.

With the first news articles that DuckDuckGo breaches its promises to its users, they will start to leave as the news will spread in all media in a matter of minute. Also the name of its founder will be remembered for ages and he will probably be out of business forever when it comes to privacy services. You can put information on the Internet, but you can never remove it.

share|improve this answer
up vote 0 down vote

Well now, if DuckDuckGo were domiciled in an EEA state, it would be subject to strong legal controls on what it could do with user data, and in particular it would be prohibited from violating its own privacy policy.

So, if you really care about this issue, look for a similar service based in the EEA, which would give you the potential for legal recourse if you ever found out that they were dealing with your data in a way that violated their privacy policy.

How you detect such breaches is left as an exercise for you.

share|improve this answer
up vote -1 down vote

One thing that has me scratching my head is I could not find a page explaining duckduckgo's business model. Are they scraping Google and making money from ads? That would make me wonder about why Google allows this. Another Google scraper, "Scroogle", recently was forced to shut down after having been repeatedly cut off by Google and finally (separately) getting hit by DDOS attacks (not from Google).

share|improve this answer
It might help if you explain the reason "Scroogle" was shut down, I suspect it was more about their name, and the violation of ______ they agreed to not violate. Google allows websites to return search results, provided they follow their terms, otherwise you cannot. The violation of those terms would simply force said website's hands. – Ramhound Mar 15 '12 at 12:48
up vote 6 down vote

I arrive late to this question, but hopefully I can contribute some useful information which will also help others make a more informed decision regarding the trustworthiness of DuckDuckGo. This answer gives a few reasons to believe that DuckDuckGo is putting its privacy policy into practise by investigating the technical aspects of DuckDuckGo as of 2012-08-23.

I had a look at the data being sent from my browser (Firefox 14.0.1 on Ubuntu 11.04) back to the DuckDuckGo servers when I do page searches (without changing any of DuckDuckGo's default settings) and found the following good points:

  • no DuckDuckGo cookies are stored on my browser.
  • all searches are performed with a http GET.
  • no identification parameters are returned in the query string part of the http request.
  • all requests are https.

Of course there is still some information which a regular user of DuckDuckGo must assume is available to DuckDuckGo:

  • the IP address of the user's router.
  • the name of the user's browser (user agent) and OS (e.g. mine is "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:14.0) Gecko/20100101 Firefox/14.0.1")
  • other http signatures which I am not so familiar with.

I'm sure I missed a few things in that last list, but its a good start. So from the first set of positive points we can see that DuckDuckGo is really doing everything they can.

The lack of cookies and any identifying parameters in the http GET string is some assurance that DuckDuckGo has no interest in tracking a user from one search to the next. I.e. as far as the cookies and URL information being sent back to the server, your first search on DuckDuckGo could have been somebody completely different to your second search on DuckDuckGo. However, you should not assume from this that DuckDuckGo are not capable of linking multiple searches to you - see later on for further detail on this.

I should explain that http GET is not actually more secure than POST - DuckDuckGo could have chosen POST and there would have been no compromises there. However the nice thing with GET is that the user can see the data that is being sent back to DuckDuckGo right there in their URL - i.e. they do not need to go digging to find post parameters being sent by the browser to DuckDuckGo.

Another point is that https is always on. this indicates that DuckDuckGo does not want their users to be vulnerable to man-in-the-middle attacks. Of course that is not to say that man-in-the-middle attacks will not happen if you use DuckDuckGo, but just that from the DuckDuckGo servers' side of things they appear to have done all they can to prevent them.

Having said all that, DuckDuckGo could still link your searches to a single person and possibly to you if you do not take precautions. the user agent is a form of identification simply because it does not change from one request to the next (unless you take precautions against this). Likewise the IP address of your internet-facing router will show up at the DuckDuckGo server.

For these last two points there are things you can do to hide your identity further - like installing a user agent randomizer or using Tor, but if you do not use these things then you will have to trust DuckDuckGo when they say they are respecting your privacy. As far as I can tell, they have done everything they can to assure me that they respect my privacy. Would I go and search for incriminating terms without using Tor and other security on my PC? Absolutely not!

share|improve this answer
“other http signatures which i am not so familiar with” → recommended reading: Panopticlick – Gilles Aug 23 '12 at 11:24

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.