Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 1 down vote favorite

The concept of YaCy of decentralized web search seems smart. Does anyone see any flaws in its design that may lead to additional exposures of privacy or security compared to the usual alternatives or there are only advantages?

Wikipedia mentions some disadvantages but if I didn't get it wrong they don't seem directly related to privacy, security or anonymity.

share|improve this question
Some of us can't browse to that site due to traffic restrictions. Care to edit to include a summary of what they do, and what parts of it you feel are unique / problematic? – Polynomial Nov 1 '12 at 8:48
The uniqueness is it being decentralized and peer-to-peer, so at least there seems to be no log of your searches. It looks more private. My question is exactly to find out if there is anything problematic in terms of privacy, security and anonymity that I haven't noticed. – Strapakowsky Nov 1 '12 at 8:56
2  
I would be concerned that if you were participating in the crawling some of your identifying information could up in the index due to some pages which display information related to where the connection came from. Being the one that indexes something like IPChicken would add your IP, hostname, ISP, and DNS information to the index as one of the crawlers. Acting as a proxy rather than a crawler would have similar concerns to being a TOR exit node. You wouldn't have control over where others go with your own IP. – Nathan V Nov 30 '12 at 4:48

1 Answer

up vote 1 down vote accepted

I would be concerned with search poisoning (as mentioned in the wiki). If search results are coming from peers, you will not know how valid those searches are. This means that a malicious peer could redirect users to non-valid sites for phishing or browser infection.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.