Bonum Certa Men Certa

Why You Should Avoid DuckDuckGo (DDG) 2021 Edition, Now Microsoft-Hosted and With Extra Privacy Risks

Reddit seems to be censoring such revelations right now (even a year after publication), as if sponsors are more important than facts




There are substantial privacy and civil liberty issues with DuckDuckGo. Here they are spotlighted:

  1. Nefarious History of DDG founder & CEO:

    1. DDG's founder (Gabriel Weinberg) has a history of privacy abuse, starting with his founding of Names DB, a surveillance capitalist service designed to coerce naive users to submit sensitive information about their friends. (2006)

      (expand related trivia on Reddit censorship)

      The "history" link above refers to a Reddit post rich in accurate facts-- verifiable facts. The moderator (trai_dep) added flair to falsely flag the content as "speculative" to cast doubt (to create FUD whilst falsely accusing the other of just that - to project. The pot is calling the kettle black). No counter evidence was given.

      Then over a year later Reddit censored the post in a manner that suggests a rogue/buggy robot "automatically" filtered it as "spam". They duck accountability by blaming the bot. Obviously nothing in the post could even remotely be construed as spam. Are we to believe that a robot would censor an old archived post, and no human reviews censorship by some unleashed bot loose in the wild? Anyway, this is why the link is a mirrored WaybackMachine document.

    2. Weinberg's motivation for creating DDG was not actually to "spread privacy"; it was to create something big, something that would compete with big players, according to an interview between Weinberg and Susan Adams. As a privacy abuser during the conception of DDG (Names Database), Weinberg sought to become a big-name legacy. Privacy is Weinberg's means (not ends) in that endeavor. Clearly he doesn't value privacy -- he values perception of privacy.

  2. Direct Privacy Abuse:

    1. DDG was caught violating its own privacy policy by issuing tracker cookies, according to Alexander Hanff (CEO of Think Privacy and a data security and ethics expert on staff at Singularity University).

    2. DDG was again caught violating its own privacy policy by fingerprinting browsers. DDG responded not with counter evidence, but simply a plea to trust them.

    3. DDG's third violation (2021): Microsoft hosts DDG's service and also supplies Bing search results for the same transaction. This means Microsoft sees both sides of the transaction and can link your IP address (i.e. identity) to your search query that Bing processes. DDG makes this false statement: "we never share any personal information with any of our partners. The way it works is when we call a partner for information, it is proxied through our servers so it stays completely anonymous. That is, any call to a partner looks to the partner as it is from us and not the user itself, and no user personal information is passed in that process (e.g. their IP address). That way we can build our search result pages using these 100s of partner sources, while still keeping them completely anonymous to you" (emphasis added). While it may be true that DDG doesn't transmit users' IP addresses to Microsoft, Microsoft has already seen users' IP addresses via Azure. That combination of data given to Microsoft makes DDG's statement a lie. The MS Azure privacy policy refers us to the general MS privacy policy, which confirms that Microsoft collects IP addresses.

      DDG can change their hosting provider at any time. And they have-- they migrated from Amazon AWS to Microsoft. As of the drafting of the article herein, DDG is still MS-hosted. To verify for yourself that DDG is still MS-hosted as you read this, Linux Tor users can run: torsocks whois "$(torsocks dig +tcp +short +time=4 +tries=1 duckduckgo.com @resolver1.opendns.com)"; web users can verify by obtaining DDG's IP address from digweb and then visit https://ipinfo.io/ <IP address from digweb>.

    4. DDG's app sends every URL you visit to DDG servers. (discussion).

    5. DDG is currently collecting users' operating systems and everything they highlight in the search results. (to verify this, simply hit F12 in your browser and select the "network" tab. Do a search with JavaScript enabled. Highlight some text on the screen. Mouseover the traffic rows and see that your highlighted text, operating system, and other details relating to geolocation are sent to DDG. Then change the query and submit. Notice that the previous query is being transmitted with the new query to link the queries together)

    6. When clicking an ad on the DDG results page, all data available in your session is sent to the advertiser, which is why the Epic browser project refuses to set DDG as the default search engine.

    7. DDG blacklisted Framabee, a search engine for the highly respected framasoft.org consortium.

  3. Censorship: Some people replace Google with DDG in order to avoid censorship. DDG is not the answer.

    1. DDG is complying with the "celebrity threesome injunction".
  4. Harmful impact on net neutrality:

    1. DDG attempts to play both sides of the network neutrality fight. DDG donated $50k (as of 2020) to an opponent of net neutrality who ironically calls themselves "TechFreedom". Then DDG also donated $50k to an opponent of TechFreedom, "Public Knowledge", who actually calls for "NO rules preventing blocking of website", yet Public Knowledge blocks Tor users from their own website by issuing a "403 forbidden" error. Public Knowledge intends to coach Congress on "How Interoperability Can Rein In Big Tech", yet they themselves have broken interoperability with Tor as they make themselves electronically unreachable outside of Facebook, Twitter, Youtube, and Gmail.
  5. CloudFlare: DDG promotes one of the most pernicious privacy abusing tech giants and adversary to the Tor community: CloudFlare Inc. DDG results give high rankings to CloudFlare sites, thus leading users into the largest privacy abusing walled garden on the web.

    Supporting CloudFlare compromises privacy, net neutrality, democracy, and anonymity:

    1. Anonymity: CloudFlare DoS attacks Tor users, causing substantial damage to the Tor network.
    2. Privacy: All CloudFlare sites are surreptitiously MitM'd by design.
    3. Net neutrality: CloudFlare's attack on Tor users causes access inequality, the centerpiece to net neutrality.
    4. DDG T-shirts are sold using a CloudFlare site, thus surreptitiously sharing all order information (name, address, credit card, etc) with CloudFlare despite their statement at the bottom of the page saying "DuckDuckGo is an Internet privacy company that empowers you to seamlessly take control of your personal information online, without any tradeoffs." (2019)
    5. DDG hired CloudFlare to host spreadprivacy.com (2019)

    DDG also donated over $186k to a series of privacy-abusing CloudFlare sites run by "Demand Progress", "Fight for the Future", and "Access Now". Despite getting nearly $70k from DDG, FFTF continues to expose their own patrons to the very evil they claim to be fighting. Demand Progress, who received $100k from DDG, posts their claim to "contest concentrated corporate power" directly on their CloudFlare site, as well as the claim that they educate people on "the impacts of corporate power over our economy and democracy" as they "confront corporate bad actors", all of which is bluntly unaligned with their CloudFlare patronage. Access Now, who received $16k from DDG, also used CloudFlare to block Tor users, hypocritically acting against their own mission to "fight for a free and open internet, advocating for the Net Neutrality principle that internet access should be offered to everyone on a nondiscriminatory basis, without favoring certain websites, applications, or services." DDG apparently does little inspection on those they donate to, as if they're merely selecting recipients with names that promote their privacy propaganda strategy to boost user loyalty.

  6. Harmful Partnerships with Adversaries of Privacy Seekers:

    1. DDG gets paid a commission when users visit eBay from DDG. Note that eBay has been caught sending JavaScript that snoops on their own customers by port scanning the LAN and reporting back to eBay. Moreover, eBay transactions are impossible without using PayPal, and PayPal abuses privacy in countless ways.

    2. DDG gets paid a commission when users visit privacy-abuser Amazon.

      image of JavaScript event that runs when clicking a DDG result

      DDG also uses AWS to crawl the web, which Amazon profits from. The Amazon partnership triggers substantial ethical issues:

      1. Amazon is making an astronomical investment in facial recognition which will destroy physical travel privacy worldwide.
      2. Amazon uses Ring and Alexa to surveil neighborhoods and the inside of homes.
      3. Amazon paid $195k to fight privacy in CA. (also see http://cal-access.sos.ca.gov/Campaign/Committees/Detail.aspx?id=1401518&view=late1)
      4. Amazon runs sweat shops, invests in climate denial, etc. The list of non-privacy related harms is too long to list here.
    3. DDG feeds privacy-abuser Microsoft by patronizing the Bing API for search results, using Microsoft's ad network, using Outlook email service, hiring Microsoft to host DDG's search site and host DDG's crawler.

      1. The Dutch government commissioned a study which found Microsoft Office products to have several GDPR violations.
      2. Microsoft finances AnyVision to equip the Israeli military with facial recognition to be used against the Palestinians who they oppress.
      3. Microsoft paid $195k to fight privacy in CA. (also see http://cal-access.sos.ca.gov/Campaign/Committees/Detail.aspx?id=1401518&view=late1)
      4. DDG hires Microsoft for email service: torsocks dig @8.8.8.8 mx duckduckgo.com +tcp | grep -E '^\w' ==> "...duckduckgo-com.mail.protection.outlook.com"
    4. (historic) DDG is was previously partnered with Yahoo (aka Oath; plus Verizon and AOL by extension).

      (click to expand details)

      DDG helped Yahoo profit for several years by patronizing Yahoo's API for search results, and also through advertising. Mention of Verizon, Yahoo, and Oath have been quietly scrubbed from DDG's disclosures. There was no official announcement, so we cannot confirm whether there are still ties to Verizon et al.

      The Verizon corporate conglomerate is evil in many ways:

      1. Yahoo, Verizon, and AOL all supported CISPA (unwarranted surveillance bills)
      2. Yahoo, Verizon, and AOL all use DNSBLs to block individuals from running their own mail servers, thus forcing an over-share of e-mail metadata with a relay.
      3. Verizon and AOL both drug test their employees, thus intruding on their privacy outside of the workplace.
      4. Verizon is was an ALEC member (a powerful superPAC designed to put corporate political interests ahead of human beings). (edit: Verizon dropped ALEC membership in 2018)
      5. Verizon supports the TTP treaty.
      6. Yahoo voluntarily ratted out a human rights journalist (Shi Tao) to the Chinese gov w/out warrant, leading to his incarceration.
      7. Yahoo recently recovered "deleted" e-mail to convict a criminal. The deleted e-mail was not expected to be recoverable per the Yahoo Privacy Policy.
      8. Verizon received $16.8 billion in Trump tax breaks, then immediately laid off thousands of workers.
      9. (2012) Will block or degrade calls to disrupt customer use, at the request of law enforcement, with no court oversight.
      10. (2014) Verizon fined $7.4 million for violating customers’ privacy
      11. (2016) Verizon fined $1.35 million for violating customers’ privacy
      12. (2018) Verizon paid $200k to fight privacy in CA. See also California records.
      13. (2018) Verizon apparently caught taking voice prints
      14. unfavorable record retention policy (scroll down to Verizon)
      15. (2015) Only 2 stars on EFF transparency report
      16. (2016) Yahoo was caught surreptitiously monitoring Yahoo Mail messages for the NSA, resulting in EFF lawsuit


  7. Advertising Abuses & Corruption:

    1. DDG exploited a room at FOSDEM for commercial gain, to deliver a sales pitch despite its proprietary non-free server code, then dashed out without taking questions. Shame on FOSDEM organizers for allowing this corrupt corporate abuse of precious resources.
    2. Tor Project accepts an annual $25k "contribution" (read: bribe) from DDG, so you'll find that DDG problems are down-played by those close to the Tor Project (e.g. EFF). This is likely why Tor Browser always defaults to using DDG (which DDG conceals from their disclosure) and why Tor Project endorses DDG over Ss -- ultimately against the interests of the privacy-seeking Tor community. This default search engine exploits The Tyranny of Convenience. The EFF also pimps DDG -- a likely consequence of EFF's close ties to Tor Project.
      (click to expand details on how Tor Project responds to criticism about their loyalty toward DuckDuckGo [their benefactor] in IRC)
      18:20 < psychil> if torbrowser is going to be recommended, it should also be open to scrutiny.  in the absence of that transparency, you create an untrustworthy forum.
      18:20 < psychil> we've seen a loyalty from TB toward duckduckgo, but DDG is in partnership with Verizon, Yahoo, AOL et. al.
      18:21 < psychil> all CISPA-sponsoring companies
      18:22 < psychil> if ppl choose to trust them fair enough, but this trust shouldn't be pushed on every user weighing their choice of browsers
      18:26 -!- mode/#tor [-b psychil@*!*@*] by ChanServ
      18:27 < YY_Bozhinsky> psychil: i am using Tor (thanks to Tor Devs)... PLUS brain - good bundle. I am happy. And please, don't rush to change Reality (do it slowly with love and respect). Because it's home for many ppl. They construct their lives in it. Think twice before ruining that. Please.
      18:27 -!- mode/#tor [+b psychil!*@*] by ChanServ
      18:27 -!- psychil was kicked from #tor by ChanServ [wont stop the FUD]
      
      Tor Project is notoriously fast to censor any discourse (no matter how civil) when it supports a narrative that doesn't align with their view / propaganda.






Editor's note: We published a (now-outdated) version before. The author notes: "The significant changes are: DDG is now MS-hosted (2.3), DDG gets commission when Amazon or eBay links are followed, Verizon-Yahoo is no longer a partner, and there's more dirt on DDG donees (TechFreedom, "Public Knowledge", "Demand Progress", "Fight for the Future", and "Access Now")"

Recent Techrights' Posts

Still Lots of IBM Departures
It's not that we lack evidence of IBM layoffs. It's just that we have ample evidence of the press not doing its job (or barely existing anymore).
The Register MS Standards: Promote a Ponzi Scheme in Exchange of Money
Once upon a time it was a serious publisher. Months ago it was taken over by a Microsoft person.
Dr. Andy Farnell: Time to Pull the Plug?
insightful, as usual
The Slopfarms' Business Case (or Business Model) Never Existed and Nowadays, in 2026, They've Mostly Collapsed
Hopefully by year's end many slop suppliers will be offline and slopfarms that rely on them throw in the towel
 
Slop is Distraction
LibreWolf will never include any of this slop nonsense, no matter if toggled on or off
Cult inquiry: Parliament of Victoria, last chance to have your say
Reprinted with permission from Daniel Pocock
Internet Relay Chat (IRC) Turns 37.5
Can IRC reach age 75?
Gemini Links 28/02/2026: Loadbars 0.13.0, IME (Input Method Editor), and ColorColumn in Vim
Links for the day
Two EPO Strikes in March (Maybe More)
As per the SUEPO diary [...] We still have an ongoing series about the EPO, with several more series to start later
Why We Are Concerned About the SRA's Failure and What That Means to the Profession of Lawyers in the UK
Unregulated industries will lose their credibility as there is a threat of growing perception that they operate outside the law rather than practice law
Over 10,000 Pages/Articles Per Year?
Probably my most productive month, ever
Keeping Techrights Online 99.99% of the Time
Some time later this year we'll tell a very long story about how extremists attacked our webhosts
Teaser: The Next Series About the SRA, Which Would be Just as Effective as It It Right Now If It Had Zero Employees
the lapdog (of the "litigation industry") that is meant to be perceived as a watchdog
Richard Stallman, Founder of the Free Software Movement, Will be Giving Public Talk in Bern (Switzerland) in Less Than 12 Days
We are still doing a series about him and his talks
Slopfarms' Demise Looks Like the Beginning of the End (Lowered Demand for Slop)
Slop about "Linux" has gotten hard to find this past week
Links 28/02/2026: "Tehran’s Two-Tiered Internet", "Internet Under Fire"
Links for the day
When an Entire News Site is About One Topic (and One Topic Only)
Tomorrow we start a new series for the new month
Links 28/02/2026: Bill Epsteingate Admits Sex With Young Girls, "Epstein Files Are the Horror That Keeps on Giving"
Links for the day
IBM: Where Companies Come to Perish
thelayoff.com is censoring stories
Tech Layoffs Are Not Because of Slop, They're an Effect of a Rotting Economy and Tech Giants Being Too Deep in Debt
Block is rapidly sinking in debt
March in London Today Against Slop's Harms to Society (and the Environment), Starting at 12:00 GMT at the Microsoft OpenAI Office
Today there is a protest in London (UK)
Microsoft Mass Layoffs Have Officially Resumed, Microsoft's Waggener Edstrom/Frank Shaw Lied
"The former employees say this was a mass layoff"
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, February 27, 2026
IRC logs for Friday, February 27, 2026
Links 27/02/2026: Block Cuts 40% of Its Workforce While Blaming Ponzi Scheme, Netflix Backs Out of Bid for Warner Bros.
Links for the day
IBM CEO and CFO Make It Hotter in the Kitchen
Who's gonna leave the kitchen while they cook the books?
Gemini Links 27/02/2026: Unlearning Literacy (Slop) and Firefox as Slop-ware
Links for the day
It Looks Like Linux Chief Linus Torvalds Made a Good Call Regarding Kent 'Slop' Overstreet
Having never met or even chatted to Overstreet, I'm not in a position to judge him
Links 27/02/2026: Slop Incompatible With Nuclear Codes, Chinese Slop "Chatbots Censor Themselves"
Links for the day
Please Report the European Patent Office (EPO) to Europol for Cocaine Abuse and Tampering With Witnesses and Media to Hide This Cocaine Abuse
there are already police reports connected to the matter
Like a Mafia: Kris De Neef and Nellie Simon, Who Help Campinos Cover Up Cocainegate at the EPO (Substance Abuse at the Highest Office), Are Bullying EPO Whistleblowers
They're all in this together [...] At this point, undoubtedly, the EPO is run like an organised crime operation. Nothing more, nothing less.
pulltheplug.uk Says the Internet Harms Us, Will March in London Tomorrow
Maybe the site is down due to high access demand
EPO Management Trying to Hide Cocainegate, Silence/Discredit Whistleblowers, and Probably in a Panic Due to the Strikes
At the moment, Johannes' mates are receiving over 100,000 euros as a reward for doing illegal drugs
Jim Zemlin's 'Linux' Foundation is the Real Link Between Linux and Pedophilia
It's about the deeds, not the words
The GNU Manifesto Turns 41 in March (Next Week)
And RMS turns 73 next month
The Sister Site is Still Improving the Static Site Generator (SSG) We Use in Techrights
We have a common mission and every week we make measurable advancements
Techrights is 100% Disconnected From Cheeto's America, the Problem is Hired Guns in London Helping Violent Americans Attack Us Domestically
Not a new problem, not limited to us
Greenland Needs to Disconnect From United States Tech to Protect Its Independence
The more Greenland protects itself from Social Control Media, the more robust or resilient it'll be to regime change
Open Source Endowment (OSE) Looking to Raise Money for Free Software, But It's Hard to Know who Runs the Open Source Endowment Foundation
Their Web site does not (easily) show who the Board of Directors includes
Apple Doesn't Want Anybody to Ask What Happened to Vision Pro
They lost a lot of money
Solicitors Regulation Authority (SRA) on Slop and Breach of Confidentiality
They should absolutely not ignore this
If You Want More Verifiable (Auditable) Security, Use GNU Linux-Libre
GNU/Linux will never be 100% secure
Microsoft XBox Can't Stop Talking About Slop
Will we see more "prepared" (under embargo) Microsoft propaganda released simultaneously at 9PM tonight?
Rust Will Not Inherit the Earth, It Barely Deserves a Place on the Planet
Rust - like Haskell and many other short-lived fetishes - will come and go
Truth Versus Fiction: IBM's Collapse Due to Money Crunch, Not Slop Disguised as Code
core issue is financial
Almost 5,000 Known Gemini Capsules
It is now just 98 short of 5k
Priceless leaks found in crowdfunding campaign
Reprinted with permission from Daniel Pocock
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, February 26, 2026
IRC logs for Thursday, February 26, 2026
[Video] "New RMS [Richard Stallman] Positive Media" Reaches Millions of Viewers This Week
Assuming 5+ million people will watch this on the first week, that's good publicity for the Free software movement
Another Quiet Slop Day Passes By
the number of slopfarms we can locate/track is fast decreasing
Gemini Links 26/02/2026: Sending a Thesis and Lupa/Onion ("Lupa now lists Gemini .onion addresses")
Links for the day
Links 26/02/2026: Bcachefs Man Bonkers, "Seven Journalists Convicted for Taking Photos at Courtroom"
Links for the day
Links 26/02/2026: "Peak Mental Sharpness" and "The Whole Economy Pays the Amazon Tax"
Links for the day
If You Value Privacy, Follow the Likes of Eben Moglen, Phil Zimmermann, and Richard Stallman, Not Back Doors' Boosters Who Mislabel Themselves as Security Experts
Signal is not really secure
"Community" Site Deleted by Jeffrey Epstein-Connected 'Linux' Foundation Had Interview Where Eben Moglen Spoke of GPLv3 and of DRM, Back Doors Etc.
Deleting what happened or what was said two decades ago
Richard Stallman (Free Software Foundation) and Eben Moglen (Columbia Law School) Explained 25 Years Ago That Proprietary Software (and Proprietary Firmware) Would Lead to Back Doors
a fortnight after the 9/11 terror attacks in the US
Writer's Block is Not a Problem to Us, Only a Lack of Time
Or timewasting by aggressive militants who try to silence us [...] People who experience writer's block very often find it depressing (it feels unproductive) and sometimes come to the conclusion that perhaps writing isn't for them
Giving to the Community Versus Taking From the Community (or Worse, Attacking the Community)
some people bring no contributions, only harm
LLM Slop Will Try to 'Rewrite' History of UNIX and GNU/Linux
We occasionally see slopfarms spreading misinformation about UNIX, GNU, and Linux
March Plans for Techrights
next month we plan to start the series about how the SRA failed
Where Does the Solicitors Regulation Authority (SRA) Stand on Machine-Generated Legal Documents and Copy-pasting One Client's Lawsuit to Start Another (for American Serial Strangler)?
Now that many law firms cheat (copypasta, paper DOoS, LLM slop, breaches of rules, even defaming the other side) the SRA cannot keep up
Of Course Android is Not Free Software
That Android is not about freedom should not be so shocking
Talking About Blackboxes
Having just reposted a couple of articles from Alex Oliva
Microsoft Slop is Already Killing XBox
Microsoft will fail at alleviating such concerns
Two Weeks Have Passed and It Looks Like Conde Nast's Ars Sloppica Sacked "Senior" "AI" "Reporter" Benj Edwards But Did Not Remove All His LLM-Produced 'Articles'
the editorial standards at Conde Nast's Ars Sloppica are a joke
Alex Oliva (GNU Linux-Libre): Stricter is Less Popular
Reprinted with permission from Alex Oliva
Fraud and Crimes at Microsoft
A lot of these American companies simply cheat and even bribe
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, February 25, 2026
IRC logs for Wednesday, February 25, 2026
FSF's Alex Oliva on Hardware Black Boxes
Reprinted with permission from Alex Oliva