Bonum Certa Men Certa

Why You Should Avoid DuckDuckGo (DDG) 2021 Edition, Now Microsoft-Hosted and With Extra Privacy Risks

Reddit seems to be censoring such revelations right now (even a year after publication), as if sponsors are more important than facts




There are substantial privacy and civil liberty issues with DuckDuckGo. Here they are spotlighted:

  1. Nefarious History of DDG founder & CEO:

    1. DDG's founder (Gabriel Weinberg) has a history of privacy abuse, starting with his founding of Names DB, a surveillance capitalist service designed to coerce naive users to submit sensitive information about their friends. (2006)

      (expand related trivia on Reddit censorship)

      The "history" link above refers to a Reddit post rich in accurate facts-- verifiable facts. The moderator (trai_dep) added flair to falsely flag the content as "speculative" to cast doubt (to create FUD whilst falsely accusing the other of just that - to project. The pot is calling the kettle black). No counter evidence was given.

      Then over a year later Reddit censored the post in a manner that suggests a rogue/buggy robot "automatically" filtered it as "spam". They duck accountability by blaming the bot. Obviously nothing in the post could even remotely be construed as spam. Are we to believe that a robot would censor an old archived post, and no human reviews censorship by some unleashed bot loose in the wild? Anyway, this is why the link is a mirrored WaybackMachine document.

    2. Weinberg's motivation for creating DDG was not actually to "spread privacy"; it was to create something big, something that would compete with big players, according to an interview between Weinberg and Susan Adams. As a privacy abuser during the conception of DDG (Names Database), Weinberg sought to become a big-name legacy. Privacy is Weinberg's means (not ends) in that endeavor. Clearly he doesn't value privacy -- he values perception of privacy.

  2. Direct Privacy Abuse:

    1. DDG was caught violating its own privacy policy by issuing tracker cookies, according to Alexander Hanff (CEO of Think Privacy and a data security and ethics expert on staff at Singularity University).

    2. DDG was again caught violating its own privacy policy by fingerprinting browsers. DDG responded not with counter evidence, but simply a plea to trust them.

    3. DDG's third violation (2021): Microsoft hosts DDG's service and also supplies Bing search results for the same transaction. This means Microsoft sees both sides of the transaction and can link your IP address (i.e. identity) to your search query that Bing processes. DDG makes this false statement: "we never share any personal information with any of our partners. The way it works is when we call a partner for information, it is proxied through our servers so it stays completely anonymous. That is, any call to a partner looks to the partner as it is from us and not the user itself, and no user personal information is passed in that process (e.g. their IP address). That way we can build our search result pages using these 100s of partner sources, while still keeping them completely anonymous to you" (emphasis added). While it may be true that DDG doesn't transmit users' IP addresses to Microsoft, Microsoft has already seen users' IP addresses via Azure. That combination of data given to Microsoft makes DDG's statement a lie. The MS Azure privacy policy refers us to the general MS privacy policy, which confirms that Microsoft collects IP addresses.

      DDG can change their hosting provider at any time. And they have-- they migrated from Amazon AWS to Microsoft. As of the drafting of the article herein, DDG is still MS-hosted. To verify for yourself that DDG is still MS-hosted as you read this, Linux Tor users can run: torsocks whois "$(torsocks dig +tcp +short +time=4 +tries=1 duckduckgo.com @resolver1.opendns.com)"; web users can verify by obtaining DDG's IP address from digweb and then visit https://ipinfo.io/ <IP address from digweb>.

    4. DDG's app sends every URL you visit to DDG servers. (discussion).

    5. DDG is currently collecting users' operating systems and everything they highlight in the search results. (to verify this, simply hit F12 in your browser and select the "network" tab. Do a search with JavaScript enabled. Highlight some text on the screen. Mouseover the traffic rows and see that your highlighted text, operating system, and other details relating to geolocation are sent to DDG. Then change the query and submit. Notice that the previous query is being transmitted with the new query to link the queries together)

    6. When clicking an ad on the DDG results page, all data available in your session is sent to the advertiser, which is why the Epic browser project refuses to set DDG as the default search engine.

    7. DDG blacklisted Framabee, a search engine for the highly respected framasoft.org consortium.

  3. Censorship: Some people replace Google with DDG in order to avoid censorship. DDG is not the answer.

    1. DDG is complying with the "celebrity threesome injunction".
  4. Harmful impact on net neutrality:

    1. DDG attempts to play both sides of the network neutrality fight. DDG donated $50k (as of 2020) to an opponent of net neutrality who ironically calls themselves "TechFreedom". Then DDG also donated $50k to an opponent of TechFreedom, "Public Knowledge", who actually calls for "NO rules preventing blocking of website", yet Public Knowledge blocks Tor users from their own website by issuing a "403 forbidden" error. Public Knowledge intends to coach Congress on "How Interoperability Can Rein In Big Tech", yet they themselves have broken interoperability with Tor as they make themselves electronically unreachable outside of Facebook, Twitter, Youtube, and Gmail.
  5. CloudFlare: DDG promotes one of the most pernicious privacy abusing tech giants and adversary to the Tor community: CloudFlare Inc. DDG results give high rankings to CloudFlare sites, thus leading users into the largest privacy abusing walled garden on the web.

    Supporting CloudFlare compromises privacy, net neutrality, democracy, and anonymity:

    1. Anonymity: CloudFlare DoS attacks Tor users, causing substantial damage to the Tor network.
    2. Privacy: All CloudFlare sites are surreptitiously MitM'd by design.
    3. Net neutrality: CloudFlare's attack on Tor users causes access inequality, the centerpiece to net neutrality.
    4. DDG T-shirts are sold using a CloudFlare site, thus surreptitiously sharing all order information (name, address, credit card, etc) with CloudFlare despite their statement at the bottom of the page saying "DuckDuckGo is an Internet privacy company that empowers you to seamlessly take control of your personal information online, without any tradeoffs." (2019)
    5. DDG hired CloudFlare to host spreadprivacy.com (2019)

    DDG also donated over $186k to a series of privacy-abusing CloudFlare sites run by "Demand Progress", "Fight for the Future", and "Access Now". Despite getting nearly $70k from DDG, FFTF continues to expose their own patrons to the very evil they claim to be fighting. Demand Progress, who received $100k from DDG, posts their claim to "contest concentrated corporate power" directly on their CloudFlare site, as well as the claim that they educate people on "the impacts of corporate power over our economy and democracy" as they "confront corporate bad actors", all of which is bluntly unaligned with their CloudFlare patronage. Access Now, who received $16k from DDG, also used CloudFlare to block Tor users, hypocritically acting against their own mission to "fight for a free and open internet, advocating for the Net Neutrality principle that internet access should be offered to everyone on a nondiscriminatory basis, without favoring certain websites, applications, or services." DDG apparently does little inspection on those they donate to, as if they're merely selecting recipients with names that promote their privacy propaganda strategy to boost user loyalty.

  6. Harmful Partnerships with Adversaries of Privacy Seekers:

    1. DDG gets paid a commission when users visit eBay from DDG. Note that eBay has been caught sending JavaScript that snoops on their own customers by port scanning the LAN and reporting back to eBay. Moreover, eBay transactions are impossible without using PayPal, and PayPal abuses privacy in countless ways.

    2. DDG gets paid a commission when users visit privacy-abuser Amazon.

      image of JavaScript event that runs when clicking a DDG result

      DDG also uses AWS to crawl the web, which Amazon profits from. The Amazon partnership triggers substantial ethical issues:

      1. Amazon is making an astronomical investment in facial recognition which will destroy physical travel privacy worldwide.
      2. Amazon uses Ring and Alexa to surveil neighborhoods and the inside of homes.
      3. Amazon paid $195k to fight privacy in CA. (also see http://cal-access.sos.ca.gov/Campaign/Committees/Detail.aspx?id=1401518&view=late1)
      4. Amazon runs sweat shops, invests in climate denial, etc. The list of non-privacy related harms is too long to list here.
    3. DDG feeds privacy-abuser Microsoft by patronizing the Bing API for search results, using Microsoft's ad network, using Outlook email service, hiring Microsoft to host DDG's search site and host DDG's crawler.

      1. The Dutch government commissioned a study which found Microsoft Office products to have several GDPR violations.
      2. Microsoft finances AnyVision to equip the Israeli military with facial recognition to be used against the Palestinians who they oppress.
      3. Microsoft paid $195k to fight privacy in CA. (also see http://cal-access.sos.ca.gov/Campaign/Committees/Detail.aspx?id=1401518&view=late1)
      4. DDG hires Microsoft for email service: torsocks dig @8.8.8.8 mx duckduckgo.com +tcp | grep -E '^\w' ==> "...duckduckgo-com.mail.protection.outlook.com"
    4. (historic) DDG is was previously partnered with Yahoo (aka Oath; plus Verizon and AOL by extension).

      (click to expand details)

      DDG helped Yahoo profit for several years by patronizing Yahoo's API for search results, and also through advertising. Mention of Verizon, Yahoo, and Oath have been quietly scrubbed from DDG's disclosures. There was no official announcement, so we cannot confirm whether there are still ties to Verizon et al.

      The Verizon corporate conglomerate is evil in many ways:

      1. Yahoo, Verizon, and AOL all supported CISPA (unwarranted surveillance bills)
      2. Yahoo, Verizon, and AOL all use DNSBLs to block individuals from running their own mail servers, thus forcing an over-share of e-mail metadata with a relay.
      3. Verizon and AOL both drug test their employees, thus intruding on their privacy outside of the workplace.
      4. Verizon is was an ALEC member (a powerful superPAC designed to put corporate political interests ahead of human beings). (edit: Verizon dropped ALEC membership in 2018)
      5. Verizon supports the TTP treaty.
      6. Yahoo voluntarily ratted out a human rights journalist (Shi Tao) to the Chinese gov w/out warrant, leading to his incarceration.
      7. Yahoo recently recovered "deleted" e-mail to convict a criminal. The deleted e-mail was not expected to be recoverable per the Yahoo Privacy Policy.
      8. Verizon received $16.8 billion in Trump tax breaks, then immediately laid off thousands of workers.
      9. (2012) Will block or degrade calls to disrupt customer use, at the request of law enforcement, with no court oversight.
      10. (2014) Verizon fined $7.4 million for violating customers’ privacy
      11. (2016) Verizon fined $1.35 million for violating customers’ privacy
      12. (2018) Verizon paid $200k to fight privacy in CA. See also California records.
      13. (2018) Verizon apparently caught taking voice prints
      14. unfavorable record retention policy (scroll down to Verizon)
      15. (2015) Only 2 stars on EFF transparency report
      16. (2016) Yahoo was caught surreptitiously monitoring Yahoo Mail messages for the NSA, resulting in EFF lawsuit


  7. Advertising Abuses & Corruption:

    1. DDG exploited a room at FOSDEM for commercial gain, to deliver a sales pitch despite its proprietary non-free server code, then dashed out without taking questions. Shame on FOSDEM organizers for allowing this corrupt corporate abuse of precious resources.
    2. Tor Project accepts an annual $25k "contribution" (read: bribe) from DDG, so you'll find that DDG problems are down-played by those close to the Tor Project (e.g. EFF). This is likely why Tor Browser always defaults to using DDG (which DDG conceals from their disclosure) and why Tor Project endorses DDG over Ss -- ultimately against the interests of the privacy-seeking Tor community. This default search engine exploits The Tyranny of Convenience. The EFF also pimps DDG -- a likely consequence of EFF's close ties to Tor Project.
      (click to expand details on how Tor Project responds to criticism about their loyalty toward DuckDuckGo [their benefactor] in IRC)
      18:20 < psychil> if torbrowser is going to be recommended, it should also be open to scrutiny.  in the absence of that transparency, you create an untrustworthy forum.
      18:20 < psychil> we've seen a loyalty from TB toward duckduckgo, but DDG is in partnership with Verizon, Yahoo, AOL et. al.
      18:21 < psychil> all CISPA-sponsoring companies
      18:22 < psychil> if ppl choose to trust them fair enough, but this trust shouldn't be pushed on every user weighing their choice of browsers
      18:26 -!- mode/#tor [-b psychil@*!*@*] by ChanServ
      18:27 < YY_Bozhinsky> psychil: i am using Tor (thanks to Tor Devs)... PLUS brain - good bundle. I am happy. And please, don't rush to change Reality (do it slowly with love and respect). Because it's home for many ppl. They construct their lives in it. Think twice before ruining that. Please.
      18:27 -!- mode/#tor [+b psychil!*@*] by ChanServ
      18:27 -!- psychil was kicked from #tor by ChanServ [wont stop the FUD]
      
      Tor Project is notoriously fast to censor any discourse (no matter how civil) when it supports a narrative that doesn't align with their view / propaganda.






Editor's note: We published a (now-outdated) version before. The author notes: "The significant changes are: DDG is now MS-hosted (2.3), DDG gets commission when Amazon or eBay links are followed, Verizon-Yahoo is no longer a partner, and there's more dirt on DDG donees (TechFreedom, "Public Knowledge", "Demand Progress", "Fight for the Future", and "Access Now")"

Recent Techrights' Posts

The Brand 'Watsonx' is a Terrible Name for IBM 'Hey Hi' (Chatbots) Because Watson Agreed With Adolf Hitler
Almost a century has passed and IBM still believes that selling "intelligence", chatbots in particular, should be done under the name "Watson"
Digg's Latest Incarnation Already Failed, It's Infested With LLM Slop
Many submissions go to slopfarms and some get summarised by slop
Microsoft-Controlled Media With Embargo and Press Operatives
This won't be the last example of media manipulation for narrative control or face-saving "damage control"
EPO "Cocaine Communication Manager" - Part III - It's in His Eyes
Workers are free to draw their own conclusions
Former Debian Project Leader Branden Robinson Cautions Against Cover-up and Censorship in Debian
Debian drama. Again.
 
Techrights Has Over 1,000 Good Articles 'in the Tank'
Drafts, notes, and lengthy documents
New Article Challenges Solicitors Regulation Authority (SRA) for Choosing the Wrong SLAPP Cases to Investigate
The one point we can agree on is that SRA does not know how to correctly select the worst culprits/offenders
Why IBM is Still Scary and Dangerous
Keep a distance from "Big Blue" Bully
Measuring the Growth of Our Mission and Community
Something between experiment and prototype
Richard Stallman in the United States - Part III - Georgia Tech Did a Fine Job Upholding Free Speech Principles
The real problem was social control media (toxic)
Debian's Master is Deleting Criticism of SystemD and Other Things (On-Topic and Published by Debian Developers), Resorts to the Excuse Messages Are "Too Long"
Censorship serves nobody except the masters that control this censorship
Gemini Links 21/02/2026: Veganism and DeskPi RackMate T0
Links for the day
On The Web, XBox Already a Dying Breed
Down to about 0.05% on large machines, based on statCounter [...] Microsoft will never publicly admit or say how many billions it lost on the XBox
2026 a Year of 'Top-Down' Microsoft Layoffs (Management First)
Stay tuned for what comes next
Your "Likes" Aren't Yours and They're Mostly "Worthless Clicks"
Social hermits are not popular, irrespective of how many "Facebook friends" or "likes" they get
Waggener Edstrom/Frank Shaw Lied, There Are Definitely Microsoft Layoffs
Microsoft never issued a formal statement, it made allusions by proxy
Slop Hype Makes Our Core Technology Less Reliable and Far Less Resilient (We Pay for the Catastrophe That Follows)
Only slop-free projects can be trusted
Going for 1,000 (Days of Uptime)
universal records are vastly better
Firefox is No-Go in China, Not Even 1% "Market Share" Anymore
Given Mozilla's utterly rubbish marketing these days (politics over technical aspects), set aside the cheerleading for slop, there's hardly a chance of Mozilla Firefox reaching or exceeding 10% again
Links 21/02/2026: Tensions Over Iran and Illegal Cheeto Tariffs, Presidential Approval Sags
Links for the day
Links 21/02/2026: "Moving Away From Cloudflare", Many Layoffs or Shutdowns in Games (Including XBox/Microsoft)
Links for the day
GNU Linux-libre is a Grown-Up Today
"before that, every distro that wanted to respect its users' freedom had to remove itself all of the binary blobs that were distributed as part of the kernel Linux's so-called sources"
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, February 20, 2026
IRC logs for Friday, February 20, 2026
Gemini Links 21/02/2026: "The Evil of Action" and Slop Bots Causing Great Harm Online (Not Just the Web)
Links for the day
Like a Shell
Overreactions can backfire
Not Only Leaders of XBox Got Sacked (Layoffs)
Phil Spencer and Sarah Bond got laid off
9PM on a Friday Night: Microsoft Says the Layoffs Are Not Layoffs
We've said for a long time that XBox is doomed this year
Gemini Links 20/02/2026: Misfin Server and Magic in Programming
Links for the day
analytics.usa.gov Reckons Windows "Market Share" Fell to Just 38%, Vista 11 Not Even a Third of Windows Users
This coming summer Vista 11 turns 5
The New Digg.com is Slop
Slop "summaries" and Serial Sloppers are drowning out the site with fake 'articles' (plagiarism)
Linus Torvalds: Bill Epsteingate Good Enough for Me to Wine and Dine With
Torvalds is more connected to Jeffrey Epstein than Richard Stallman ever was
Our Uptimes Are Always Better Than Any Site That Uses Clownflare
Clownflare as a company operates like a cult
GNU/Linux Apparently Rose to 6% in Uzbekistan
If accurate, this represents a new problem for Microsoft and a big win for Software Freedom
Sponsored Videos and 'Articles' in The Register MS, Stenography as a Service/Product
They should more accurately label these actors
It's Friday Again and Many People Leave IBM for Good (IBM Should be Reported for Illegal NDAs That Hide Layoffs)
we very seldom see anyone deviating a lot from the "template-like" narrative, let alone mentioning "layoffs" or "RA" or some other term that implies non-consensual departure
The Little Clique of Sloppers/Spammers About "Linux" Got Even Smaller
Thankfully there are still genuine and legit GNU/Linux sites out there
Links 20/02/2026: Microsoft Intentionally Kills Older Hardware, "The Story of XBox" Shows How Defective Microsoft Hardware Really Was
Links for the day
Turkmenistan One of Many Countries Where Microsoft Fell to Distant Third in Search
We expect many layoffs in Bing some time soon
Don't Wait for "Red Hat Layoffs" Because After Bluewashing They're IBM RAs and Don't Wait for "IBM Layoffs" Because They're Perpetual
IBM layoffs are silent and "forever" (small trickle that never ends and is widespread - after all IBM is a very global and ubiquitous firm)
Links 20/02/2026: Standards, Science, and Politics
Links for the day
What Do People Ever Buy From Microsoft Anyway (Not PCs)?
Microsoft sells two things these days: 1) vapourware/promises. 2) its stock.
Gemini Links 20/02/2026: "Mainstream Unix, Underground Unix", Slop Staging DDoS Attacks Against Small Sites
Links for the day
IBM Inclusivity: Red Hat Summit is for Rich Sponsors Like Microsoft and Rich Guests Who Pay $500 a Day
Nothing signals societal tolerance more than paying a large military contractor
GNU/Linux Adoption is Higher in Richer Countries
Is it because freedom is actually expensive - something that only privileged people can pursue?
Links 20/02/2026: Windows TCO Versus Deutsche Bahn, Europe Seeks More Independent Digital Future
Links for the day
IBM, Red Hat and Fedora: Don't Say "Master", It Offends People. Also IBM, Red Hat and Fedora: "Master Podman".
The hypocrisy at Red Hat and Fedora shows no boundaries
IBM Layoffs Aren't Just in IBM 'Proper'
Who is still using Lotus after the HCL move?
The Register MS Gets Paid by Gartner to Promote a Ponzi Scheme for Gartner, Microsoft, and Others
The credibility of that site will suffer because it tries to sell a major scam to its audience
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, February 19, 2026
IRC logs for Thursday, February 19, 2026
Gemini Links 19/02/2026: "Towards a Gemini Famicom Resource" and Dumping Microsoft
Links for the day
IBM Behaves Like a Company Looking for Loose Change Between Sofa Cushions
Chasing laid-off workers for dollars and even pennies, making excuses and devising loopholes (such as PIPs) to flout severance obligations
Microsoft Found Another Bailout Opportunity: Killing People
Good thing that Nadella is not racist!
No "Smart Mobs" (Social Control Media) in BRIC?
It looks like the "Social" "Media" sites tracked by statCounter see little from (or of) BRIC, and moreover it is declining fast
The Few Slopfarms We Saw Today
The sentiment has changed a lot
Links 19/02/2026: Protecting Framework Laptop 13, Hardware Drive Shortages
Links for the day
In Africa's Second-Largest Nation, Democratic Republic of the Congo (DRC), Opera 10 Times Bigger Than Firefox (and GNU/Linux Now at 5%)
This will become an accessibility problem
Links 19/02/2026: "A.I.pocalypse" Inevitable and "Butlers to LLMs"
Links for the day
An Inherently Royal (Monarchs') Legal System Where Size Matters (Big Capital Eats the Small)
This reinforces the notion that justice is only for those who can afford it
These Statistics Should Keep Microsoft Shareholders Awake at Night
Windows is, in general (all versions collectively), declining over time
Economic Failure and Other Harsh Realities Have Nothing to Do With Slop 'Innovation'
Advanced propaganda, not advanced 'AI' [...] They attack workers while insulting their intelligence
Spaniards Shutting Down MElon's Digital Weapon of "Smart Mobs"
Are the Spanish people already acting based on gut feeling and shunning/shutting out the provocation vector?
Bitcoin: government engagement contradictions
Reprinted with permission from Daniel Pocock
Richard Stallman in the United States - Part II - "Haters Gonna Hate"
we shall carry on with this series at the right pace
Typical! Solicitors Regulation Authority (SRA) Tells Victims of Fraud to Wait 10 Weeks
justice delayed is justice denied
EPO Union Leaders in Rijswijk Explain Where EPO Strikes Stand and How to Prepare for Next Week's
We have some revelations to share in a few days
statCounter: Only One in 350 Iranians Would Use Microsoft for Web Search
Microsoft is trying to fake "demand"
Slides Shown a Week Ago by the EPO's Staff Committee Ahead of the Second Very Large Strike
This coming weekend we'll drop a 'bombshell' of sorts
EPO "Cocaine Communication Manager" - Part II - Illegal Drug Addicts Mobbing the Wrong People, This Will Definitely Backfire
This year may well be the last year of Team Campinos. Nobody will hire them after that.
Mass Layoffs (But Silent Layoffs) Still Happening in IBM, You Need Only Look Closely (There Are NDAs, PIPs, 'Early Retirement' Sweeteners and IBM - Like Microsoft - Skirts the WARN Act)
the layoffs are definitely happening
Microsoft's "AI CEO" (Slop Propagandist) is Projecting, Many Microsoft "Jobs to be Replaced With All-Indian Low-Paid Staff in 12 Months"
Windows is perishing
Very Little Slop
We are not finding much slop anymore
Links 19/02/2026: Illegal Kangaroo Court for Patents Attracts Aggressive Firms, Public Domain Review Grows
Links for the day
Gemini Links 19/02/2026: Taxing the Rich, Raspberry Pi 4 Tinkering
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, February 18, 2026
IRC logs for Wednesday, February 18, 2026