Bonum Certa Men Certa

DuckDuckGo Privacy Browser Isn’t Private

Reprinted with permission from Ryan Farmer.

It’s been a while since I’ve blogged about DuckDuckGo, the “branding condom” for Microsoft Bing.



The company is basically “fake”. It has a tiny little office, very few employees, almost all of the results are from Microsoft Bing, and it transmits the search parameters to Microsoft to get those results.



"About the only good thing about DuckDuckGo and Microsoft is, they did stop censoring my blog."About the only good thing about DuckDuckGo and Microsoft is, they did stop censoring my blog. I see traffic coming in from them now. I think Microsoft changed their search index and DuckDuckGo changed because Bing did.



The company has been caught exempting Microsoft trackers, then claimed that “Oh yeah, it turns out we had that deal with Microsoft to not block THEIR trackers in our ‘Privacy’ Browser.”



Later, Microsoft let them change the agreement, but the fact that they were dishonest with their users and allowed one of the biggest surveillance monsters through, quietly, shows how much you can trust DuckDuckGo [1] [2] and Gabriel Weinberg.



And it’s even hosted in Microsoft Azure, where Microsoft can take a look at everything that’s going on inside the “DuckDuckGo” server. So they have the technical capabilities to look at who is making the searches, and what the searches are.



DuckDuckGo processing



DuckDuckGo processing



As if this wasn’t enough, DuckDuckGo has tracking scripts and a tracking pixel of their own that follow you around on their site, if you don’t block this, called “Improving DuckDuckGo”.



"Also notice all the Social Media crap it got and something called “bing_market”."Adguard Tracking Protection, one of the ad blocking lists for trackers, includes the tracking pixel and the Improving DuckDuckGo script, so you get warnings from your ad blocker that DuckDuckGo is tracking you.



Also notice all the Social Media crap it got and something called “bing_market”. LOL



But lately, they have themselves a new “scam”. DuckDuckGo “Privacy Browser”.



"Plain old Mozilla Firefox browsing around with no privacy extensions at all is actually more private than DuckDuckGo on Android."One reason this is a “scam”, so to speak, is that it doesn’t actually block much tracking on Android.



Plain old Mozilla Firefox browsing around with no privacy extensions at all is actually more private than DuckDuckGo on Android.



On iOS, where all browsers inherit whatever Apple has done to WebKit, DuckDuckGo’s browser is better than Android, but still not great.



These are not platform limitations. DuckDuckGo actually just doesn’t block very much tracking.



On Privacy Tests, by far, Brave had the most green checkmarks for blocking Web tracking.



Another reason you know something is “not right” with DuckDuckGo’s “Privacy” Browser, is that the desktop version only supports the least private, least secure operating systems on the market. Windows, and Mac.



It has completely left out Linux distributions, where for the most part the OS is just an OS, and doesn’t send your keystrokes, application launches, crash data, or hard drive contents to anyone, whereas Windows and Mac do, automatically, behind-the-scenes, without asking the user.



Even if DuckDuckGo’s “Privacy Browser” wasn’t questionable, prima facie, they do encourage insecure and non-private operating systems, thus ensuring their users will be spied on by the OS vendors.



"DuckDuckGo actually just doesn’t block very much tracking."The reason why DuckDuckGo can “block Web trackers” and have that hardly matter at all, is because the threat landscape of the Web is constantly growing.



Many years ago, it was sufficient to just block certain ad and tracking servers, and browse with JavaScript turned off.



Today, led by Google, Microsoft, and Mozilla, the Web platform is becoming more menacing.



You can block specific “content”, but the threat actors are operating at a higher scale than ever, leveraging “questionable” Web technologies.



Unless your browser is doing something to partition, sandbox, and disable these technologies, and either most of them or all of them, to confuse these “higher level attacks” and fingerprinting attempts, you’re really not being protected by anything “just blacklisting some resources”.



"It has completely left out Linux distributions, where for the most part the OS is just an OS, and doesn’t send your keystrokes, application launches, crash data, or hard drive contents to anyone, whereas Windows and Mac do, automatically, behind-the-scenes, without asking the user."That’s certainly better than nothing, but it’s not enough.



The most sophisticated thing about Chromium-based Web browsers is how many ways they give the Web site to attack and profile the user. Chrome and Edge are the worst, Brave is fixing a lot of it. At least they try to help the user.



Brave and LibreWolf are the only two desktop browsers left to recommend.



I firmly believe that the only purpose of DuckDuckGo’s Browser is to route traffic to DuckDuckGo (captive audience), and perhaps screw up everyone else’s ad network, but this is the same behavior that you see Microsoft Edge engaging in.

Recent Techrights' Posts

Microsoft's Serial Strangler and Matthew J. Garrett Join Forces in Trying to Gag Techrights (for Exposing Microsoft Corruption and Crimes Against Women)
Whose terrible idea was it?
Free University of Bozen-Bolzano Proud to Host Free Software Talk by Richard Stallman
ahead of Monday's talk
Slopwatch: Anti-Linux Machine-Generated FUD (LLM Slop) From GBHackers, CybersecurityNews, and Guardian Digital, Inc (Google News Promotes Slop Plagiarism, Misinformation)
Companies that lie try to drown out the signal with falsehoods
 
Good Explanation of Why IBM Has Chosen to Conceal Mass Layoffs (of 'Expensive' Staff) as "R.T.O." (Even For People Who Never Worked at the Office to Which They're Ordered to "Return")
Many remaining IBM (or Red Hat) workers in Europe are in "cheaper" places such as Brno
Links 22/02/2025: Labour Department Investigates Microsoft Infosys Amid Mass Layoffs, Large Law Firms Caught Red Handed With LLM Slop (Defrauding Clients and Courts)
Links for the day
Gemini Links 22/02/2025: Analog Stuff, Sigil, and SSGs
Links for the day
Microsoft's Market Share in Cameroon Falls to New Lows
This means a lot of Android users (iOS is about 4 times smaller), but Android does not mean freedom
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, February 21, 2025
IRC logs for Friday, February 21, 2025
The Streisand Effect is Real
So don't be evil. Also, don't strangle women.
Links 21/02/2025: Linux Foundation Openwashing, Microsoft Copilot Goes Down
Links for the day
Links 21/02/2025: Doomscrolling and European Ham Radio Show
Links for the day
Links 21/02/2025: TikTok Layoffs, WebOS Software Patents in Bad Hands
Links for the day
Gemini Links 21/02/2025: Web Browsers, Mechanical Shortcuts, and Internet Hygiene
Links for the day
Richard Stallman 'Only' Founded the FSF
there's no reason to be upset at the FSF for keeping their founder in the Board
Techrights Disconnected From the United States Two Years Ago
Did people really need to wait for the US government to become this hostile towards the media before recognising the threat?
Before Trying Censorship by Extortion the Serial Strangler From Microsoft Literally Begged Us to Delete Pages
This is very clearly just a broad campaign of intimidation
Hype Watch: Weeks After Microsoft Disappointed Investors With "Hey Hi" It's Trying Some "Quantum" Hype (Adding Impractical Vapourware to Accompany This Hype and Even LLM Slop in 'News' Clothing)
Remember "metaverse"? What happened to media hype about "blockchain" and "IoT"?
Report About February Mass Layoffs at Microsoft (Third Wave of Microsoft Layoffs in 2025) Comes Back From the Dead
Yesterday we wrote about an article in CRN (reporting Microsoft layoffs) being removed without any reasons specified
Links 21/02/2025: Myanmar Scam Centre and Disruptions at USPTO
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, February 20, 2025
IRC logs for Thursday, February 20, 2025
gbhackers.com is Not Hackers, It's LLM Slop Outputs (Fake 'Articles') That Attack 'True Hackers'
A site called linuxsecurity.com keeps doing this and now we see the slopfarm gbhackers.com doing the same
Gemini Links 20/02/2025: Law of Warming and Cooling, Health, and Devlog
Links for the day
linuxsecurity.com Continues to Spread Lies or Machine-Generated FUD (Microsoft LLMs Likely the Source) About OpenSSH and Linux
this LLM problem is global
Links 20/02/2025: Microsoft Infosys Layoffs and IRS Layoffs (Good News for Rich Tax Evaders)
Links for the day
IBM Layoffs in Europe Already Happening or Underway (UK and Spain). They Try Not to Call These "Layoffs".
"CIO" in particular was repeatedly mentioned lately, as was Consulting
People Who Came From Microsoft Demanding Removal of Articles About Them, About Microsoft, and About Microsoft GitHub is "Generous" (According to Them)
Imagine choosing a law firm that borrows money in the same year just to avoid overdraft in the bank!
Possibly a Third Round of Mass Layoffs at Microsoft in 2025 ("Cloud Solution Architects, Customer Roles"), Report Removed or Censored
This is literally the top story for "microsoft layoffs" right now
Instead of 'DoS Protection' Cloudflare is Allegedly Conducting 'DoS Attacks' on Users of Browsers Other Than Firefox and GAFAM's DRM Sandboxes (Chrome, Safari and Others)
If you value the Web, you will avoid Cloudflare
Mixing Real With Fake in One 'Article' (by "Director of Content, Help Net Security")
From what we can gather, he got machines to generate some slop for him
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, February 19, 2025
IRC logs for Wednesday, February 19, 2025