Bonum Certa Men Certa

Why You Should Avoid DuckDuckGo (DDG) 2021 Edition, Now Microsoft-Hosted and With Extra Privacy Risks

Reddit seems to be censoring such revelations right now (even a year after publication), as if sponsors are more important than facts




There are substantial privacy and civil liberty issues with DuckDuckGo. Here they are spotlighted:

  1. Nefarious History of DDG founder & CEO:

    1. DDG's founder (Gabriel Weinberg) has a history of privacy abuse, starting with his founding of Names DB, a surveillance capitalist service designed to coerce naive users to submit sensitive information about their friends. (2006)

      (expand related trivia on Reddit censorship)

      The "history" link above refers to a Reddit post rich in accurate facts-- verifiable facts. The moderator (trai_dep) added flair to falsely flag the content as "speculative" to cast doubt (to create FUD whilst falsely accusing the other of just that - to project. The pot is calling the kettle black). No counter evidence was given.

      Then over a year later Reddit censored the post in a manner that suggests a rogue/buggy robot "automatically" filtered it as "spam". They duck accountability by blaming the bot. Obviously nothing in the post could even remotely be construed as spam. Are we to believe that a robot would censor an old archived post, and no human reviews censorship by some unleashed bot loose in the wild? Anyway, this is why the link is a mirrored WaybackMachine document.

    2. Weinberg's motivation for creating DDG was not actually to "spread privacy"; it was to create something big, something that would compete with big players, according to an interview between Weinberg and Susan Adams. As a privacy abuser during the conception of DDG (Names Database), Weinberg sought to become a big-name legacy. Privacy is Weinberg's means (not ends) in that endeavor. Clearly he doesn't value privacy -- he values perception of privacy.

  2. Direct Privacy Abuse:

    1. DDG was caught violating its own privacy policy by issuing tracker cookies, according to Alexander Hanff (CEO of Think Privacy and a data security and ethics expert on staff at Singularity University).

    2. DDG was again caught violating its own privacy policy by fingerprinting browsers. DDG responded not with counter evidence, but simply a plea to trust them.

    3. DDG's third violation (2021): Microsoft hosts DDG's service and also supplies Bing search results for the same transaction. This means Microsoft sees both sides of the transaction and can link your IP address (i.e. identity) to your search query that Bing processes. DDG makes this false statement: "we never share any personal information with any of our partners. The way it works is when we call a partner for information, it is proxied through our servers so it stays completely anonymous. That is, any call to a partner looks to the partner as it is from us and not the user itself, and no user personal information is passed in that process (e.g. their IP address). That way we can build our search result pages using these 100s of partner sources, while still keeping them completely anonymous to you" (emphasis added). While it may be true that DDG doesn't transmit users' IP addresses to Microsoft, Microsoft has already seen users' IP addresses via Azure. That combination of data given to Microsoft makes DDG's statement a lie. The MS Azure privacy policy refers us to the general MS privacy policy, which confirms that Microsoft collects IP addresses.

      DDG can change their hosting provider at any time. And they have-- they migrated from Amazon AWS to Microsoft. As of the drafting of the article herein, DDG is still MS-hosted. To verify for yourself that DDG is still MS-hosted as you read this, Linux Tor users can run: torsocks whois "$(torsocks dig +tcp +short +time=4 +tries=1 duckduckgo.com @resolver1.opendns.com)"; web users can verify by obtaining DDG's IP address from digweb and then visit https://ipinfo.io/ <IP address from digweb>.

    4. DDG's app sends every URL you visit to DDG servers. (discussion).

    5. DDG is currently collecting users' operating systems and everything they highlight in the search results. (to verify this, simply hit F12 in your browser and select the "network" tab. Do a search with JavaScript enabled. Highlight some text on the screen. Mouseover the traffic rows and see that your highlighted text, operating system, and other details relating to geolocation are sent to DDG. Then change the query and submit. Notice that the previous query is being transmitted with the new query to link the queries together)

    6. When clicking an ad on the DDG results page, all data available in your session is sent to the advertiser, which is why the Epic browser project refuses to set DDG as the default search engine.

    7. DDG blacklisted Framabee, a search engine for the highly respected framasoft.org consortium.

  3. Censorship: Some people replace Google with DDG in order to avoid censorship. DDG is not the answer.

    1. DDG is complying with the "celebrity threesome injunction".
  4. Harmful impact on net neutrality:

    1. DDG attempts to play both sides of the network neutrality fight. DDG donated $50k (as of 2020) to an opponent of net neutrality who ironically calls themselves "TechFreedom". Then DDG also donated $50k to an opponent of TechFreedom, "Public Knowledge", who actually calls for "NO rules preventing blocking of website", yet Public Knowledge blocks Tor users from their own website by issuing a "403 forbidden" error. Public Knowledge intends to coach Congress on "How Interoperability Can Rein In Big Tech", yet they themselves have broken interoperability with Tor as they make themselves electronically unreachable outside of Facebook, Twitter, Youtube, and Gmail.
  5. CloudFlare: DDG promotes one of the most pernicious privacy abusing tech giants and adversary to the Tor community: CloudFlare Inc. DDG results give high rankings to CloudFlare sites, thus leading users into the largest privacy abusing walled garden on the web.

    Supporting CloudFlare compromises privacy, net neutrality, democracy, and anonymity:

    1. Anonymity: CloudFlare DoS attacks Tor users, causing substantial damage to the Tor network.
    2. Privacy: All CloudFlare sites are surreptitiously MitM'd by design.
    3. Net neutrality: CloudFlare's attack on Tor users causes access inequality, the centerpiece to net neutrality.
    4. DDG T-shirts are sold using a CloudFlare site, thus surreptitiously sharing all order information (name, address, credit card, etc) with CloudFlare despite their statement at the bottom of the page saying "DuckDuckGo is an Internet privacy company that empowers you to seamlessly take control of your personal information online, without any tradeoffs." (2019)
    5. DDG hired CloudFlare to host spreadprivacy.com (2019)

    DDG also donated over $186k to a series of privacy-abusing CloudFlare sites run by "Demand Progress", "Fight for the Future", and "Access Now". Despite getting nearly $70k from DDG, FFTF continues to expose their own patrons to the very evil they claim to be fighting. Demand Progress, who received $100k from DDG, posts their claim to "contest concentrated corporate power" directly on their CloudFlare site, as well as the claim that they educate people on "the impacts of corporate power over our economy and democracy" as they "confront corporate bad actors", all of which is bluntly unaligned with their CloudFlare patronage. Access Now, who received $16k from DDG, also used CloudFlare to block Tor users, hypocritically acting against their own mission to "fight for a free and open internet, advocating for the Net Neutrality principle that internet access should be offered to everyone on a nondiscriminatory basis, without favoring certain websites, applications, or services." DDG apparently does little inspection on those they donate to, as if they're merely selecting recipients with names that promote their privacy propaganda strategy to boost user loyalty.

  6. Harmful Partnerships with Adversaries of Privacy Seekers:

    1. DDG gets paid a commission when users visit eBay from DDG. Note that eBay has been caught sending JavaScript that snoops on their own customers by port scanning the LAN and reporting back to eBay. Moreover, eBay transactions are impossible without using PayPal, and PayPal abuses privacy in countless ways.

    2. DDG gets paid a commission when users visit privacy-abuser Amazon.

      image of JavaScript event that runs when clicking a DDG result

      DDG also uses AWS to crawl the web, which Amazon profits from. The Amazon partnership triggers substantial ethical issues:

      1. Amazon is making an astronomical investment in facial recognition which will destroy physical travel privacy worldwide.
      2. Amazon uses Ring and Alexa to surveil neighborhoods and the inside of homes.
      3. Amazon paid $195k to fight privacy in CA. (also see http://cal-access.sos.ca.gov/Campaign/Committees/Detail.aspx?id=1401518&view=late1)
      4. Amazon runs sweat shops, invests in climate denial, etc. The list of non-privacy related harms is too long to list here.
    3. DDG feeds privacy-abuser Microsoft by patronizing the Bing API for search results, using Microsoft's ad network, using Outlook email service, hiring Microsoft to host DDG's search site and host DDG's crawler.

      1. The Dutch government commissioned a study which found Microsoft Office products to have several GDPR violations.
      2. Microsoft finances AnyVision to equip the Israeli military with facial recognition to be used against the Palestinians who they oppress.
      3. Microsoft paid $195k to fight privacy in CA. (also see http://cal-access.sos.ca.gov/Campaign/Committees/Detail.aspx?id=1401518&view=late1)
      4. DDG hires Microsoft for email service: torsocks dig @8.8.8.8 mx duckduckgo.com +tcp | grep -E '^\w' ==> "...duckduckgo-com.mail.protection.outlook.com"
    4. (historic) DDG is was previously partnered with Yahoo (aka Oath; plus Verizon and AOL by extension).

      (click to expand details)

      DDG helped Yahoo profit for several years by patronizing Yahoo's API for search results, and also through advertising. Mention of Verizon, Yahoo, and Oath have been quietly scrubbed from DDG's disclosures. There was no official announcement, so we cannot confirm whether there are still ties to Verizon et al.

      The Verizon corporate conglomerate is evil in many ways:

      1. Yahoo, Verizon, and AOL all supported CISPA (unwarranted surveillance bills)
      2. Yahoo, Verizon, and AOL all use DNSBLs to block individuals from running their own mail servers, thus forcing an over-share of e-mail metadata with a relay.
      3. Verizon and AOL both drug test their employees, thus intruding on their privacy outside of the workplace.
      4. Verizon is was an ALEC member (a powerful superPAC designed to put corporate political interests ahead of human beings). (edit: Verizon dropped ALEC membership in 2018)
      5. Verizon supports the TTP treaty.
      6. Yahoo voluntarily ratted out a human rights journalist (Shi Tao) to the Chinese gov w/out warrant, leading to his incarceration.
      7. Yahoo recently recovered "deleted" e-mail to convict a criminal. The deleted e-mail was not expected to be recoverable per the Yahoo Privacy Policy.
      8. Verizon received $16.8 billion in Trump tax breaks, then immediately laid off thousands of workers.
      9. (2012) Will block or degrade calls to disrupt customer use, at the request of law enforcement, with no court oversight.
      10. (2014) Verizon fined $7.4 million for violating customers’ privacy
      11. (2016) Verizon fined $1.35 million for violating customers’ privacy
      12. (2018) Verizon paid $200k to fight privacy in CA. See also California records.
      13. (2018) Verizon apparently caught taking voice prints
      14. unfavorable record retention policy (scroll down to Verizon)
      15. (2015) Only 2 stars on EFF transparency report
      16. (2016) Yahoo was caught surreptitiously monitoring Yahoo Mail messages for the NSA, resulting in EFF lawsuit


  7. Advertising Abuses & Corruption:

    1. DDG exploited a room at FOSDEM for commercial gain, to deliver a sales pitch despite its proprietary non-free server code, then dashed out without taking questions. Shame on FOSDEM organizers for allowing this corrupt corporate abuse of precious resources.
    2. Tor Project accepts an annual $25k "contribution" (read: bribe) from DDG, so you'll find that DDG problems are down-played by those close to the Tor Project (e.g. EFF). This is likely why Tor Browser always defaults to using DDG (which DDG conceals from their disclosure) and why Tor Project endorses DDG over Ss -- ultimately against the interests of the privacy-seeking Tor community. This default search engine exploits The Tyranny of Convenience. The EFF also pimps DDG -- a likely consequence of EFF's close ties to Tor Project.
      (click to expand details on how Tor Project responds to criticism about their loyalty toward DuckDuckGo [their benefactor] in IRC)
      18:20 < psychil> if torbrowser is going to be recommended, it should also be open to scrutiny.  in the absence of that transparency, you create an untrustworthy forum.
      18:20 < psychil> we've seen a loyalty from TB toward duckduckgo, but DDG is in partnership with Verizon, Yahoo, AOL et. al.
      18:21 < psychil> all CISPA-sponsoring companies
      18:22 < psychil> if ppl choose to trust them fair enough, but this trust shouldn't be pushed on every user weighing their choice of browsers
      18:26 -!- mode/#tor [-b psychil@*!*@*] by ChanServ
      18:27 < YY_Bozhinsky> psychil: i am using Tor (thanks to Tor Devs)... PLUS brain - good bundle. I am happy. And please, don't rush to change Reality (do it slowly with love and respect). Because it's home for many ppl. They construct their lives in it. Think twice before ruining that. Please.
      18:27 -!- mode/#tor [+b psychil!*@*] by ChanServ
      18:27 -!- psychil was kicked from #tor by ChanServ [wont stop the FUD]
      
      Tor Project is notoriously fast to censor any discourse (no matter how civil) when it supports a narrative that doesn't align with their view / propaganda.






Editor's note: We published a (now-outdated) version before. The author notes: "The significant changes are: DDG is now MS-hosted (2.3), DDG gets commission when Amazon or eBay links are followed, Verizon-Yahoo is no longer a partner, and there's more dirt on DDG donees (TechFreedom, "Public Knowledge", "Demand Progress", "Fight for the Future", and "Access Now")"

Recent Techrights' Posts

FOMO (Fear Of Missing Out) Has Weakened If Not Ruined What's Left of Big Media
Many things that have existed for decades are now being rebranded as "AI"
SLAPP Censorship - Part 97 Out of 200: Garrett in Hiding (From the Simple Observable Fact He's Closely Connected to the Microsofter Who Strangles Women, Tells Women to Kill Themselves, and Worse)
They use one another; they are coordinating this via the SLAPP industry in another continent
Rust Outsources its Financing (or Financial Control) to Microsoft
How long before the third "E"?
IBM's Shares Fell Nearly 13% in One Day (Including After Hours)
its main product is false promises
European Patent Office (EPO) Series: "Operation Influencer"
Costa's political career was far from finished
GNU/Linux Usage Rising Among Gamers, But "Hardware Survey Data Not Available."
Not anymore, not for now anyway
Quantum Quantum Quantum Quantum (Pump, Then Dump)
What has IBM become?
KDE Has Long Used Dragons, and Dragons Come From Hatched Eggs
That Microsoft Lunduke tries to paint this as some "trans agenda" thing says a lot about Microsoft Lunduke and his COVID-19-damaged brain
IBM Announces 5 Billion Dollars "Invested" in "AI", in "Security", and 10 Billion Dollars for "Quantum", But IBM Does Not Have This Kind of Money (It's Fake News to Manipulate the Share Price)
IBM has fast-growing debt and liabilities, it does not intend to invest this kind of money, it's a smokescreen and false promises timed to alleviate the sagging share price (52-week low)
 
Mass Layoffs Expected at Microsoft in July 2026
They're preparing more "lists" of people
Reflection on EPO Leadership That Harbours Cocaine, IBM Leadership That Pumps-and-Dumps the Shares, and More
ManCity replaced Manuel Pellegrini with a more famous manager it didn't envision winning 20 titles in 10 years (it could only hope) [...] Team-building is something that "Pep" seemed to be good at, as was Jürgen Klopp
Pump and Dump by IBM Insider Traders: Nickle LaMoreaux, Gary Cohn, James Kavanaugh, Arvind Krishna, Robert Thomas, and Others
the shares are already collapsing
Links 04/06/2026: Microsoft Threatening Security Researcher for Naming Back Doors in BitLocker, "Demand is Booming for" Old Tech
Links for the day
Gemini Links 04/06/2026: "Word Vomit", Slop", and Moving to Gopher/Gemini
Links for the day
"Format Sovereignty" Can Only be Accomplished With LaTeX or OpenDocument Format (ODF) or Vendor-Neutral Standards for Editable Documents
Microsoft is, in effect, above the law
The Cyber Show on the Importance of Software Freedom and Why GNU/Linux Could Not be Stopped
an excellent article
Drew DeVault Can Still Redeem His Reputation. Revisiting His Attacks (and Attack Site) on Richard Stallman Might be a Good Start.
DeVault has openly apologised (this past spring)
The Register MS is Publishing Paid SPAM; Some of It is Designed to Prop Up the "AI" Pyramid Scheme
The Register MS participates in scams
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, June 03, 2026
IRC logs for Wednesday, June 03, 2026
Jumping Up and Down on the Shoulders of Giants, Never Talking About What Bill Gates Did
We're back to 2019
Despite LLM Slop or Chatbots, Our Traffic Has Doubled Since We Moved Everything to the UK (in 2023)
The demise of news sites was not what we thought it would be
Software Developers Attacked by Plagiarism Engines Because These Developers Can Teach People How to Exercise Control, Not Outsource to Monopolies of Slop and Back Doors
"Universities should be telling industry what is to be done next, not the other way about. Present education policy has the tail wagging the dog."
Communicating With Freedom - Part I - Developing “Quibble” and Improving GNU LibreJS in the Process
In the next part we shall examine where things currently stand
Quantum Computers Are "All the Rage" (35 Years Ago, What IBM Promises This Year is What People Promised When the CEO Was in His 20s)
"Quantum" hype is high on the agenda
How IBM Removes 15% of Its Staff Without Even Checking Performance of Staff (or Calling That "Layoffs")
Performance Improvement Plan (PIP) as veiled RAs
Links 03/06/2026: Mobile Systems, Openwashing, and New Antenna
Links for the day
Canonical as Reseller of Back Doors in "Ubuntu" Clothing
Microsoft is the antithesis of security and autonomy
Romania Used to be Windows Stronghold, But That's No Longer the Case
Windows was once upon a time so ubiquitous that institutions didn't bother supporting anything except it
When Science and Religion Are on the Same Side, United Against Slop Pushers
The "Mathematics Pope" (sometimes known as "Pope Pi") brought together science and religion, united against technofascists who are mostly college drop-outs who abhor women
Links 03/06/2026: "In Turkey, Criticizing a Corporation Can Land You in Jail" and "Court Bans X Account of Turkey's Oldest Newspaper"
Links for the day
Web Censorship Benefits the Corrupt and the Criminal
More so when corrupt politicians are in charge
Have a "Lifetime" Without Microsoft
The online rage over this is still ongoing
Internet Archive’s Wayback Machine Undoing Censorship of Corporate Wrongdoing
That won't go away anymore
"For Entertainment Purposes Only" But Everyone Must Adopt It for Work and Governance, Say Anti-Scientific Technocrats
"The present mentality around "AI" is like driving to the gym to use a treadmill - it's walking for people who hate fresh air and beautiful changing scenery."
Gemini Links 03/06/2026: Ian Murdock's Ex-wife Footprint in Debian and Alhena 5.6.1 Released
Links for the day
Irish Company statCounter Recognises It Overestimated Microsoft Windows' Market Share in Ireland
it seems like the Irish people are gradually moving away from Windows
Corporate Media Participates in the Lie That Mass Layoffs at GitLab and Loss of Geographic Footprint in More Than a Third of Countries is "AI" and Thus "Success Story"
There's no way to spin this as positive news
Slop Prompting is Not a Coding Skill and Slop Deserves Shunning
Red Hat is hypocritically shunning the very same thing it keeps promoting
IBM colleagues "handed out a PIP and then right after the end date they are gone"
Some go into early 'retirement' to save face
SLAPP Censorship - Part 96 Out of 200: When You Receive Death Threats From Anonymous Sockpuppets/Burner Accounts Connected to People Who Strangle Women and Tell Women to Kill Themselves
Women are not objects and my wife ought not be mentioned in "threats to kill" (how cops have described this)
European Patent Office (EPO) Series: A Tale of Two Antónios - Introducing the Other António
António Costa
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, June 02, 2026
IRC logs for Tuesday, June 02, 2026
Advertisements as Articles in The Register MS
Trust in media
Social Control Media Does Not Improve Reach, It Wastes a Lot of Time
many people still think that no presence in Social Control Media necessarily means invisibility
Links 02/06/2026: New York Times Debunks "Hey Hi (AI) Layoffs" (Excuse, False Narrative), Sheinbaum Publicly Bemoans US Meddling
Links for the day
Despite Mass Layoffs and Culls Dubbed "Buyouts" Google's Debt Doubled in a Year and It's Desperate for Money (to Pay Salaries and Bills)
Google and GAFAM in general have mass layoffs because they have no clear route towards profitability
Gemini Links 02/06/2026: Arch Linux WriterDeck and Papyrix Reader
Links for the day
Bloggers Still Have Considerable Impact on This Planet
Nowadays, in academia almost anywhere in the world, there's growing expectation that lecturers will spend not much of the time doing research or even teaching
The Firing Line Against Techrights
Tomorrow we'll tell a story about campaigns to intimidate us with death threats
The Cyber Show on the Fight Against Technofascism
It's very long (all combined), but nevertheless refreshing
What Efforts to Cancel Richard Stallman Ought to Teach Us About the Media, Including Very Large British Publishers
Richard Stallman is like a modern-age Alfred Dreyfus
After Threats to Greenland Northern Europe Seems to be Moving Away From Microsoft Windows Even Faster
The facts on the ground are, more people/businesses/institutions "get the message"
Claim of 500+ IBM Red Hat Layoffs With Termination Next Month
IBM is doing great... at hiding internal affairs
Slop Did Not Rewire Democracy, It's a Giant Flop
we already see slop giants accepting they'll never make money
The Register MS Embeds in Articles "SPONSORED LINKS" That Link to "AI" Ponzi Scheme/Scam
The circular financing giants are allocating budget for the spam, as do the banks (lenders)
Many Countries Divest From Microsoft
new numbers at statCounter today
European Patent Office (EPO) Series: A Tale of Two Antónios - On the Campaign Trail in Brussels
Part 1
SEO is an Acronym That Stands for Slop Engine Orientation
The Web changed a lot when Web directories, portals, and then social control media gained popularity
IRC Network OFTC is Shedding Off Servers
Down to 17
Julian Assange's Counsel Jennifer Robinson Has Just Won an Award
Jennifer Robinson is relatively young
Schweizerische Bundesbahnen (Swiss Federal Railways) and Richard Stallman
It seems like RMS is receiving endorsement or at least belated recognition from very high-profile institutions
Almost 30 Years After Rob Malda Made Slashdot It Still Inspires New Implementations
Maybe the issue isn't Slash per se, just the complexity of it (which SoylentNews complained about in the past)
Links 02/06/2026: "The Infosec Phrasebook", 'Perfect Randomness' and "Leaving the Tech World Professionally"
Links for the day
Faking Demand for Slop: Google's Search Prompt Becomes Slop Prompt (Bait, Switch, Fake Usage)
If there is no consent, then it's unsustainable
When You Give People (or Companies) Money to Buy Your Own Products and Then Call It "Revenue"
A lot of modern "economics" don't benefit ordinary people (all they get is high inflation rates); they're devaluing money by faking economic activity
IBM is Self-Detonating, the Cheeto-Infused Rally is Another Con by Don
pump and dump
"Quantum" as the "Next Big" Bubble
disappointing and delivering nothing
Links 02/06/2026: "$1.5 Trillion Defense Budget Benefits Billionaire Cheeto Mussolini Supporters", US "Plans to Criminalize Sleeping Outside"
Links for the day
Gemini Links 02/06/2026: Organising Oneself and Killing Off Distracting "Notifications"
Links for the day
SLAPP Censorship - Part 95 Out of 200: The Growing Risk of Tolerating Men Who Abuse and Physically Assault Women
FOSS should not be a "safe harbour" or "hideout" for criminals
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, June 01, 2026
IRC logs for Monday, June 01, 2026