Bonum Certa Men Certa

Why You Should Avoid DuckDuckGo (DDG) 2021 Edition, Now Microsoft-Hosted and With Extra Privacy Risks

Reddit seems to be censoring such revelations right now (even a year after publication), as if sponsors are more important than facts




There are substantial privacy and civil liberty issues with DuckDuckGo. Here they are spotlighted:

  1. Nefarious History of DDG founder & CEO:

    1. DDG's founder (Gabriel Weinberg) has a history of privacy abuse, starting with his founding of Names DB, a surveillance capitalist service designed to coerce naive users to submit sensitive information about their friends. (2006)

      (expand related trivia on Reddit censorship)

      The "history" link above refers to a Reddit post rich in accurate facts-- verifiable facts. The moderator (trai_dep) added flair to falsely flag the content as "speculative" to cast doubt (to create FUD whilst falsely accusing the other of just that - to project. The pot is calling the kettle black). No counter evidence was given.

      Then over a year later Reddit censored the post in a manner that suggests a rogue/buggy robot "automatically" filtered it as "spam". They duck accountability by blaming the bot. Obviously nothing in the post could even remotely be construed as spam. Are we to believe that a robot would censor an old archived post, and no human reviews censorship by some unleashed bot loose in the wild? Anyway, this is why the link is a mirrored WaybackMachine document.

    2. Weinberg's motivation for creating DDG was not actually to "spread privacy"; it was to create something big, something that would compete with big players, according to an interview between Weinberg and Susan Adams. As a privacy abuser during the conception of DDG (Names Database), Weinberg sought to become a big-name legacy. Privacy is Weinberg's means (not ends) in that endeavor. Clearly he doesn't value privacy -- he values perception of privacy.

  2. Direct Privacy Abuse:

    1. DDG was caught violating its own privacy policy by issuing tracker cookies, according to Alexander Hanff (CEO of Think Privacy and a data security and ethics expert on staff at Singularity University).

    2. DDG was again caught violating its own privacy policy by fingerprinting browsers. DDG responded not with counter evidence, but simply a plea to trust them.

    3. DDG's third violation (2021): Microsoft hosts DDG's service and also supplies Bing search results for the same transaction. This means Microsoft sees both sides of the transaction and can link your IP address (i.e. identity) to your search query that Bing processes. DDG makes this false statement: "we never share any personal information with any of our partners. The way it works is when we call a partner for information, it is proxied through our servers so it stays completely anonymous. That is, any call to a partner looks to the partner as it is from us and not the user itself, and no user personal information is passed in that process (e.g. their IP address). That way we can build our search result pages using these 100s of partner sources, while still keeping them completely anonymous to you" (emphasis added). While it may be true that DDG doesn't transmit users' IP addresses to Microsoft, Microsoft has already seen users' IP addresses via Azure. That combination of data given to Microsoft makes DDG's statement a lie. The MS Azure privacy policy refers us to the general MS privacy policy, which confirms that Microsoft collects IP addresses.

      DDG can change their hosting provider at any time. And they have-- they migrated from Amazon AWS to Microsoft. As of the drafting of the article herein, DDG is still MS-hosted. To verify for yourself that DDG is still MS-hosted as you read this, Linux Tor users can run: torsocks whois "$(torsocks dig +tcp +short +time=4 +tries=1 duckduckgo.com @resolver1.opendns.com)"; web users can verify by obtaining DDG's IP address from digweb and then visit https://ipinfo.io/ <IP address from digweb>.

    4. DDG's app sends every URL you visit to DDG servers. (discussion).

    5. DDG is currently collecting users' operating systems and everything they highlight in the search results. (to verify this, simply hit F12 in your browser and select the "network" tab. Do a search with JavaScript enabled. Highlight some text on the screen. Mouseover the traffic rows and see that your highlighted text, operating system, and other details relating to geolocation are sent to DDG. Then change the query and submit. Notice that the previous query is being transmitted with the new query to link the queries together)

    6. When clicking an ad on the DDG results page, all data available in your session is sent to the advertiser, which is why the Epic browser project refuses to set DDG as the default search engine.

    7. DDG blacklisted Framabee, a search engine for the highly respected framasoft.org consortium.

  3. Censorship: Some people replace Google with DDG in order to avoid censorship. DDG is not the answer.

    1. DDG is complying with the "celebrity threesome injunction".
  4. Harmful impact on net neutrality:

    1. DDG attempts to play both sides of the network neutrality fight. DDG donated $50k (as of 2020) to an opponent of net neutrality who ironically calls themselves "TechFreedom". Then DDG also donated $50k to an opponent of TechFreedom, "Public Knowledge", who actually calls for "NO rules preventing blocking of website", yet Public Knowledge blocks Tor users from their own website by issuing a "403 forbidden" error. Public Knowledge intends to coach Congress on "How Interoperability Can Rein In Big Tech", yet they themselves have broken interoperability with Tor as they make themselves electronically unreachable outside of Facebook, Twitter, Youtube, and Gmail.
  5. CloudFlare: DDG promotes one of the most pernicious privacy abusing tech giants and adversary to the Tor community: CloudFlare Inc. DDG results give high rankings to CloudFlare sites, thus leading users into the largest privacy abusing walled garden on the web.

    Supporting CloudFlare compromises privacy, net neutrality, democracy, and anonymity:

    1. Anonymity: CloudFlare DoS attacks Tor users, causing substantial damage to the Tor network.
    2. Privacy: All CloudFlare sites are surreptitiously MitM'd by design.
    3. Net neutrality: CloudFlare's attack on Tor users causes access inequality, the centerpiece to net neutrality.
    4. DDG T-shirts are sold using a CloudFlare site, thus surreptitiously sharing all order information (name, address, credit card, etc) with CloudFlare despite their statement at the bottom of the page saying "DuckDuckGo is an Internet privacy company that empowers you to seamlessly take control of your personal information online, without any tradeoffs." (2019)
    5. DDG hired CloudFlare to host spreadprivacy.com (2019)

    DDG also donated over $186k to a series of privacy-abusing CloudFlare sites run by "Demand Progress", "Fight for the Future", and "Access Now". Despite getting nearly $70k from DDG, FFTF continues to expose their own patrons to the very evil they claim to be fighting. Demand Progress, who received $100k from DDG, posts their claim to "contest concentrated corporate power" directly on their CloudFlare site, as well as the claim that they educate people on "the impacts of corporate power over our economy and democracy" as they "confront corporate bad actors", all of which is bluntly unaligned with their CloudFlare patronage. Access Now, who received $16k from DDG, also used CloudFlare to block Tor users, hypocritically acting against their own mission to "fight for a free and open internet, advocating for the Net Neutrality principle that internet access should be offered to everyone on a nondiscriminatory basis, without favoring certain websites, applications, or services." DDG apparently does little inspection on those they donate to, as if they're merely selecting recipients with names that promote their privacy propaganda strategy to boost user loyalty.

  6. Harmful Partnerships with Adversaries of Privacy Seekers:

    1. DDG gets paid a commission when users visit eBay from DDG. Note that eBay has been caught sending JavaScript that snoops on their own customers by port scanning the LAN and reporting back to eBay. Moreover, eBay transactions are impossible without using PayPal, and PayPal abuses privacy in countless ways.

    2. DDG gets paid a commission when users visit privacy-abuser Amazon.

      image of JavaScript event that runs when clicking a DDG result

      DDG also uses AWS to crawl the web, which Amazon profits from. The Amazon partnership triggers substantial ethical issues:

      1. Amazon is making an astronomical investment in facial recognition which will destroy physical travel privacy worldwide.
      2. Amazon uses Ring and Alexa to surveil neighborhoods and the inside of homes.
      3. Amazon paid $195k to fight privacy in CA. (also see http://cal-access.sos.ca.gov/Campaign/Committees/Detail.aspx?id=1401518&view=late1)
      4. Amazon runs sweat shops, invests in climate denial, etc. The list of non-privacy related harms is too long to list here.
    3. DDG feeds privacy-abuser Microsoft by patronizing the Bing API for search results, using Microsoft's ad network, using Outlook email service, hiring Microsoft to host DDG's search site and host DDG's crawler.

      1. The Dutch government commissioned a study which found Microsoft Office products to have several GDPR violations.
      2. Microsoft finances AnyVision to equip the Israeli military with facial recognition to be used against the Palestinians who they oppress.
      3. Microsoft paid $195k to fight privacy in CA. (also see http://cal-access.sos.ca.gov/Campaign/Committees/Detail.aspx?id=1401518&view=late1)
      4. DDG hires Microsoft for email service: torsocks dig @8.8.8.8 mx duckduckgo.com +tcp | grep -E '^\w' ==> "...duckduckgo-com.mail.protection.outlook.com"
    4. (historic) DDG is was previously partnered with Yahoo (aka Oath; plus Verizon and AOL by extension).

      (click to expand details)

      DDG helped Yahoo profit for several years by patronizing Yahoo's API for search results, and also through advertising. Mention of Verizon, Yahoo, and Oath have been quietly scrubbed from DDG's disclosures. There was no official announcement, so we cannot confirm whether there are still ties to Verizon et al.

      The Verizon corporate conglomerate is evil in many ways:

      1. Yahoo, Verizon, and AOL all supported CISPA (unwarranted surveillance bills)
      2. Yahoo, Verizon, and AOL all use DNSBLs to block individuals from running their own mail servers, thus forcing an over-share of e-mail metadata with a relay.
      3. Verizon and AOL both drug test their employees, thus intruding on their privacy outside of the workplace.
      4. Verizon is was an ALEC member (a powerful superPAC designed to put corporate political interests ahead of human beings). (edit: Verizon dropped ALEC membership in 2018)
      5. Verizon supports the TTP treaty.
      6. Yahoo voluntarily ratted out a human rights journalist (Shi Tao) to the Chinese gov w/out warrant, leading to his incarceration.
      7. Yahoo recently recovered "deleted" e-mail to convict a criminal. The deleted e-mail was not expected to be recoverable per the Yahoo Privacy Policy.
      8. Verizon received $16.8 billion in Trump tax breaks, then immediately laid off thousands of workers.
      9. (2012) Will block or degrade calls to disrupt customer use, at the request of law enforcement, with no court oversight.
      10. (2014) Verizon fined $7.4 million for violating customers’ privacy
      11. (2016) Verizon fined $1.35 million for violating customers’ privacy
      12. (2018) Verizon paid $200k to fight privacy in CA. See also California records.
      13. (2018) Verizon apparently caught taking voice prints
      14. unfavorable record retention policy (scroll down to Verizon)
      15. (2015) Only 2 stars on EFF transparency report
      16. (2016) Yahoo was caught surreptitiously monitoring Yahoo Mail messages for the NSA, resulting in EFF lawsuit


  7. Advertising Abuses & Corruption:

    1. DDG exploited a room at FOSDEM for commercial gain, to deliver a sales pitch despite its proprietary non-free server code, then dashed out without taking questions. Shame on FOSDEM organizers for allowing this corrupt corporate abuse of precious resources.
    2. Tor Project accepts an annual $25k "contribution" (read: bribe) from DDG, so you'll find that DDG problems are down-played by those close to the Tor Project (e.g. EFF). This is likely why Tor Browser always defaults to using DDG (which DDG conceals from their disclosure) and why Tor Project endorses DDG over Ss -- ultimately against the interests of the privacy-seeking Tor community. This default search engine exploits The Tyranny of Convenience. The EFF also pimps DDG -- a likely consequence of EFF's close ties to Tor Project.
      (click to expand details on how Tor Project responds to criticism about their loyalty toward DuckDuckGo [their benefactor] in IRC)
      18:20 < psychil> if torbrowser is going to be recommended, it should also be open to scrutiny.  in the absence of that transparency, you create an untrustworthy forum.
      18:20 < psychil> we've seen a loyalty from TB toward duckduckgo, but DDG is in partnership with Verizon, Yahoo, AOL et. al.
      18:21 < psychil> all CISPA-sponsoring companies
      18:22 < psychil> if ppl choose to trust them fair enough, but this trust shouldn't be pushed on every user weighing their choice of browsers
      18:26 -!- mode/#tor [-b psychil@*!*@*] by ChanServ
      18:27 < YY_Bozhinsky> psychil: i am using Tor (thanks to Tor Devs)... PLUS brain - good bundle. I am happy. And please, don't rush to change Reality (do it slowly with love and respect). Because it's home for many ppl. They construct their lives in it. Think twice before ruining that. Please.
      18:27 -!- mode/#tor [+b psychil!*@*] by ChanServ
      18:27 -!- psychil was kicked from #tor by ChanServ [wont stop the FUD]
      
      Tor Project is notoriously fast to censor any discourse (no matter how civil) when it supports a narrative that doesn't align with their view / propaganda.






Editor's note: We published a (now-outdated) version before. The author notes: "The significant changes are: DDG is now MS-hosted (2.3), DDG gets commission when Amazon or eBay links are followed, Verizon-Yahoo is no longer a partner, and there's more dirt on DDG donees (TechFreedom, "Public Knowledge", "Demand Progress", "Fight for the Future", and "Access Now")"

Recent Techrights' Posts

IBM's Kyndryl Down Almost 20% in 5 Days, IBM Down 35% in About 6 Months, Further 'Staff Reductions' at Red Hat (Problems Paying Salaries!)
Will this year's festivities be Krishna's last?
More Mass Layoffs at Microsoft, Only Weeks After the "Buyout" Nonsense (Glorified Severance to Highest-Paid American Staff)
Next up it is LinkedIn
IBM Lost Nearly 33% in "Value" in 3 Months (Shares Down $100), But Nobody Held Accountable
This is a truly dysfunctional company
 
Links 13/05/2026: Sudan War Enters Fourth Year and Strait of Hormuz Leaves Safe Passage a Gamble
Links for the day
Gemini Links 13/05/2026: Useless Protests and Foofaraw on Geminispace
Links for the day
Mainstream Media: Microsoft Says No Layoffs. Microsoft: OK, There Are Layoffs.
Where is Waggener Edstrom/Frank Shaw now?
IBM is in a Freefall, When Will IBM's CEO Fall on His Sword?
Since he controls the Board, is anyone in a position to fire him?
At GitLab, "AI" is "All India"
It says "as much as 30%," but they also hire and it's clear what demography is targeted
Verified Accounts of Microsoft Offering 'Retirement' (Layoffs) to People in Their 40s, Over Two Decades Earlier Than Retirement Age
It's not even about performance, it's about age (or "cost" as well as location; they cheapen the labour)
Links 13/05/2026: Slop Turns Into 2008-Style Subprime Bubble, Mass Layoffs at Starbucks
Links for the day
They Don't Like the Layoffs, So They Are Rebranding Them
Layoffs are layoffs
IBM Downgraded as the Shares Sink to New Lows
The current strategy of IBM is financial engineering, wage reductions, and mass layoffs that the corporate media refuses to even write about
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, May 12, 2026
IRC logs for Tuesday, May 12, 2026
Gemini Links 13/05/2026: TUIs and Internet Radio
Links for the day
How the European Patent Office Became a Crime and Corruption Hub, One of Europe's Biggest
incomplete outline
Techrights at 19.5 (We Started in 2006, Days After the Microsoft/Novell Deal)
When Novell bought Ximian (run by the "best friend" of Graveley) it brought trouble to all of us, not just to Novell
In Croatia, Microsoft Windows Share Sank From 98% to All-Time Low of 67% (or 28% If One Counts Android)
statements made last week (and last month) by Microsoft's CEO confirm that Windows is rapidly losing users
SLAPP Censorship - Part 75 Out of 200: All True, All Verifiable, Unlike Garrett and Graveley Lying to at Least Three High Court Judges About What They Did
A lot of what I said a year ago not only turned out to be correct; it was moreover affirmed by Garrett after he had sworn on the Bible and put himself at risk to his liberty
The Corrupt Lecture the Non-Corrupt - Part XXI - EPO President Campinos Bribing to Buy His Seat, But Cautions Staff Against Bribery
This isn't a democratic institution
Gemini Links 12/05/2026: Spring Cleaning and New GemText Software
Links for the day
Links 12/05/2026: Samsung Sued by Dua Lipa (Publicity Rights), ‘Savage Love’ Copyright Infringement Lawsuit
Links for the day
IBM Falls to One-year Low
At one point or threshold does the Board (controlled by the CEO) sack the CEO?
Gemini Links 12/05/2026: On Astronomy and Stargazing, Coyote Time, and Freenom
Links for the day
Links 12/05/2026: Data Centres Destroying Neighbourhoods, "Care Workers Are Saying No to 24-Hour Workdays"
Links for the day
Richard Stallman to Give Public Talk in Erlangen, Germany (Next European Tour)
Seems like a large room
Google "Hey Hi" (Slop) Having a Stroke, Thinks I am Married to the Grandmother of My Grandfather
Seriously!
If IBM Suddenly Vanished in the 1980s, There Would be Chaos. Not Anymore.
IBM's management has rendered IBM more irrelevant than ever before
Beehiiv and Substack Are Platform Lock-in (Similar to Vendor Lock-in), Don't Use Beehiiv and Substack (and the Likes of These)
Proprietary platforms are a problem. Some people "get it" sooner than others.
Gitlab is in Trouble and Its Shares Have Collapsed
Down almost 80% since it began [...] The real issue has nothing to do with slop, it is a lack/loss of customers and erosion of the company's theoretical "value"
Microsoft: Mass Layoffs Are "Offers" (Like "Job Offers"), Culling Experienced and Highly-Paid Staff is "Softer Workforce-reduction Strategy"
Media sites that play along with those lies don't do journalism, they're in the PR industry
Under IBM, Mass Layoffs at Red Hat No Better Than Oracle Under Larry Ellison (Treating Workers Like Disposables - Even Enemies - Overnight)
under IBM the respect for the worker (or peer) does not exist
The Slop-Amplified Fear of Privilege Escalation (Local, Not Remote) in Linux, the Kernel
we are meant to assume this is no better and no worse than Microsoft intentionally putting back doors in everything, even encryption
Jim Zemlin/Linux Foundation Selling Anthropic Slop After Getting Bribed for Slop Marketing ('Linux' Foundation is a Pay-to-Say For-Profit Marketing Company That Buys and Manipulates the Media Based on False Pretences)
Look what they've done to Steven Vaughan-Nichols (SJVN)
GitLab the Latest Company to Do Mass Layoffs and Use Slop as the Go-to Excuse (GitLab Users Should Worry Too)
This round of layoffs (disguised as something else) has nothing to do with slop ("hey hi"). It's about commercial problems.
The Corrupt Lecture the Non-Corrupt - Part XX - EPO Management's Unified (One) Voice or Policy is, Doing Cocaine is OK When You're a Friend and/or Family of President Campinos
The management needs to resign to save the Office
Technology Not Meant to Last
A society apathetic towards declining production (or manufacturing) standards will end up ripped off
statCounter Cannot 'See' Chinese Operating Systems That Gain Many Millions of Users Per Month
There is no way for statCounter to recognise or show the market share of HarmonyOS
SLAPP Censorship - Part 74 Out of 200: The Basis of My Lawsuit Against Alex Graveley, Who Helps Garrett Stack the Docket in Another Continent
claim against the Serial Strangler from Microsoft
Update on Slop About "Linux"
"Linux" is a term many people are interested it, so it's not shocking that slopfarms target it
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, May 11, 2026
IRC logs for Monday, May 11, 2026
GAFAM (Microsoft) "Cloud Computing" Means Another Country's Military Accesses All Your Data
reminder that confidentiality and Clown Computing are complete opposites
Another Discrimination Lawsuit Against IBM and Workers Say IBM Culls Older Workers (Just Like Microsoft)
If IBM fails to retain some of the smartest people, then what is the future of IBM?
Gemini Links 12/05/2026: Android Nostalgia and Switching to Guix
Links for the day
Links 11/05/2026: Another Oracle Setback and Mass Layoffs in Iran
Links for the day
Gemini Links 11/05/2026: Older Can Be Faster and Textmode Workflow
Links for the day
Links 11/05/2026: The Solicitors Regulation Authority (SRA) Admits It Only Reacts When It's Too Late (Damage Already Done), Ombudsman’s Animal Cruelty HK Report
Links for the day
If It Takes You a Second to Serve (or Receive) a Page, That's Definitely Too Slow
For speeds at milliseconds (e.g. for pages to fully load in a tenth of a second) the pages must be ready to be sent as soon as they're requested
It's Not About Speed, It is About Patience and Adherence to Truth, Principles, Scientific Integrity
attacks on us only ever made us stronger - a lesson that our adversaries have learned the hard way
Cyber Show Does it Like Techrights: Static and Gemini Protocol as 'First-Class Citizen'
HTML and GemText (over Gemini Protocol) would be rendered in tandem
Libya's Share on the Web: 5.2% GNU/Linux
GNU/Linux has hit an all-time high there
SLAPP Censorship - Part 73 Out of 200: Microsoft's Graveley and Garrett Remain Closely Connected in May 2026 ("Tag-Teaming" Against Bloggers in Another Continent)
The phrase "judge a person by their friends" seems applicable here
Codecs and Software Patents - Part VI - The European Patent Office, Nokia, Microsoft, Sisvel, and More
Whatever Nokia used to be, it's certainly not an ally and a lot of the turmoil at the EPO is the fault of companies like Nokia
Discussions About When the Axe Falls at IBM/Kyndryl (11,000 Layoffs Estimated)
"Kyndryl restructuring should reduce overhead functions and reduce the number of managers that lack technical knowledge"
A World After Microsoft (and GAFAM) and After GitHub Shuts Down
the only growth area is debt
Fake News, Propaganda, and Misinformation: Microsoft Investing Money It Does Not Have in "Hey Hi" (for "Entertainment Purposes" Only)
This will not end well
Today the Whole European Patent Office (EPO) is on Strike and Next Monday an Even Bigger Strike
the media refuses to cover these and is thus complicit
The Corrupt Lecture the Non-Corrupt - Part IXX - EPO Management Speaks of Reputation and Integrity While Putting Cocaine Addicts in Management
If the EPO values its "reputation", then it needs to start by ousting the management
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, May 10, 2026
IRC logs for Sunday, May 10, 2026
Links 11/05/2026: Security Breaches, Politics, and Energy Crunch
Links for the day
Gemini Links 10/05/2026: "Accidental Cameras" and "Addictive" Interfaces in Social Control Media
Links for the day