this post was submitted on 14 Sep 2023
117 points (98.3% liked)

Privacy Guides

57 readers
1 users here now

In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.

This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.


You can subscribe to this community from any Kbin or Lemmy instance:

Learn more...


Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!

Want to get involved? The website is open-source on GitHub, and your help would be appreciated!


This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.


Moderation Rules:

  1. We prefer posting about open-source software whenever possible.
  2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
  3. No soliciting engagement: Don't ask for upvotes, follows, etc.
  4. Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
  5. Be civil, no violence, hate speech. Assume people here are posting in good faith.
  6. Don't repost topics which have already been covered here.
  7. News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
  8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
  9. No help vampires: This is not a tech support subreddit, don't abuse our community's willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
  10. No misinformation: Extraordinary claims must be matched with evidence.
  11. Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
  12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.

founded 2 years ago
MODERATORS
 
top 50 comments
sorted by: hot top controversial new old
[–] MonosyllabicAmerican 58 points 2 years ago (1 children)

4Conservative

Those fragile little snowflakes actually have a search just for them lol?

[–] [email protected] 27 points 2 years ago* (last edited 2 years ago)

Alternative facts need their own alternative engine. Just one more facet to the echo chamber. 🙄

[–] [email protected] 32 points 2 years ago (2 children)

This seems awful opinionated.

What does "censorship" mean? The entire purpose of a search engine is to "censor" bad results so I would argue that they all have censorship. And if they don't they're probably a bad search engine.

[–] [email protected] 10 points 2 years ago (1 children)

Yes, the term censorship in this context is particularly infuriating to me. It's not censorship since these are privately owned websites that can link to whatever they like, and users can choose whether or not to use them. When DuckDuckGo launched, before privacy concerns were such a pressing issue the fact that they filtered poor quality sources was one of their most advertised selling points: https://www.technologyreview.com/2010/07/26/26327/the-search-engine-backlash-against-content-mills/

[–] [email protected] 7 points 2 years ago (1 children)

It's not censorship since these are privately owned websites that can link to whatever they like

...what exactly do you think censorship is? Are you under the impression that this is something only the government can do?

[–] [email protected] 2 points 2 years ago

Not exactly, no, but a website can't reasonably be expected to cover everything and that wouldn't be desirable either.

[–] [email protected] 6 points 2 years ago

Also the meaning of "censorship" can depend wildly based on your own opinions and political beliefs.

The correct term to use would have been "Result filtering", as "censorship" is completely subjective.

[–] [email protected] 28 points 2 years ago (2 children)

What does "cloudflare so who cares lol" mean exactly?

Cloudflare is so good that you don't even have to care about your privacy because they've got it covered?

or

Nobody who uses Cloudflare would care about privacy, and for some reason that's worthy of a "lol"?

or what?

[–] [email protected] 5 points 2 years ago (1 children)
[–] [email protected] 6 points 2 years ago (1 children)

Care to explain? I just set up zero trust Tunnel with them 😶

[–] [email protected] 8 points 2 years ago

Their tunnel uses TLS termination. When we use TLS/SSL certificates on a server, we want the data to be encrypted between your server and the clients connecting to it. When you use Cloudflare's tunnel, that TLS connection is terminated, that is, decrypted on their servers and then it is re-encrypted and sent to your client. So, theoretically, they can look at all the data going through. But do they sniff in to your data, that is upto what you believe.

If you are self-hosting for privacy, this is a bad idea. Free solutions like Cloudflare and Tailscale all do TLS termination. What you want is TLS pass through. You can rent a small VPS and set up TLS pass through using something very simple, like HAProxy, NGINX Proxy etc.

[–] [email protected] 2 points 2 years ago

Cloudflare is one of the biggest privacy violators. They effectively act as a MITM which has your SSL keys and can read all the traffic between your browser and a website. Now imagine a single entity having the SSL keys to read the traffic of an important portion of the internet.

Oh and they block Tor and VPN users too.

[–] [email protected] 24 points 2 years ago (4 children)

Please someone explian the cloudflare bit.

[–] [email protected] 40 points 2 years ago

I mean, who doesn't like a random table without some further explanation?

[–] [email protected] 29 points 2 years ago* (last edited 2 years ago) (2 children)

Cloudflare typically provides DDOS protection to websites, as well as CAPTCHAs and preventing bots from accessing sites, and can speed up connections through use of their CDN, among other things they offer.

People mostly dislike Cloudflare to my understanding because at the end of the day, they're a giant US big tech company with a pretty massive amount of centralized control over the internet. I personally avoid them where possible, and know a lot of others wish to as well due to it.

[–] [email protected] 8 points 2 years ago

Yeah they're not evil per se, but any monopoly should be avoided. The market needs more segmentation.

[–] [email protected] 4 points 2 years ago

OK thanks for the explanation

[–] [email protected] 17 points 2 years ago (1 children)

It makes you activate cookies and JavaScript, which serves to deanonymize you.

[–] [email protected] 3 points 2 years ago

OK, thank. So cloudflare = bad

[–] [email protected] 2 points 2 years ago

an answer I gave to another comment https://lemmy.world/comment/3542428

[–] [email protected] 20 points 2 years ago (2 children)
[–] [email protected] 10 points 2 years ago (1 children)

Kagi is so good, I just wish they'd lower the price...

[–] [email protected] 3 points 2 years ago

Exactly. I had to stop using it because for the number of searches I had to switch to the $25/month! Way too much for me!

[–] [email protected] 2 points 2 years ago* (last edited 2 years ago)

I just started using Kagi and am actually still in my 100 free search trial period. I have already added some bitcoin to my account to subscribe when the time comes.

Edit: so far i have used fewer searches than i expected. I have used 19 searches in 10 days or 1.9 searches per day. I thought it would be much higher than that. I admit i have used the ddg bang when doing currency conversion to not waste a search on that though.

[–] [email protected] 20 points 2 years ago (1 children)

Are you the creator of 4get, OP? Your account is 4 days old, the same age as the post announcing 4get on reddit: https://old.reddit.com/r/selfhosted/comments/16emfv0/4get_a_proxy_search_engine_that_doesnt_suck/

Why not just announce your project normally here instead of this biased chart?

[–] [email protected] 13 points 2 years ago (1 children)
[–] [email protected] 29 points 2 years ago* (last edited 2 years ago) (2 children)

That should definitely be linked for context of this "data"

Edit: That article directly calls 4get "the best search engine", and the diagram implies that to be the case as well. Given that 4get has existed for 4 days I just find everything else from the author to be very suspect. This should at least have the author's context added or more of a heads-up that this isn't exactly rigorous data. 4get's current audit status is just trust me bro, which I find difficult when the entire rest of the about page is filled with immaturity.

[–] [email protected] 7 points 2 years ago

I found someone on 4chan that wouldn’t stop announcing this engine on /g/, most likely the owner as well. And seeing that the name is 4get, it probably started there

[–] [email protected] 3 points 2 years ago (1 children)

Given that 4get has existed for 4 days

4get has existed for at least 1 month, judging by the git activity https://git.lolcat.ca/lolcat/4get/activity/yearly

[–] [email protected] 8 points 2 years ago

Publicly existed. It was announced 4 days ago. The author said they have been working on it for a full year now, but until they release it there's really no way for third parties to be using it and forming opinions.

[–] [email protected] 10 points 2 years ago (2 children)

My favourite search engine, Ecosia, is listed. I’d prefer if they didn’t log IPs, but their cause is so good and effective that it’s worth it to me. I can use a VPN if it bothers me.

[–] [email protected] 4 points 2 years ago (1 children)

I've never heard about Ecosia, what is the good cause?

[–] [email protected] 4 points 2 years ago

They spend their revenue on planting trees

load more comments (1 replies)
[–] [email protected] 9 points 2 years ago (1 children)

Maybe someone can ELI5 how Kagi works then. Yes, I read all their documentation, but I'm still not convinced on the "100% privacy-respecting". In our world of proprietary back ends with peepers, cloud backdoors along with home assistants and cars that say "we don't listen", but suddenly have evidence when they need it - How can we trust Kagi? They say;

no telemetry, ads, or collection of private information

and

we do not log searches or in any way tie them to an account

But there's "plans" that count your searches per month, so that is attributed to your account. They can tell if you use a bang, so they do have the ability to see what you search for. They also see if you reload the same search, so it knows exactly what you searched for. They can tell the difference between images and news and whether you're loading more content, and attribute that to your account.

What I'm hearing is that we're supposed to trust them when they say "hey guys, we don't look even though we can/could see everything"? Is that it?

[–] [email protected] 3 points 2 years ago* (last edited 2 years ago) (1 children)

It's most likely an API linked to your logged in account that counts each search performed and logs it against your account. You don't need to see a user's search to track that information.

[–] [email protected] 1 points 2 years ago

That sounds reasonable and likely the method. Would you indulge a few more relevant questions? Could that API also know your search term without sharing it? How can we know that the API is not being abused? And, can access to an API like that be shared, or hacked? Are we still at "we don't look even though we could"?

[–] [email protected] 7 points 2 years ago (1 children)

Interested in more info about Brave Search. How is their claim of having an own index "doubtful", and how do they have "extreme" censorship?

[–] [email protected] 3 points 2 years ago

I am not a fan of Brave, however that seems like bs . Brave started their own index in 2021 and Here is their blog post saying ' Every Web search result seen in Brave Search is now served by our own index.' From April of this year.

[–] [email protected] 4 points 2 years ago

List is immediately disqualified for not including LibreX. Shame.

[–] [email protected] 4 points 2 years ago* (last edited 2 years ago) (1 children)

They have SearX but not Whoogle. If you just want a search proxy and only want the core features I highly recommend it.

load more comments (1 replies)
[–] [email protected] 4 points 2 years ago

+1 for Kagi

[–] [email protected] 4 points 2 years ago* (last edited 2 years ago)

anecdotal but i ended up switching from ddg and searxng to brave because of how much more relevant and well structured i found their search results to be so i’m not sure i agree with the findings for that column

absolutely hate the company and am skeptical of their practices, but even considering all that their search toes the line of privacy and functionality better than some others, at least in the case of a daily user who needs a service that lies somewhere in the middle of those 2 extremes

[–] [email protected] 3 points 2 years ago (1 children)

Ok... so how would I get 4get to work?

load more comments (1 replies)
[–] [email protected] 3 points 2 years ago (1 children)

Qwant shares data with 3rd parties? source?

[–] [email protected] 4 points 2 years ago* (last edited 2 years ago)

For instance, Qwant relies on ad services from Microsoft for revenue. Consequently, Qwant needs to collect and transmit the IP addresses and search terms of its users to Microsoft. Microsoft, as some of us may know, isn't exactly a role model in privacy.

However, Qwant claims that it doesn't transmit IP addresses and search terms as a pair. Instead, search terms and IP addresses are transmitted differently using different services to make it hard for the parties involved to tie search terms to IP addresses. In other words, they make it hard for third-party services to build a profile on you. Nonetheless, some would argue that the mere fact that Qwant collects this kind of data is a potential privacy

loophole.

Qwant shares some of the data it collects with advertising partners like Microsoft. Your search keywords, IP address data, and geographical location are shared with Microsoft and are stored for at least 18 months following Microsoft privacy policies. Although Qwant tries to anonymize the data it shares, its methods aren't exactly

foolproof.

And then there's the issue of being asked to turn over a user's data by law enforcement. Like any other company, even privacy-focused search engines service would have to comply with a court-ordered request for data. Consequently, this means your data can somehow fall into the hands of a third-party.

From https://www.makeuseof.com/qwant-vs-duckduckgo-which-search-engine-most-private/

Qwant privacy policy : https://about.qwant.com/en/legal/confidentialite/

[–] [email protected] 3 points 2 years ago

Why is kagi not on the list?

[–] [email protected] 2 points 2 years ago

laughs through my pi-hole

[–] [email protected] 1 points 2 years ago

What about Yacy? I didn't see that mentioned. I haven't used it before, but I've heard you can self-host it and it offers decentralized search.

[–] [email protected] 1 points 2 years ago (1 children)

What’s up with cloud flare?

[–] [email protected] 1 points 2 years ago

Too much power

load more comments
view more: next ›