[Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-14 Thread silence_is_best
Any particular reason when setting duckduckgo as the default search
and searching from the url bar we get an additional nugget of info
sent?  Case in point:

GET /?q=add+duckduckgo&t=canonical HTTP/1.1
Hostduckduckgo.com
User-AgentMozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0)
Gecko/20100101 Firefox/26.0
Accept   
text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Languageen-US,en;q=0.5
Accept-Encodinggzip, deflate
DNT1
Connectionkeep-alive

I didn't add canonical...so why is it there?  In about:config I see

distribution.id canonical

Why is this being sent?  Duckduckgo didn't respond, so I thought I'd
ask here.  Ironic...
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-18 Thread Patrick O'Keeffe
> On Wed, Jan 15, 2014 at 6:47 AM,   wrote:
>> I see thank you.  My distribution.id nuke did nothingany way to disable
>> this?  It's all about choice after all right ;)
> 
> Settings > Manage Search Engines > Add

This won't work quite as expected. FF only hides search plugins when you
"Remove" them from the list. If you attempt to add the DDG plugin
directly from their webpage, an error message will notify you that a
plugin of that name already exists whether it's hidden or not.

The only real solution is to edit the plugin definition file (as root).
I found it under:

/usr/lib/firefox/distribution/searchplugins/locale/en-US/duckduckgo.xml

Remove this line near the bottom:

  

I'm fairly sure you'll have to do this after each update too.

[Sorry if this doesn't thread right; I just joined the list]

-p

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-14 Thread Seth Arnold
On Tue, Jan 14, 2014 at 05:41:42AM -0700, silence_is_b...@hushmail.com wrote:
> Any particular reason when setting duckduckgo as the default search
> and searching from the url bar we get an additional nugget of info
> sent?  Case in point:
> 
> GET /?q=add+duckduckgo&t=canonical HTTP/1.1
[...]
> I didn't add canonical...so why is it there?  In about:config I see
[...]
> Why is this being sent?  Duckduckgo didn't respond, so I thought I'd
> ask here.  Ironic...

This behaviour is documented on the duckduckgo website:

https://duck.co/help/privacy/t
https://duck.co/help/desktop/linux-distributions

Thanks


signature.asc
Description: Digital signature
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-15 Thread Daniel Wood
There is a reddit post regarding this. 

Please see 
http://www.reddit.com/r/Ubuntu/comments/1jek5d/why_am_i_seeing_canonical_when_i_search_using/

Daniel

> On Jan 14, 2014, at 6:41 AM, silence_is_b...@hushmail.com wrote:
> 
> Any particular reason when setting duckduckgo as the default search and 
> searching from the url bar we get an additional nugget of info sent?  Case in 
> point:
> 
> GET /?q=add+duckduckgo&t=canonical HTTP/1.1
> Hostduckduckgo.com
> User-AgentMozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0) Gecko/20100101 
> Firefox/26.0
> Accepttext/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
> Accept-Languageen-US,en;q=0.5
> Accept-Encodinggzip, deflate
> DNT1
> Connectionkeep-alive
> 
> I didn't add canonical...so why is it there?  In about:config I see
> 
> distribution.id canonical
> 
> Why is this being sent?  Duckduckgo didn't respond, so I thought I'd ask 
> here.  Ironic...
> ___
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-15 Thread Gabriel Weinberg
> Any particular reason when setting duckduckgo as the default search and 
> searching from the url bar we get an additional nugget of info sent?

We use the t=partner parameter to anonymously count the number of
searches for revenue sharing. We have 90+ partners doing this, mainly
open source browsers and distributions. Here's the relevant link on
launchpad for Canonical: 

https://code.launchpad.net/~caine/chromium-browser/duckduckgo/+merge/182416

-- 
Gabriel, http://ye.gg/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-15 Thread silence_is_best
On 01/14/2014 at 6:22 PM, "Seth Arnold"  wrote:On Tue, Jan 14, 2014 at
05:41:42AM -0700, silence_is_b...@hushmail.com wrote:
> Any particular reason when setting duckduckgo as the default search
> and searching from the url bar we get an additional nugget of info
> sent?  Case in point:
> 
> GET /?q=add+duckduckgo&t=canonical HTTP/1.1
[...]
> I didn't add canonical...so why is it there?  In about:config I see
[...]
> Why is this being sent?  Duckduckgo didn't respond, so I thought I'd
> ask here.  Ironic...

This behaviour is documented on the duckduckgo website:

https://duck.co/help/privacy/t
https://duck.co/help/desktop/linux-distributions

Thanks
Thank you for the responses folks.  I'm going to take a stab and say
the distribution.id is where that's held.  It upsets my sense of
neatness when I'm spoofing my UA, only to have tidbits added ;) 
Thanks again. 
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-15 Thread silence_is_best
On 01/15/2014 at 5:08 AM, "Gabriel Weinberg"  wrote:> Any particular
reason when setting duckduckgo as the default search and searching
from the url bar we get an additional nugget of info sent?

We use the t=partner parameter to anonymously count the number of
searches for revenue sharing. We have 90+ partners doing this, mainly
open source browsers and distributions. Here's the relevant link on
launchpad for Canonical: 

https://code.launchpad.net/~caine/chromium-browser/duckduckgo/+merge/182416

-- 
Gabriel, http://ye.gg/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

I see thank you.  My distribution.id nuke did nothingany way to
disable this?  It's all about choice after all right ;)
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-15 Thread Seth Arnold
On Wed, Jan 15, 2014 at 05:47:24AM -0700, silence_is_b...@hushmail.com wrote:
> I see thank you.  My distribution.id nuke did nothingany way to
> disable this?  It's all about choice after all right ;)

Depends upon the browser. For Firefox, see:

/usr/lib/firefox/distribution/searchplugins/locale/en-US/duckduckgo.xml

The merge at
https://code.launchpad.net/~caine/chromium-browser/duckduckgo/+merge/182416
gives me the strong impression that it will be harder to change in
chromium-browser; it may take a recompile. Probably it would be easier
to add your own search engines to chromium-browser without recompiling,
though I don't know chromium-browser well enough to suggest them.

Thanks


signature.asc
Description: Digital signature
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-15 Thread Jordon Bedwell
On Wed, Jan 15, 2014 at 6:47 AM,   wrote:
> I see thank you.  My distribution.id nuke did nothingany way to disable
> this?  It's all about choice after all right ;)

Settings > Manage Search Engines > Add

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/