[Full-disclosure] Ubuntu, duckduckgo, and additional info
Any particular reason when setting duckduckgo as the default search and searching from the url bar we get an additional nugget of info sent? Case in point: GET /?q=add+duckduckgo&t=canonical HTTP/1.1 Hostduckduckgo.com User-AgentMozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0 Accept text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Languageen-US,en;q=0.5 Accept-Encodinggzip, deflate DNT1 Connectionkeep-alive I didn't add canonical...so why is it there? In about:config I see distribution.id canonical Why is this being sent? Duckduckgo didn't respond, so I thought I'd ask here. Ironic... ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] Ubuntu, duckduckgo, and additional info
> On Wed, Jan 15, 2014 at 6:47 AM, wrote: >> I see thank you. My distribution.id nuke did nothingany way to disable >> this? It's all about choice after all right ;) > > Settings > Manage Search Engines > Add This won't work quite as expected. FF only hides search plugins when you "Remove" them from the list. If you attempt to add the DDG plugin directly from their webpage, an error message will notify you that a plugin of that name already exists whether it's hidden or not. The only real solution is to edit the plugin definition file (as root). I found it under: /usr/lib/firefox/distribution/searchplugins/locale/en-US/duckduckgo.xml Remove this line near the bottom: I'm fairly sure you'll have to do this after each update too. [Sorry if this doesn't thread right; I just joined the list] -p ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
On Tue, Jan 14, 2014 at 05:41:42AM -0700, silence_is_b...@hushmail.com wrote: > Any particular reason when setting duckduckgo as the default search > and searching from the url bar we get an additional nugget of info > sent? Case in point: > > GET /?q=add+duckduckgo&t=canonical HTTP/1.1 [...] > I didn't add canonical...so why is it there? In about:config I see [...] > Why is this being sent? Duckduckgo didn't respond, so I thought I'd > ask here. Ironic... This behaviour is documented on the duckduckgo website: https://duck.co/help/privacy/t https://duck.co/help/desktop/linux-distributions Thanks signature.asc Description: Digital signature ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
There is a reddit post regarding this. Please see http://www.reddit.com/r/Ubuntu/comments/1jek5d/why_am_i_seeing_canonical_when_i_search_using/ Daniel > On Jan 14, 2014, at 6:41 AM, silence_is_b...@hushmail.com wrote: > > Any particular reason when setting duckduckgo as the default search and > searching from the url bar we get an additional nugget of info sent? Case in > point: > > GET /?q=add+duckduckgo&t=canonical HTTP/1.1 > Hostduckduckgo.com > User-AgentMozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0) Gecko/20100101 > Firefox/26.0 > Accepttext/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 > Accept-Languageen-US,en;q=0.5 > Accept-Encodinggzip, deflate > DNT1 > Connectionkeep-alive > > I didn't add canonical...so why is it there? In about:config I see > > distribution.id canonical > > Why is this being sent? Duckduckgo didn't respond, so I thought I'd ask > here. Ironic... > ___ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
> Any particular reason when setting duckduckgo as the default search and > searching from the url bar we get an additional nugget of info sent? We use the t=partner parameter to anonymously count the number of searches for revenue sharing. We have 90+ partners doing this, mainly open source browsers and distributions. Here's the relevant link on launchpad for Canonical: https://code.launchpad.net/~caine/chromium-browser/duckduckgo/+merge/182416 -- Gabriel, http://ye.gg/ ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
On 01/14/2014 at 6:22 PM, "Seth Arnold" wrote:On Tue, Jan 14, 2014 at 05:41:42AM -0700, silence_is_b...@hushmail.com wrote: > Any particular reason when setting duckduckgo as the default search > and searching from the url bar we get an additional nugget of info > sent? Case in point: > > GET /?q=add+duckduckgo&t=canonical HTTP/1.1 [...] > I didn't add canonical...so why is it there? In about:config I see [...] > Why is this being sent? Duckduckgo didn't respond, so I thought I'd > ask here. Ironic... This behaviour is documented on the duckduckgo website: https://duck.co/help/privacy/t https://duck.co/help/desktop/linux-distributions Thanks Thank you for the responses folks. I'm going to take a stab and say the distribution.id is where that's held. It upsets my sense of neatness when I'm spoofing my UA, only to have tidbits added ;) Thanks again. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
On 01/15/2014 at 5:08 AM, "Gabriel Weinberg" wrote:> Any particular reason when setting duckduckgo as the default search and searching from the url bar we get an additional nugget of info sent? We use the t=partner parameter to anonymously count the number of searches for revenue sharing. We have 90+ partners doing this, mainly open source browsers and distributions. Here's the relevant link on launchpad for Canonical: https://code.launchpad.net/~caine/chromium-browser/duckduckgo/+merge/182416 -- Gabriel, http://ye.gg/ ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ I see thank you. My distribution.id nuke did nothingany way to disable this? It's all about choice after all right ;) ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
On Wed, Jan 15, 2014 at 05:47:24AM -0700, silence_is_b...@hushmail.com wrote: > I see thank you. My distribution.id nuke did nothingany way to > disable this? It's all about choice after all right ;) Depends upon the browser. For Firefox, see: /usr/lib/firefox/distribution/searchplugins/locale/en-US/duckduckgo.xml The merge at https://code.launchpad.net/~caine/chromium-browser/duckduckgo/+merge/182416 gives me the strong impression that it will be harder to change in chromium-browser; it may take a recompile. Probably it would be easier to add your own search engines to chromium-browser without recompiling, though I don't know chromium-browser well enough to suggest them. Thanks signature.asc Description: Digital signature ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
On Wed, Jan 15, 2014 at 6:47 AM, wrote: > I see thank you. My distribution.id nuke did nothingany way to disable > this? It's all about choice after all right ;) Settings > Manage Search Engines > Add ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/