[Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-18 Thread Patrick O'Keeffe
 On Wed, Jan 15, 2014 at 6:47 AM,  silence_is_best at hushmail.com wrote:
 I see thank you.  My distribution.id nuke did nothingany way to disable
 this?  It's all about choice after all right ;)
 
 Settings  Manage Search Engines  Add

This won't work quite as expected. FF only hides search plugins when you
Remove them from the list. If you attempt to add the DDG plugin
directly from their webpage, an error message will notify you that a
plugin of that name already exists whether it's hidden or not.

The only real solution is to edit the plugin definition file (as root).
I found it under:

/usr/lib/firefox/distribution/searchplugins/locale/en-US/duckduckgo.xml

Remove this line near the bottom:

  Param name=t value=canonical/

I'm fairly sure you'll have to do this after each update too.

[Sorry if this doesn't thread right; I just joined the list]

-p

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-15 Thread Daniel Wood
There is a reddit post regarding this. 

Please see 
http://www.reddit.com/r/Ubuntu/comments/1jek5d/why_am_i_seeing_canonical_when_i_search_using/

Daniel

 On Jan 14, 2014, at 6:41 AM, silence_is_b...@hushmail.com wrote:
 
 Any particular reason when setting duckduckgo as the default search and 
 searching from the url bar we get an additional nugget of info sent?  Case in 
 point:
 
 GET /?q=add+duckduckgot=canonical HTTP/1.1
 Hostduckduckgo.com
 User-AgentMozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0) Gecko/20100101 
 Firefox/26.0
 Accepttext/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
 Accept-Languageen-US,en;q=0.5
 Accept-Encodinggzip, deflate
 DNT1
 Connectionkeep-alive
 
 I didn't add canonical...so why is it there?  In about:config I see
 
 distribution.id canonical
 
 Why is this being sent?  Duckduckgo didn't respond, so I thought I'd ask 
 here.  Ironic...
 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-15 Thread Gabriel Weinberg
 Any particular reason when setting duckduckgo as the default search and 
 searching from the url bar we get an additional nugget of info sent?

We use the t=partner parameter to anonymously count the number of
searches for revenue sharing. We have 90+ partners doing this, mainly
open source browsers and distributions. Here's the relevant link on
launchpad for Canonical: 

https://code.launchpad.net/~caine/chromium-browser/duckduckgo/+merge/182416

-- 
Gabriel, http://ye.gg/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-15 Thread silence_is_best
On 01/14/2014 at 6:22 PM, Seth Arnold  wrote:On Tue, Jan 14, 2014 at
05:41:42AM -0700, silence_is_b...@hushmail.com wrote:
 Any particular reason when setting duckduckgo as the default search
 and searching from the url bar we get an additional nugget of info
 sent?  Case in point:
 
 GET /?q=add+duckduckgot=canonical HTTP/1.1
[...]
 I didn't add canonical...so why is it there?  In about:config I see
[...]
 Why is this being sent?  Duckduckgo didn't respond, so I thought I'd
 ask here.  Ironic...

This behaviour is documented on the duckduckgo website:

https://duck.co/help/privacy/t
https://duck.co/help/desktop/linux-distributions

Thanks
Thank you for the responses folks.  I'm going to take a stab and say
the distribution.id is where that's held.  It upsets my sense of
neatness when I'm spoofing my UA, only to have tidbits added ;) 
Thanks again. 
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-15 Thread silence_is_best
On 01/15/2014 at 5:08 AM, Gabriel Weinberg  wrote: Any particular
reason when setting duckduckgo as the default search and searching
from the url bar we get an additional nugget of info sent?

We use the t=partner parameter to anonymously count the number of
searches for revenue sharing. We have 90+ partners doing this, mainly
open source browsers and distributions. Here's the relevant link on
launchpad for Canonical: 

https://code.launchpad.net/~caine/chromium-browser/duckduckgo/+merge/182416

-- 
Gabriel, http://ye.gg/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

I see thank you.  My distribution.id nuke did nothingany way to
disable this?  It's all about choice after all right ;)
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-15 Thread Seth Arnold
On Wed, Jan 15, 2014 at 05:47:24AM -0700, silence_is_b...@hushmail.com wrote:
 I see thank you.  My distribution.id nuke did nothingany way to
 disable this?  It's all about choice after all right ;)

Depends upon the browser. For Firefox, see:

/usr/lib/firefox/distribution/searchplugins/locale/en-US/duckduckgo.xml

The merge at
https://code.launchpad.net/~caine/chromium-browser/duckduckgo/+merge/182416
gives me the strong impression that it will be harder to change in
chromium-browser; it may take a recompile. Probably it would be easier
to add your own search engines to chromium-browser without recompiling,
though I don't know chromium-browser well enough to suggest them.

Thanks


signature.asc
Description: Digital signature
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-15 Thread Jordon Bedwell
On Wed, Jan 15, 2014 at 6:47 AM,  silence_is_b...@hushmail.com wrote:
 I see thank you.  My distribution.id nuke did nothingany way to disable
 this?  It's all about choice after all right ;)

Settings  Manage Search Engines  Add

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


[Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-14 Thread silence_is_best
Any particular reason when setting duckduckgo as the default search
and searching from the url bar we get an additional nugget of info
sent?  Case in point:

GET /?q=add+duckduckgot=canonical HTTP/1.1
Hostduckduckgo.com
User-AgentMozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0)
Gecko/20100101 Firefox/26.0
Accept   
text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Languageen-US,en;q=0.5
Accept-Encodinggzip, deflate
DNT1
Connectionkeep-alive

I didn't add canonical...so why is it there?  In about:config I see

distribution.id canonical

Why is this being sent?  Duckduckgo didn't respond, so I thought I'd
ask here.  Ironic...
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info

2014-01-14 Thread Seth Arnold
On Tue, Jan 14, 2014 at 05:41:42AM -0700, silence_is_b...@hushmail.com wrote:
 Any particular reason when setting duckduckgo as the default search
 and searching from the url bar we get an additional nugget of info
 sent?  Case in point:
 
 GET /?q=add+duckduckgot=canonical HTTP/1.1
[...]
 I didn't add canonical...so why is it there?  In about:config I see
[...]
 Why is this being sent?  Duckduckgo didn't respond, so I thought I'd
 ask here.  Ironic...

This behaviour is documented on the duckduckgo website:

https://duck.co/help/privacy/t
https://duck.co/help/desktop/linux-distributions

Thanks


signature.asc
Description: Digital signature
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/