DuckDuckGo is one of the best alternatives to Google. This American search engine claims to be safer than Google by not saving personal information or sharing it with third parties. They also don’t use tracking to display personalized ads. However, the search engine is now caught to track the visits made by the user. Also Read - Indian app Elyments clubs social media, instant messaging and puts focus on privacy
Ethical hacker Cowreth revealed through GitHub how the DuckDuckGo browser could be accessing user history without their consent. According to @cowreth, the browser filtered users’ browsing information to their servers through the favicon. This failure occurs in the mobile version of DuckDuckGo for Android. Also Read - Google sued for tracking Chrome users in privacy mode
DuckDuckGo Android app privacy failure
The failure is that the DuckDuckGo application for Android collects all the domain information that the user visits. When we visit a website, the website calls its own server or checks the computer’s local user cache to download the favicon. Showing on the user’s screen either of the two, which is being more recent. Also Read - Xiaomi updates its browser privacy settings for the second time; this time with better clarification
The problem is that none of this is a convincing reason to store the data of the websites that users visit in a service other than the local cache of the browser. With the data, the app can organize user profiles based on their preferences. Moreover, they can also find out the IP addresses from which those pages are visited.
After the rain of criticism, the founder and CEO of DuckDuckGo, Gabriel Weinberg, affirms that it is the first time he knew about this failure. And they will fix it immediately by going to store the favicons locally on the mobile.