News for hackers. Stuff that matters.
Re:DuckDuckGo Traffic by h1d on Sunday September 30, 2018 @01:14AM (#18104579)
DDG should be fine to be trusted but you don't know what kind of code produced it.

You need to worry about where the produced password is stored, how random it is and you can't prove any of it.

Generally, you can't just decrypt your traffic... there are other attack vectors.

Re:DuckDuckGo Traffic by moollaza on Friday October 05, 2018 @11:22AM (#18148844)
Our instant answers are open source. You can see the Perl used for the passphrase Goodie here: https://github.com/duckduckgo/zeroclickinfo-goodies/blob/mas...

We’re not storing these generated phrases anywhere.