News for hackers. Stuff that matters.
Re:Ecosia – A search engine that plants trees by ignoramous on Sunday January 10, 2021 @05:41AM (#25713269)
Ecosia starts their privacy policy with, "We protect your privacy."

...but when you dig in, they:

1. Use Facebook for "conversion tracking".

2. May collect messages, photos, calendar information if you're using the app.

3. Hold on to personally identifiable information for upto 7 days post which they (pseudo)anonymize it to store it indefinitely. Now, without more information on how they do so, I'm not sure I'd trust the effectiveness of their anonymization, given they may store logs (and other metrics) "as long as necessary".

4. Integrate with advertisement platform run by Bing on the search pages (and so they 'don't control the data Bing collects').

Who reads privacy policies, right? Everyone just reads the headlines and FAQs.

"Ecosia is a “privacy friendly” search engine. We take user privacy very seriously." Right. I wish they were upfront and admitted to collecting data instead of trying hard to convince they don't do so for nefarious purposes (in their own eyes, that is).

https://info.ecosia.org/privacy

Re:Ecosia – A search engine that plants trees by bboygravity on Sunday January 10, 2021 @06:00AM (#25713407)
Rule #1 on the internet: the more a website screams something, the less it's true.

Examples:

"Our mission is to organize the world's information." (proceeds to organize the world's commercial brands and spam people based on what they do online)

"We value freedom of speech." (proceed to literally ban the president, wrong opinions and alternative apps like Parler)

"We value your privacy." (Every big"tech"/cloud company ever that sells your data and has an automated system in place to pass all data on to the NSA, authorities and anybody willing to buy data)

"Download now" (not actually now, but after you get our download manager adware/cryptolocker)

"Download full functional version for free now" (actually a limited trial that you get to use after you dump personal info)

"Free trial, unlimited music downloads, cancel any time" (proceed to charge your credit card even though you cancelled the limited DRM download service on time. I'm looking at you Amazon Music)

Re:Ecosia – A search engine that plants trees by endori97 on Sunday January 10, 2021 @07:11AM (#25713916)
That phenomenon is called counter-signaling, which I first ran into listening to Dan Jurafsky making the point that if a menu uses the word "fresh", its a low-brow restaurant. A high-brow restaurant would never use the word "fresh" -- the freshness is implicit in the other signals.

https://kelley.iu.edu/riharbau/cs-randfinal.pdf

"People of average education show off the studied regularity of their script, but the well educated often scribble illegibly. Mediocre students answer a teacher’s easy questions, but the best students are embarrassed to prove their knowledge of trivial points. Acquaintances show their good intentions by politely ignoring one’s flaws, while close friends show intimacy by teasingly highlighting them. People of moderate ability seek formal credentials to impress employers and society, but the talented often downplay their credentials even if they have bothered to obtain them. A person of average reputation defensively refutes accusations against his character, while a highly respected person finds it demeaning to dignify accusations with a response."

Re:Ecosia – A search engine that plants trees by svara on Sunday January 10, 2021 @07:52AM (#25714215)
Discovered this very early in life when I found out that the more adults tell kids that something is "fun", the less it's true. If it really was fun, it would be obvious and wouldn't need to be said ;)
Re:Ecosia – A search engine that plants trees by not_knuth on Sunday January 10, 2021 @07:18AM (#25713962)
This is why I love HN. Learnt something new again today :)
Re:Ecosia – A search engine that plants trees by TaylorAlexander on Sunday January 10, 2021 @02:50PM (#25718870)
Ah yes I always see cheap food packaging that says “gourmet” or some other obviously unfitting epithet. Words printed on packaging are free and somehow folks who market cheap foods think stuff like that helps.
Re:Ecosia – A search engine that plants trees by kitkat_new on Sunday January 10, 2021 @06:15AM (#25713510)
You imply that a website that does not mention tree planting at all, plants the most trees. Interesting.

What would you recommend people to put on their website when they genuinely would want to provide a search engine that plants trees?

Do you imply matrix.org being a protocol for closed islands for insecure, centralized silence instead of a protocol for an open network for secure, decentralized communication?

Please start finding actual arguments instead of spreading superficial unfounded commentary.

Re:Ecosia – A search engine that plants trees by tumaal on Sunday January 10, 2021 @08:21AM (#25714415)
> You imply that a website that does not mention tree planting at all, plants the most trees. Interesting.

They actually don't imply that but the exact opposite, which is "the website that talks the most about tree planting, plants the least". The way you phrase it reverses that logical implication, which is not what they said.

Re:Ecosia – A search engine that plants trees by mrpopo on Sunday January 10, 2021 @03:58PM (#25719707)
For context, this isn't true either. Ecosia does plant a lot of trees. https://youtu.be/z1AVgbI_1r0
Re:Ecosia – A search engine that plants trees by abiogenesis on Sunday January 10, 2021 @10:27PM (#25724023)
If they plant the least, someone else should plant the most.
Re:Ecosia – A search engine that plants trees by bboygravity on Sunday January 10, 2021 @06:48AM (#25713753)
>> What would you recommend people to put on their website when they genuinely would want to provide a search engine that plants trees?

Everything except lies. Simple.

PS: I think the idea of a search engine like that is great (assuming the tree planting is done in a responsible way without destroy ecosystems). But I don't think implying to be privacy friendly when you're not really is great.

Re:Ecosia – A search engine that plants trees by anon321321323 on Sunday January 10, 2021 @09:38AM (#25714979)
Pragmatically, a regular full audit by an external entity might produce interesting results. Who is their auditor? That might be a pertinent detail to provide.
Re:Ecosia – A search engine that plants trees by gverrilla on Sunday January 10, 2021 @08:48AM (#25714587)
if those people wanted to plant trees, they would. when they announce that's what they're doing, it's not about the trees anymore, but about communication and branding. and communication and branding is poised with lies and misleading.
Re:Ecosia – A search engine that plants trees by indymike on Sunday January 10, 2021 @11:59AM (#25716667)
I'm looking for the plant tree apache module.
Re:Ecosia – A search engine that plants trees by drinkcocacola on Sunday January 10, 2021 @02:33PM (#25718661)
Absolutely agree. @bbobgravity is trying to create a sort of heuristic rule that simply does not work.
Re:Ecosia – A search engine that plants trees by andruby on Sunday January 10, 2021 @07:10AM (#25713913)
I’ve always found the “we value your privacy” an interesting _admission_. They definitely put a _value_ on your privacy by selling it! They exactly what other are willing to pay for it.
Re:Ecosia – A search engine that plants trees by nickthemagicman on Sunday January 10, 2021 @08:18AM (#25714393)
Funny. Big corporations also value your privacy at a value measured by their stock price.
Re:Ecosia – A search engine that plants trees by nalekberov on Sunday January 10, 2021 @08:39AM (#25714535)
But to be honest Parler is also going into this basket, they also overstate freedom of speech, which is in the long run practically impossible for any centralized service especially for those operated in the USA.

I don’t believe any particular company cares about anything other than maximizing their profit.

Re:Ecosia – A search engine that plants trees by 29athrowaway on Sunday January 10, 2021 @03:25PM (#25719267)
Rights = Duties

You lose your freedom of assembly if you use it to form mobs with the objective of perpetrating crimes.

You lose your freedom of speech if you use it to form unlawful assemblies with the objective of perpetrating crimes.

Trump was banned because he sent a mob of Q-indoctrinated lunatics to the Capitol with the likely objective of kidnapping senators and staging a coup (they were photographed carrying zip-tie handcuffs in Senate chambers).

It was a good idea to ban Trump, let's keep it that way. He rarely said anything of value anyways, only reality show trash talk, hate speech and pseudoscience.

Re:Ecosia – A search engine that plants trees by j8hn on Sunday January 10, 2021 @04:59PM (#25720472)
How did he send a mob into the Capitol building?
Re:Ecosia – A search engine that plants trees by 29athrowaway on Sunday January 10, 2021 @11:26PM (#25724500)
Re:Ecosia – A search engine that plants trees by j8hn on Monday January 11, 2021 @01:41AM (#25725483)
I don't think sending a one liner and a link to Wikipedia is keeping in good spirit with this forum.
Re:Ecosia – A search engine that plants trees by mlthoughts2018 on Sunday January 10, 2021 @10:39AM (#25715711)
> “ We value freedom of speech." (proceed to literally ban the president, wrong opinions and alternative apps like Parler)”

Saying this is not open-mindedness or support for free speech.

The president and Parler both have acted as direct, unequivocal instruments of fomenting and directing violence, especially with racist and fascist nature.

Banning them from any platforms is in no way connected to free speech whatsoever. President Trump’s Twitter account and Free Speech are two completely disconnected, unrelated concepts.

It requires fascism-sympathizing and racism-sympathizing to even suggest otherwise.

At this point, anything of the vein like, “Banning Trump from Twitter is unfair censorship” or “Banning Parler from app stores is unfair censorship” is just hate speech disguised as if it’s an attempt to uphold freedom.

Re:Ecosia – A search engine that plants trees by toper-centage on Sunday January 10, 2021 @06:28AM (#25713603)
The only place where Ecosia uses Facebook tracking, in on Marketing landing pages. If you don't land there from Facebook, i.e. If you go to the website directly, there is no Facebook tracking.
Re:Ecosia – A search engine that plants trees by Shared404 on Sunday January 10, 2021 @12:19PM (#25716879)
Just went directly to Ecosia's search page and disable tracking protection.

This appears to be accurate.

Re:Ecosia – A search engine that plants trees by ignoramous on Sunday January 10, 2021 @12:57PM (#25717342)
Ecosia, especially since they lay claim to protect their user's privacy, shouldn't, in my eyes, have anything to do with Facebook regardless of where their integration points are.

That said, my gripe isn't with their Facebook integration, it is with their dishonest privacy posture when the fine print reveals something else. They can do way better.

Re:Ecosia – A search engine that plants trees by Shared404 on Sunday January 10, 2021 @01:10PM (#25717504)
I concur. I just thought it wise to check the above commentors statement just to make sure that what they said was accurate.

I definitely agree about the fine print. I wish more companies would just say up front what they are going to do.

Re:Ecosia – A search engine that plants trees by 1vuio0pswjnm7 on Sunday January 10, 2021 @02:18PM (#25718482)
Ecosia requires a User-Agent header else will block user and ask her to solve captcha. Few if any search engines ask for this additional identifier. Google. Bing, DuckDuckGo all work fine without it. Does Ecosia's privacy documentation explain why Ecosia is different.
Re:Ecosia – A search engine that plants trees by beardog on Sunday January 10, 2021 @05:59AM (#25713402)
Further, the difference between this and how Duckduckgo uses Bing is that DDG does a proper proxy without forwarding your IP or any info about you.
Re:Ecosia – A search engine that plants trees by ColinHayhurst on Sunday January 10, 2021 @06:48AM (#25713758)
Microsoft knows what they both do, but ain't saying. Maybe they have the same contract or each syndidation partner has a unique one. Probably the latter. Trying getting a syndication partnership where you don't agree to pass on some part of the IP; I've not heard of anyone getting that but anecdotes is all I have. Microsoft (or Google in the case of their syndication partners) are not going to tell us.
Re:Ecosia – A search engine that plants trees by toper-centage on Sunday January 10, 2021 @06:28AM (#25713610)
Ecosia also does that
Re:Ecosia – A search engine that plants trees by nalekberov on Sunday January 10, 2021 @08:32AM (#25714483)
Well if you say “we plant trees” people start to think of you as being an angel and being extremely good at everything you do.

I don’t mind if they use environmental issues for their marketing interests, but this is so ridiculous to have such privacy policy.

Re:Ecosia – A search engine that plants trees by Bellamy on Sunday January 10, 2021 @01:39PM (#25717888)
I think they mean: "We don't store all your search results for years and monetize you, like the other major search engines. Especially the biggest one, u know what I mean."
Re:Ecosia – A search engine that plants trees by agar on Sunday January 10, 2021 @04:24PM (#25720053)
I'm not weighing in on Ecosia specifically (no direct knowledge), but...

It's very important to remember the legal and liability requirements associated with privacy policies. In many jurisdictions, you are subject to liability if you collect something that was not disclosed in your privacy policy.

Therefor, the default is to over-report. If there's a chance that something is collected, better to put it into the privacy policy. This is similar to the famous "California Cancer Warning" - the incentives to include everything, no matter the materiality, ultimately render the warnings useless.

Any central server will "collect" everything typed into a text box. If it allows registration, requires password verification, perhaps offers customer support, it will disclose collection of "personally identifiable information" including email, phone number, possibly computer-specific information like browser, IP, installed version info, etc. Hosting on Amazon means it's shared with a 3rd party. And so on.

Also, this seems crazy to the privacy conscious, but many consumers want Facebook integration. They ask for social logins, and easy ways to share via social media. Once those features are enabled to satisfy their users, they're subject to all the cruft that comes with those APIs - and need to disclose those in their privacy policies.

None of the above means that a site is nefariously using the data it collects. Nor does it mean they do not take privacy very seriously.

The interconnectedness of the web, legal requirements, litigious privacy advocates, and overarching privacy regulations (none of which are bad on their own) combine to make the Privacy Policy an almost useless signal of a company's actual privacy posture.

That's why it's highly unfair to Ecosia for OP to so strongly imply they lie (or are, at best, misleading and hypocritical) and use your data nefariously, simply by excerpting a few lines of the Privacy Policy. The scare quotes, italicized "may"s, rhetorical questions, and other devices written to instill doubt and distrust makes me wonder about the agenda behind the message, frankly.

Privacy is extremely important, but so is customer service and a viable business model. Suggesting that any product that collects data to run the business (and properly discloses it, as Ecosia does) will "do so for nefarious purposes" and does not "take user privacy very seriously" ("Right.") is unfair and undermines the work good people do to craft a viable balance in today's difficult tech ecosystem.

Re:Ecosia – A search engine that plants trees by ignoramous on Tuesday January 12, 2021 @05:54AM (#25745123)
Thanks, I get where you're coming from (that: privacy absolutists tend to throw the baby out with the bath water) but you misunderstand the point I was making. My gripe is with their claim that they protect privacy. If you're going to store user-data as-is for 7 days even if anonymized later and stored forever (for some definition of "anonymization", which is not a trivial thing to do), it doesn't come close to "protecting" anything.

I don't have a horse in this fight, but I do build FOSS anti-surveillance / anti-censorship apps, and take offense at such misleading messaging.

> It's very important to remember the legal and liability requirements associated with privacy policies.

Why isn't it important to not mislead with headlines and FAQs?

> Therefor, the default is to over-report.

Wouldn't have to if one really took measures to "protect privacy" but when one can't / don't / won't ... then one may at least have the courtesy to be upfront about it.

> Nor does it mean they do not take privacy very seriously.

They claim to "protect your privacy". Their words, not mine. But the fine-print doesn't inspire confidence, even if written in CMA-style (though, that's a lame excuse). Or as they say, why not put money where your mouth is.

> That's why it's highly unfair to Ecosia for OP to so strongly imply they lie (or are, at best, misleading and hypocritical) and use your data nefariously, simply by excerpting a few lines of the Privacy Policy.

Thanks but it is not I that's hypocritical. You have it the other way around, I am afraid.

> italicized "may"s,

Here's the clause: "The anonymised data is saved for as long as is necessary for the evaluation. The data is not transferred to any third party. We will not access your data located outside of the app, such as your calendar, photos, messages or such like unless you have permitted us to do so."

> Suggesting that any product that collects data to run the business...

You're extrapolating the critique to the entire world, which you can, but you then don't get to dismiss it for one entity just because "the rest of the world can't survive without data collection". Ecosia may not need personal data to be running a viable tech business (which at its core is a wrapper on top of Bing with ad revenue going to afforestation efforts).

> ...good people do to craft a viable balance in today's difficult tech ecosystem.

Like someone else suggested in this thread: Just because you plant trees, you don't suddenly have a claim to being an "angel". Ecosia may have good people behind them or not, but I do care about honesty and earnestness.

Also, I write FOSS software full-time, do I qualify for your "good people" list? :D

Re:Ecosia – A search engine that plants trees by acvny on Sunday January 10, 2021 @11:02AM (#25715969)
Something - friendly is just the same as Something - ready. If you remember the HD - ready TVs you know what it means.
Re:Ecosia – A search engine that plants trees by kazinator on Sunday January 10, 2021 @03:24PM (#25719266)
And "Results by Microsoft". Uh, okay.
Re:Ecosia – A search engine that plants trees by Daho0n on Sunday January 10, 2021 @03:59PM (#25719730)
DDG uses Bing too. Nothing wrong with that.