<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style></style></head><body lang=EN-GB link=blue vlink=purple><div class=WordSection1>DuckDuckGo are a US owned and based company, that means they can be compelled under US law to monitor their users. Even though DuckDuckGo state they do not log any information and they also use HTTPS by default, it does not protect them from being compelled to monitor their users under FISAAA, PATRIOT and CALEA – such an order would also include a Gag Order to prevent them from disclosing that they are under the order.<o:p></o:p><o:p> </o:p>Furthermore, DuckDuckGo have not been audited or certified by any external body.<o:p></o:p><o:p> </o:p>In my personal and professional opinion, DuckDuckGo cannot offer the same level of protection as Startpage whilst they are incorporated and hosted in the US - even if they were audited and certified, it would still not remove their vulnerability to US surveillance laws.<o:p></o:p><o:p> </o:p>Sincerely,<o:p></o:p><o:p> </o:p>Alexander Hanff<o:p></o:p><o:p> </o:p>From: Alexandre Strube [mailto:surak@surak.eti.br] Sent: 24 June 2013 20:04 To: Alexander Hanff Cc: Ubuntu Devel Discuss Subject: Re: Proposal to change default search engine<o:p></o:p><o:p> </o:p>What is the difference between this company and duck duck go, or what would be the benefit of this over, say, have such measures implemented client-side?<o:p></o:p>[]s Alexandre Strube Sent from my touchpad<o:p></o:p><div>Em 24/06/2013 19:56, "Alexander Hanff" <<a href="mailto:a.hanff@think-privacy.com">a.hanff@think-privacy.com</a>> escreveu:<o:p></o:p><div><div>Hi list,<o:p></o:p> <o:p></o:p>Introduction<o:p></o:p>---------------<o:p></o:p>In light of the recent scandal regarding the NSA’s surveillance programme PRISM and the fact that all US Corporations or Non-US Corporations with facilities within the US are vulnerable to Foreign Intelligence Surveillance Court (FISC) orders under the Foreign Intelligence Surveillance Act, USA PATRIOT Act and also under Communications Assistance for Law Enforcement Act (CALEA) and other orders (such as National Security Letters) – I would like to begin a discussion on changing the default search engine in Ubuntu’s web browsers from Google to a more privacy enhancing service.<o:p></o:p> <o:p></o:p>Disclosure<o:p></o:p>------------<o:p></o:p>My name is Alexander Hanff, I am a privacy advocate who has for the past 5+ years been campaigning for human rights across the globe. I worked in the technology sector for over 17 years before returning to university to study the impact of technology on society as a sociologist. Prior to completing my degree, I spearheaded a campaign against a company called Phorm who were seeking to intercept all communications at the ISP level by installing Deep Packet Inspection (DPI) technology across most of the UK’s public communications networks.<o:p></o:p> <o:p></o:p>After launching NoDPI.org and successfully chasing Phorm out of the UK and EU, I took up a position at Privacy International, where I headed up their Digital Privacy portfolio for 3 years.<o:p></o:p> <o:p></o:p>I have given speeches at conferences all over the world, including Brazil, Beijing, Washington DC and most European countries as well as having been involved at the regional (EU Commission) and national level on consultations regarding several laws, including Regulation of Investigatory Powers Act 2000 (in the UK) and Europe’s ePrivacy Directive.<o:p></o:p> <o:p></o:p>In January last year, I left Privacy International and became an independent campaigner and consultant.<o:p></o:p> <o:p></o:p>I am currently not an employee at Startpage or Ixquick and I am posting this email as an advocate of civil liberties and fundamental rights.<o:p></o:p> <o:p></o:p>Proposal<o:p></o:p>-----------<o:p></o:p> <o:p></o:p>I would like to see Ubuntu change the default search provider to Startpage.com<o:p></o:p> <o:p></o:p>My reason for this is that Startpage.com return search results from Google, but they do so in a privacy enhancing manner – that being they do not send any information about the person making the query to Google. Furthermore, they provide the option of accessing returned results via their proxy, which protects their users from passing on personal information when they click on a result. They also provide cookieless preferences, they don’t log any information at all and they encrypt all connections by default via HTTPS.<o:p></o:p> <o:p></o:p>Now I won’t lie to you all, I am a big fan of the company – I know them very well and have provided a lot of advice to them over the past 5 years in order for them to improve their services. But that doesn’t form the basis of my motive for this email. I have been a Linux user since 1997 and I am a big supporter of FOSS software and the FOSS community – first and foremost, I want to help protect people’s privacy.<o:p></o:p> <o:p></o:p>Startpage is based in the Netherlands and are a Dutch company, which means they are not vulnerable to US surveillance laws. Furthermore, they are certified by Europrise, the leading privacy auditing body in the EU, funded by the European Commission. I know the team personally and have visited their office on a number of occasions, they have always taken my advice to heart and implemented every change I have suggested to them. I have absolutely every confidence that they are a privacy enhancing technology and a benefit to the world & I would stake my reputation on that in a heartbeat.<o:p></o:p> <o:p></o:p>Can we please begin the discussion on making this change for the benefit of all Ubuntu users and show the world that FOSS embraces and enhances fundamental rights?<o:p></o:p> <o:p></o:p>Regards,<o:p></o:p> <o:p></o:p>Alexander Hanff<o:p></o:p>Privacy Consultant<o:p></o:p></div></div> -- Ubuntu-devel-discuss mailing list <a href="mailto:Ubuntu-devel-discuss@lists.ubuntu.com">Ubuntu-devel-discuss@lists.ubuntu.com</a> Modify settings or unsubscribe at: <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss" target="_blank">https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss</a><o:p></o:p></div></div></body></html>