Opened 8 years ago

Closed 6 years ago

#3962 closed project (wontfix)

Add duckduckgo searchbox to check.tp.o?

Reported by: mikeperry Owned by: aagbsn
Priority: Medium Milestone:
Component: Applications/Tor Check Version:
Severity: Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

I notice duckduckgo is running an advocacy campaign. Would they like us to add a searchbox to the check.tp.o landing page?

The omnibox is another option, but it is going to make us look pretty botty, and that doesn't help anyone longterm. TBB users who use the omnibox are going to just be throwing query strings with no context. If they are already concerned about our bot problems I think we can run an interesting trial on check.tp.o to see if it changes the statistics on their end.

check.tp.o should probably already be testing to see if you're using a safe browser. As part of this, why doesn't it also have the user do some JS proof of work, and/or a DOM-based randomized challenge+response?

We can at least make it so that the queries coming from check.tp.o will be very likely to require a real, full TBB running behind them. That is kind of expensive for a scraper.

Would they be willing to work with us to analyze changes in their abuse data if we decided to do this experiment, or would we just be doing the work for no reason?

I guess this could apply to other search engines, too. But that duck is just so cute and friendly looking. He obviously wants to help, and he even has a bow-tie.

Child Tickets

Change History (11)

comment:1 Changed 8 years ago by phobos

The current check.tpo isn't going to support this. We have a redesigned page waiting for torbel and implementation. On another note, you should be asking DDG, not me.

comment:2 Changed 8 years ago by phobos

Status: newaccepted

I think we should just do this. DDG seems sane.

comment:3 Changed 8 years ago by phobos

Actually, DDG ssl would be best.

comment:4 Changed 8 years ago by phobos

I talked to ddg about this. They are on-board. Engage.

comment:5 Changed 8 years ago by phobos

Component: CompanyTor Check

comment:6 Changed 8 years ago by phobos

Owner: changed from phobos to aagbsn
Status: acceptedassigned

comment:7 Changed 8 years ago by mikeperry

I moved the proof-of-work bits of this into #4666.

comment:8 Changed 8 years ago by mikeperry

Since we created this ticket, startpage.com has started offering Google-fortified results, making our decision harder.

We should make sure the final design of this is easily pluggable between at least those two engines.

comment:9 Changed 8 years ago by aagbsn

https://check.extc.org < here's a first stab, note that it seems to require javascript and noscript throws a fit:

[NoScript XSS] Sanitized suspicious upload to https://startpage.com/do/search from https://check.extc.org/: transformed into a download-only GET request.

comment:10 Changed 7 years ago by aagbsn

the DDG version is running at https://check2.torproject.org

comment:11 Changed 6 years ago by arlolra

Resolution: wontfix
Status: assignedclosed
Note: See TracTickets for help on using tickets.