🆕 Software Suggestion | Ecosia search engine #682

Closed
opened 2018-12-22 20:21:09 +00:00 by Mikaela · 10 comments
Mikaela commented 2018-12-22 20:21:09 +00:00 (Migrated from github.com)

Basic Information

Name: Ecosia
Category: Search engine
URL: https://www.ecosia.org/
About URL https://info.ecosia.org/

Description

Ecosia is an search engine planting trees with the money they make. They appear to be transparent releasing financial documents at https://documents.ecosia.org/467540 (however I didn't read any).

Their privacy policy looks OK to me, https://info.ecosia.org/privacy . However their results come from Bing, but that is also one of the sources of DuckDuckGo.

## Basic Information **Name:** Ecosia **Category:** Search engine **URL:** https://www.ecosia.org/ **About URL** https://info.ecosia.org/ ## Description Ecosia is an search engine planting trees with the money they make. They appear to be transparent releasing financial documents at https://documents.ecosia.org/467540 (however I didn't read any). Their privacy policy looks OK to me, https://info.ecosia.org/privacy . However their results come from Bing, but that is also one of the sources of DuckDuckGo.
ghost commented 2018-12-22 20:27:56 +00:00 (Migrated from github.com)

I found the project very interesting a few years ago, but not being able to change the source of the search results was a deal breaker for me.

I found the project very interesting a few years ago, but not being able to change the source of the search results was a deal breaker for me.
asddsaz commented 2018-12-28 21:21:48 +00:00 (Migrated from github.com)

They have a decent privacy policy: https://tosdr.org/#ecosia
But are non-free, therefore don't meet the software criteria.

They have a decent privacy policy: https://tosdr.org/#ecosia But are non-free, therefore don't meet the software criteria.
Mikaela commented 2018-12-29 06:39:36 +00:00 (Migrated from github.com)

DuckDuckGo and StartPage.com are also non-free as far as I can see?

DuckDuckGo and StartPage.com are also non-free as far as I can see?
Mikaela commented 2018-12-29 06:46:34 +00:00 (Migrated from github.com)

Oh, you opened https://github.com/privacytoolsIO/privacytools.io/pull/699 and forgot to mention it here.

Oh, you opened https://github.com/privacytoolsIO/privacytools.io/pull/699 and forgot to mention it here.
ghost commented 2019-01-20 19:53:09 +00:00 (Migrated from github.com)

Ecosia has always been hostile toward Tor users which makes it a non-starter from a privacy viewpoint.

ATM it's just dropping packets from Tor and timing out, which IMO is even less diplomacy than a "403 forbidden".

(edit) actually just now it was very slow but served my Tor packets okay for the 1 query I tried. So I'm not sure if Ecosia is still mistreating Tor users these days.

(update 2019-03-26) Ecosia was working from tor for a couple weeks. And now it's really hit and miss. Tor users can enter a search criteria, but upon submission 1 of 4 things happens:

  • DoS (they say too much traffic coming from your IP and outright deny results)
  • google CAPTCHA is served up (needs j/s enabled for 3 different interdependent google hosts requiring 3 consecutive page refreshes). It looks bad for people without eyesight because the text says "enter the characters" but there are none. Instead there are pics to click on. So the audible would be giving incorrect info.
    ecosia_captcha_wording
    • google CAPTCHA server itself refuses to send puzzle due to net traffic:
      ecosia_captcha_dos
  • results given

It's totally unacceptable that in the first two cases they present a query field. If you're going to deny me service or put me through hoops, be up front about it. To collect the query first and then reject or inconvenience after I took the time to write out a query, it's a waste of my time. They get the benefit of recording search phrase popularity stats but the user does not get the benefit of the results.

The CAPTCHA itself benefits google, who monatizes the puzzle and also gathers data about who is accessing the page, which can be further monatized.

Ecosia is using CloudFlare (not good) for their financial reports

From a financial PoV, Ecosia is feeding both microsoft and google. DDG is much worse, but Startpage and searx are relatively better IMO.

Ecosia has always been hostile toward Tor users which makes it a non-starter from a privacy viewpoint. ATM it's just dropping packets from Tor and timing out, which IMO is even less diplomacy than a "403 forbidden". (edit) actually just now it was very slow but served my Tor packets okay for the 1 query I tried. So I'm not sure if Ecosia is still mistreating Tor users these days. (update 2019-03-26) Ecosia was working from tor for a couple weeks. And now it's really hit and miss. Tor users can enter a search criteria, but upon submission 1 of 4 things happens: * DoS (they say too much traffic coming from your IP and outright deny results) * google CAPTCHA is served up (needs j/s enabled for 3 different interdependent google hosts requiring 3 consecutive page refreshes). It looks bad for people without eyesight because the text says "enter the characters" but there are none. Instead there are pics to click on. So the audible would be giving incorrect info. ![ecosia_captcha_wording](https://user-images.githubusercontent.com/18015852/55029207-d0d41b00-5009-11e9-8a94-00d43be1e73b.png) * google CAPTCHA server itself refuses to send puzzle due to net traffic: ![ecosia_captcha_dos](https://user-images.githubusercontent.com/18015852/55029079-7935af80-5009-11e9-883f-a8831ee1ff4f.png) * results given It's totally unacceptable that in the first two cases they present a query field. If you're going to deny me service or put me through hoops, be up front about it. To collect the query first and then reject or inconvenience after I took the time to write out a query, it's a waste of my time. They get the benefit of recording search phrase popularity stats but the user does not get the benefit of the results. The CAPTCHA itself benefits google, who monatizes the puzzle and also gathers data about who is accessing the page, which can be further monatized. Ecosia is using CloudFlare ([not good](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-460077544)) for their [financial reports](https://blog.ecosia.org/ecosia-financial-reports-tree-planting-receipts/) From a financial PoV, Ecosia is feeding both microsoft and google. DDG is much worse, but Startpage and searx are relatively better IMO.
Mikaela commented 2019-06-03 09:10:23 +00:00 (Migrated from github.com)
https://github.com/privacytoolsIO/privacytools.io/pull/960#issuecomment-498073312 ?
erciccione commented 2019-06-03 09:25:05 +00:00 (Migrated from github.com)

Why reopen this @Mikaela ?
From the comment of the ghost user looks like Ecosia is not Tor-friendly, which IMO is a big "no no" if we are talking about user privacy. I don't think that them being non-free was the stopper here.

Why reopen this @Mikaela ? From the comment of the ghost user looks like Ecosia is not Tor-friendly, which IMO is a big "no no" if we are talking about user privacy. I don't think that them being non-free was the stopper here.
Mikaela commented 2019-06-04 21:50:06 +00:00 (Migrated from github.com)

I don't think we have a formal rule of search engines needing to be Tor friendly in order to be listed. To quote myself from the forum:

Ecosia, because I am more worried about the climate change than their Tor hostility.

What do you think @privacytoolsIO/editorial ?

I don't think we have a formal rule of search engines needing to be Tor friendly in order to be listed. To [quote myself from the forum](https://forum.privacytools.io/t/what-is-your-daily-search-engine/174/7?u=mikaela): > Ecosia, because I am more worried about the climate change than their Tor hostility. What do you think @privacytoolsIO/editorial ?
erciccione commented 2019-06-05 08:07:56 +00:00 (Migrated from github.com)

I'm confused now. Isn't this Privacytools.io? Shouldn't this community suggest the best tools to protect people's privacy?

I don't think we have a formal rule of search engines needing to be Tor friendly in order to be listed

You don't need a formal rule. Supporting Tor is a big point if you are proposing a privacy-oriented browser, planting trees is not...

You are not addressing any of the legit concerns pointed out by the ghost user, but you are reopening this issue anyway. I understand you like Ecosia for the ideology behind it, but that's offtopic. I share your concerns for the environment, but you are suggesting Privacy tools to a wide audience here, you have responsabilities. I don't think would be wise to ignore the concerns about privacy because "You are more worried about the climate change".

I'm confused now. Isn't this **Privacy**tools.io? Shouldn't this community suggest the best tools to protect people's privacy? > I don't think we have a formal rule of search engines needing to be Tor friendly in order to be listed You don't need a formal rule. Supporting Tor is a big point if you are proposing a privacy-oriented browser, planting trees is not... You are not addressing any of the legit concerns pointed out by the ghost user, but you are reopening this issue anyway. I understand you like Ecosia for the ideology behind it, but that's offtopic. I share your concerns for the environment, but you are suggesting *Privacy* tools to a wide audience here, you have responsabilities. I don't think would be wise to ignore the concerns about privacy because "You are more worried about the climate change".
Mikaela commented 2019-07-21 16:34:39 +00:00 (Migrated from github.com)
Case closed, see comments here and https://github.com/privacytoolsIO/privacytools.io/pull/1036#pullrequestreview-263991424 & below.
This repo is archived. You cannot comment on issues.
No Milestone
No Assignees
1 Participants
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: privacyguides/privacytools.io#682
No description provided.