DuckDuckGo Goodies(duckduckgo.com)
duckduckgo.com
DuckDuckGo Goodies
https://duckduckgo.com/goodies#Cryptography
69 comments
DuckDuckHack is a major component of DuckDuckGo's future. It's great when developers, well versed in an answer space, come in and make a goodie because the value spreads across the user base. As DDH grows, it will be neat to think of as a standard library for future contributors to work with. For example a mortgage specific calculator leveraging the generic calculator.
As long as it doesn't supposedly conflict with their core values[0]… because you know your search engine should censor such things that don't conform to your world view ;)
[0]https://github.com/duckduckgo/zeroclickinfo-spice/pull/100
[0]https://github.com/duckduckgo/zeroclickinfo-spice/pull/100
That website allows people to create profiles for other people _without their consent_, then allows the person's attractiveness, friendliness, goodness to be publicly rated/smeared.
And you wanted all that data to be displayed when a person's name is searched for?
And when the people at DDG decided not to pull in your plugin you're calling it censorship?
I have no words
And you wanted all that data to be displayed when a person's name is searched for?
And when the people at DDG decided not to pull in your plugin you're calling it censorship?
I have no words
For someone with no words, you sure do have alot to say.
Go on, tell us more about how you don't like x behavoir that people enage in everyday with or without the aid of technology? Ever comment on somone without their consent, even if there may be some truth to it or not in an unaccountable fashion? Ever upload a photo to a social network without asking all possible parties if that was ok? Did you give the ok for mass surveillance by corperations and governments and the secret profiles they compile and leverage in private?
DDG has every right to not want to allow x for their platform, but let's not pretend that them making that decision is going to make things just go away, especially just because one may or not like x. Not all of us can create The Names Database, cash out for $10m and try to sell privacy as a service through a search engine and ignore the elephant in the room.
Go on, tell us more about how you don't like x behavoir that people enage in everyday with or without the aid of technology? Ever comment on somone without their consent, even if there may be some truth to it or not in an unaccountable fashion? Ever upload a photo to a social network without asking all possible parties if that was ok? Did you give the ok for mass surveillance by corperations and governments and the secret profiles they compile and leverage in private?
DDG has every right to not want to allow x for their platform, but let's not pretend that them making that decision is going to make things just go away, especially just because one may or not like x. Not all of us can create The Names Database, cash out for $10m and try to sell privacy as a service through a search engine and ignore the elephant in the room.
Um, I'm sure the NSA would be happy to implement a strong password generator if you asked nicely. Seriously, if we aren't willing to trust the NSA to generate strong passwords for us, is it really a good idea to trust DDG (or any remote web service) to generate a strong password?
We open sourced our instant answers platform a couple years ago, in the hope to get more eyeballs on them (for quality and quantity): http://duckduckhack.com/
It might not address your point but any underlying flaws (randomness, etc) can be caught/fixed by the community.
Sounds like that still requires that we trust DDG to be actually using the code in its git repo.
Yes, just like you're trusting the gazillion lines of code running on your own computer. No one is able to audit all of them in their lifetime.
Giving the benefit of the doubt to the gazillion lines of code running on your computer, that you and several million other people downloaded from the same place, with verified SHA sums, is actually pretty reasonable. If you're truly paranoid, all you have to do to ensure that you're benefiting from crowd-sourced verification is verify the SHA sum code.
Stuff running on some website that only the web site admins can see is not in the same ballpark.
Stuff running on some website that only the web site admins can see is not in the same ballpark.
Where you download it from and SHA only gives guarantees about integrity of the data transfer. I am talking about trusting that the code does what it is supposed to do. Bugs can hide in code for years, whether inserted accidentally or intentionally, as the Heartbleed episode demonstrates. SHA does absolutely nothing against this.
I'm addressing malice, not oversight. The SHA allows you to be confident that you've got the same code as everyone else.
I was addressing malice as well. Having the same code is no guarantee that it does not contain an intentional bug that can be exploited. Neither is knowing that it came from some specific entitity (code signing), because again this presupposes establishing trust. There is no technical solution to trust.
But if the code you have is the same as the code millions of other people have, it's safer to give it the benefit of the doubt than a single server than only a handful of people have access to.
I just gave you an example where it turned out not to be safer: Heartbleed. Malicious bugs can be well hidden, also in open source code. The openness shouldn't give you a false sense of security, because it doesn't imply the code has been audited any better than some closed source code.
I disagree that heartbleed is an example of not being safer. If everyone's SSL was a closed-source library, then we would be considerably less safe.
But to carry the analogy to a closed-source web site that you just connect to, as is the topic of this comment thread, we'd certainly be less safe if we routed all SSL traffic through an unknown system on the web that had the opportunity to decrypt and encrypt.
But to carry the analogy to a closed-source web site that you just connect to, as is the topic of this comment thread, we'd certainly be less safe if we routed all SSL traffic through an unknown system on the web that had the opportunity to decrypt and encrypt.
> it really a good idea to trust DDG (or any remote web service) to generate a strong password?
Probably not, but for ease of use, I've used it a couple of times to generate temporary passwords that users are forced to change on login.
Probably not, but for ease of use, I've used it a couple of times to generate temporary passwords that users are forced to change on login.
I often find myself guessing at some of the DDG goodies or !bang searches, and more often than not the thing I want already exists.
I wish the !bang searches in particular were more discoverable, though. Perhaps if you search for "foo site:bar", or "foo bar" where bar is a well-known site or service, DDG should suggest 'Try "foo !bar" or "!bar foo" to ...".
I wish the !bang searches in particular were more discoverable, though. Perhaps if you search for "foo site:bar", or "foo bar" where bar is a well-known site or service, DDG should suggest 'Try "foo !bar" or "!bar foo" to ...".
[deleted]
I too have had trouble finding where the bang codes are.
I think the easiest is this: Go to the ddg home page, click on the drop down to the right of the search field, and at the bottom of that is "By category (!bang)"
Click that and you'll go to https://duckduckgo.com/bang.html
Or you could just remember duckduckgo.com/bang :)
I think the easiest is this: Go to the ddg home page, click on the drop down to the right of the search field, and at the bottom of that is "By category (!bang)"
Click that and you'll go to https://duckduckgo.com/bang.html
Or you could just remember duckduckgo.com/bang :)
Or just search !bang :)
If you try next.duckduckgo.com and type "!", it automatically shows all bangs you can use.
The autocomplete is certainly nice, but it doesn't help lead towards what you might want for a particular search.
Making the !bangs more explorable is definitely partner to making them generally more visible. Someone had suggested an instant answer that would actually fix this: https://duck.co/ideas/idea/832/where-goes-that-bang and someone started working on it recently: https://github.com/duckduckgo/zeroclickinfo-spice/pull/546
We plan to overhaul the !bangs page when we get a moment and something that's already in place is a categorization system: https://duckduckgo.com/bang.html i.e. they're arranged by type! So someone could, for example, modifying the upcoming instant answer to show all the available !bangs and their associated domains by searching for "image !bangs" (which would show all the available !bangs under the "image" category) or !blogs, etc. Is that more of what you mean?
We plan to overhaul the !bangs page when we get a moment and something that's already in place is a categorization system: https://duckduckgo.com/bang.html i.e. they're arranged by type! So someone could, for example, modifying the upcoming instant answer to show all the available !bangs and their associated domains by searching for "image !bangs" (which would show all the available !bangs under the "image" category) or !blogs, etc. Is that more of what you mean?
Would it help if, like the previous "Try this search on code, we primed the !bang autocomplete with site searches well represented in the results?
It seems a little strange that typing in a search term, and then the interrobang, gives you a simple text autocomplete drop-down, without the very useful logos and search engine descriptions you get if you type the interrobang first, without the search term.
Would be nice if, as you say, you could type in, for instance, 'lung scaffold biomedical !', and have a drop-down bang search appear, populated with the relevant scientific search engines, and then also include graphical logos, and descriptions. It would make the !bang options much more discoverable.
Would be nice if, as you say, you could type in, for instance, 'lung scaffold biomedical !', and have a drop-down bang search appear, populated with the relevant scientific search engines, and then also include graphical logos, and descriptions. It would make the !bang options much more discoverable.
I mentioned this in my comment above but am wondering if it applies here as well: https://news.ycombinator.com/item?id=7729839
--the !bangs are already categorized and it sounds like you're looking for a way to see which !bangs might apply to your search (for better results). ~explore mode. Would the suggestion of making them searchable by category be a good solution or something even different?
--the !bangs are already categorized and it sounds like you're looking for a way to see which !bangs might apply to your search (for better results). ~explore mode. Would the suggestion of making them searchable by category be a good solution or something even different?
The categories are useful, but it would be great if you could work out a way of returning relevant search engines to a particular request, inline with that request. It just reduces friction.
> Would the suggestion of making them searchable by category be a good solution or something even different?
On the /bang.html page I think it would be good if you could search through the !bangs using a small text description, or a series of tags, because a single category doesn't really cover it. For instance, scirus or google scholar are science search engines, you can't just put them in the 'academic' or 'learning' section, and expect people to be able to find them, unless they already know the sites.
> Would the suggestion of making them searchable by category be a good solution or something even different?
On the /bang.html page I think it would be good if you could search through the !bangs using a small text description, or a series of tags, because a single category doesn't really cover it. For instance, scirus or google scholar are science search engines, you can't just put them in the 'academic' or 'learning' section, and expect people to be able to find them, unless they already know the sites.
Duly noted! We'll definitely take that to heart.
An interrobang is a combination of a question mark and an exclamation mark. You mean a bang, which is a shorthand for an exclamation mark. See http://en.wikipedia.org/wiki/Interrobang
Ah, thanks, silly mistake.
How did the pass up on the opportunity to call this DuckDuckGoodies?
They are calling it DuckDuckGoodies if you click through to the page.
(I admittedly can't be certain they were an hour ago when you asked.)
(I admittedly can't be certain they were an hour ago when you asked.)
I made one of these about 2 years ago. It displays the descriptions of UN numbers, those little codes you see on trucks transporting nasty chemicals.
https://duckduckgo.com/?q=UN+1993
Perl module: https://github.com/tantalor/perl-Number-UN
DDG module: https://github.com/duckduckgo/zeroclickinfo-goodies/blob/mas...
It was very nice to work with the DDG people to get this integrated.
https://duckduckgo.com/?q=UN+1993
Perl module: https://github.com/tantalor/perl-Number-UN
DDG module: https://github.com/duckduckgo/zeroclickinfo-goodies/blob/mas...
It was very nice to work with the DDG people to get this integrated.
The IMDB example in the Entertainment section is showing a pretty weird result for "Shawshank Redemption". Instead of the well known movie, the highlighted result is an episode of a quite obscure TV series ("Dating a Puppet").
-- Edit: I've just noticed the query goes straight to imdbapi.com, which returns the same results when searching for "Shawshank Redemption", without the "The" prefix. Which is still a bit weird, but has nothing to do with DDG.
-- Edit: I've just noticed the query goes straight to imdbapi.com, which returns the same results when searching for "Shawshank Redemption", without the "The" prefix. Which is still a bit weird, but has nothing to do with DDG.
Thanks for the heads up! We're going to update this page soon--IMDBAPI uses a variety of sources, one of them (iirc) is OMDBAPI.com and it looks like the error is stemming from there: http://www.omdbapi.com/?t=Shawshank%20Redemption
Very cool. DDG should consider displaying the goodies page as default for beginners, with choice to collapse the section in favour of the plain page if desired. It would encourage more experimentation and additions. Suggesting it because even a regular user like myself had no idea this page existed, much less a newbie.
Duly noted! It's been relatively hard to discover so we're working on that for the next version of DDG. Really appreciate the feedback in-favor!
FYI the sidebar scrolling doesn't work (and general layout is a bit iffy) on Nexus 7 chrome. I wasn't going to say anything but if the audience is very general it might be worth fixing - the new ddg works awesomely other than that! :)
Gotcha! Sidebar scrolling (via flick, not tap) is still being worked on but the other iffyness sounds iffy :) We'll give it a look.
I'm sad to see that the "hash" goodie just identifies the type of the hash. It'd sure be nice if some web-crawler index or another would hash the documents it crawled before throwing them away--then you could search arbitrary web-resources by hash, the same way you can currently search images by image-fingerprint. (And such a feature, in "I Feel Lucky" mode, would effectively turn the entire web into a DHT.)
Awesome. An easy interface explaining each goodie.
Such a simple idea- and yet I've never seen Google figure something like this out. I mean I'm sure it's buried somewhere in Google's technical docs, but those docs don't qualify as easy interfaces.
Well done DuckDuckGo!
Such a simple idea- and yet I've never seen Google figure something like this out. I mean I'm sure it's buried somewhere in Google's technical docs, but those docs don't qualify as easy interfaces.
Well done DuckDuckGo!
This is awesome. They've managed to identify many little utilities that users need occasionally. Google has a similar set of utilities, but it is only accessible through the search-bar, and you need to know what you're looking for. DDG's is much easier to browse/use.
These come from our open source instant answers platform: http://duckduckhack.com/
So, anyone can suggest or create instant answers and it works out better that they're open source, since people who are most passionate about a topic (movies, legos, pokemon, gardening, etc) will know the best sources for it and the best information to display.
So, anyone can suggest or create instant answers and it works out better that they're open source, since people who are most passionate about a topic (movies, legos, pokemon, gardening, etc) will know the best sources for it and the best information to display.
I don't like that the generated UUID has uppercase letters.
Since the link links to the Cryptography section, that should be part of the post title.
Couldn't find any Bitcoin goodies. That's surprising!
There's a new one!
https://next.duckduckgo.com/?q=bitcoin+eur
https://next.duckduckgo.com/?q=bitcoin+eur
awesome ! can the plugins be written in any language ? or is it just perl ?
From the DuckDuckGo Goodie FAQ:
What if I don't know Perl?
If you don't know Perl, that's OK! Some instant answer types (Fathead, Longtail) don't require the use of Perl. Also, if you know PHP, Ruby, or Python you should be able to write a Goodie in Perl pretty easily using this awesome cheat sheet.
ref: https://duck.co/duckduckhack/faq#goodie
So DDG Goodie plugins can only be written in Perl.
What if I don't know Perl?
If you don't know Perl, that's OK! Some instant answer types (Fathead, Longtail) don't require the use of Perl. Also, if you know PHP, Ruby, or Python you should be able to write a Goodie in Perl pretty easily using this awesome cheat sheet.
ref: https://duck.co/duckduckhack/faq#goodie
So DDG Goodie plugins can only be written in Perl.
Goodies on the goodies page represent all of the available instant answer types (async API calls, functions, DB full text, and DB keyword).
Page seems not to work correctly with Javascript disabled.
Nowadays you can't realistically expect to browse the internet with Javascript disabled.
You have no idea how nice the majority of web is that way. Sites load fast, they don't spawn annoying rubbish, tracking is mostly broken, cpu usage is low, etc etc. Maybe I should write about it some day.
Please do write about it.
I used noscript for a while in blocking everything mode, then requestpolicy for better filtering, but got tired of having to allow stuff for most of my browsing (now I'm on adblock privacy + ghostery + privacy badger + cookie monster + biscuit + self-destructing cookie + smart referer).
I'd love to read about what others do and their usage, how they get around.
I used noscript for a while in blocking everything mode, then requestpolicy for better filtering, but got tired of having to allow stuff for most of my browsing (now I'm on adblock privacy + ghostery + privacy badger + cookie monster + biscuit + self-destructing cookie + smart referer).
I'd love to read about what others do and their usage, how they get around.
I use NoScript but have enabled the option "Temporarily allow top-level sites by default". That means any site I directly visit is allowed to run JS. But any references to scripts on other domains are blocked. That makes the web pretty usable but more secure.
Please don't write about it. The world could do without more of you.
That's not fair to say. A vast majority of drive-by attacks happen because of java/javascript/flash
I should be able to browse the internet without scripts if I want to for my safety's sake.
I should be able to browse the internet without scripts if I want to for my safety's sake.
You can if you want, but you shouldn't expect everything to work. If you disable something, you can't complain when sites try to use something that's, more often than not, enabled.
[deleted]
You can use them without javascript too, if you know the shortcut. e.g. https://duckduckgo.com/html/?q=qrcode%20http%3A%2F%2Fddg.gg%...
So enable Javascript.
It also doesn't work well if you have HTML disabled.
[1] http://duckduckhack.com/