Scroogle Is Back

Scroogle, which is Google scraped of its invasive elements, wasn’t working a few months back, but I looked at the site today and it looks fine.

In case you don’t know why you need Scroogle, here’s why: no cookies, no search-term records, access log deleted within 48 hours.

(From the Scroogle website)

Daily Mail article

How Scroogle’s SSL option protects your privacy


Secure Socket Layer is an encryption protocol that is available in almost all browsers. If you’ve ever entered your credit card number to purchase something online, you should have checked for the little yellow padlock at the bottom right of your browser. That means no one can intercept your number as it travels between your browser and the online merchant, because the browser has established a secure connection. That’s SSL.

For Scroogle, SSL is used to hide your search terms from anyone who might be monitoring traffic between your browser and Scroogle’s servers. This encryption happens when you send your search terms to Scroogle, and it also happens when Scroogle sends the results of your search back to you. No one snooping between your browser and Scroogle can figure out what you were looking for, because the information is encrypted and looks like gibberish. The connection between Scroogle and Google, which still must happen for every search, is not encrypted because Google doesn’t use SSL. However, this connection is not associated with you at that point, and only Scroogle knows who entered those search terms. Your IP address is dropped before your search terms are sent to Google.

Most employers monitor the websites visited by their employees. There are impressive “employer spyware” packages such as Websense that they use to do this. Because the GET method is preferred by almost all search engines (see this page), even if the employer sees only the web address that you used to arrive at Google, he already knows the search terms you requested. With a record of all the search terms you’ve used while you were at work, each with a date and time recorded in his log, your employer has a pretty good idea of what you’ve been thinking. There are no laws that prevent employers from doing this sort of snooping.

If you use Wi-Fi and you haven’t set up your router for secure operation, your neighbors could see what you are doing on the web. Again, your search terms might be interesting to them.

In some countries, the government could be monitoring your web activity by requiring your service provider to log the sites you visit, and make the logs available on demand. In fact, most governments wouldn’t even have to ask the service provider for this information. They could tap the line upstream of the provider, and just look for packets containing www.google.com/search. Next to this are your search terms in plain text, with your IP address in the same packet. Government spies salivate at the thought of data-mining this information. With your search terms revealing what you are thinking, and the email you send revealing your network of associates, that’s almost everything they need to know about you.

Besides encrypting everything between your browser and Scroogle, there are other details that may interest you about SSL. We prefer the POST method over the GET method, but if you use SSL, even the GET method is secure. You will see the Scroogle address and the search terms in your browser address bar with the GET method only because the browser displays this before it starts the SSL negotiation with Scroogle. Those search terms don’t go any further than your browser. The SSL in your browser strips off the portion of the URL after the question mark, and then provides this information to Scroogle only after the secure connection has been established.

When the Scroogle results come back from an SSL search, and you click on any of the links shown on that secure page, there is another advantage. SSL does not allow the browser to record the address where that secure page came from, and attach it to any outgoing non-SSL links on that page. Normally all browsers do this, and it’s called the “referrer” address. Using SSL blanks out this referrer, so that any non-SSL site you click on from a Scroogle SSL page won’t even know that you arrived at their site from Scroogle. The referrer will be blank, and your log entry at that site will look like any of the hundreds of bots that crawl the web all day and night with similar blank referrers.

All of these are good reasons to use Scroogle’s SSL option. It increases the load on our servers because the encryption handshaking is complex, but so far it hasn’t been a problem for us. If it does become a problem, we hope to get more donations so that we can add more servers.


6 thoughts on “Scroogle Is Back

  1. Is it suspicious that Google won’t list http://www.scroogle.com in the top of the search results for: “scroogle”.

    Type in “scoogle”, and it won’t suggest a proper spelling.

    Good news: Everything works fine with this mis-spelling: “lila raiva”.

  2. Oops… I meant Scroogle.org. Not Scroogle.com. There is a big difference. Don’t even go to Scroogle.com. Sorry for the mistake.

  3. I read part of a discussion by the Scroogle founder (lost link) and he seemed to indicate things changed again and Scroogle is a no go again, but it’s working for me now. Powerful toes being stepped on. I think this here Internet thingie is a bit more controlled than most people realize, including me. I’m reminded of that bad Jim Carey movie again where his whole life is a TV show only he doesn’t know it.

    I was thinking of using this, what do you think of it?

    http://anonymizer.nntime.com/

    One thing is for sure, I’m going to do my best never to use Google again, psft 40 year cookie, bast…

  4. Hey Clark –

    Agreed about the Internet.

    I’ve heard good things about JonDonym.
    I might try it but not sure whether these things don’t have back doors for the government…

    I’ve tried anonymizers, not sure if I’ve tried the one you posted.

    They can be cumberson to switch to and can slow you down a bit and then I’m told that they don’t always offer complete protection.

    I daresay a private network you pay to join is the only way to to do that.
    Research it carefully and do post what you find..
    I found TOR0vidalia to be a pain..the computer would freeze and crash all the time.

Leave a Reply

Your email address will not be published. Required fields are marked *