From 292e3d605b3181858a7145f61fe8e580192dcf6c Mon Sep 17 00:00:00 2001 From: Baobab Date: Mon, 21 Jun 2021 20:37:29 +0200 Subject: [PATCH] fixed the format a little more --- articles/brave.html | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/articles/brave.html b/articles/brave.html index e6b6aa4..bcb7783 100644 --- a/articles/brave.html +++ b/articles/brave.html @@ -20,15 +20,15 @@

Spyware Level: High

Brave is self updating software, uses Google as the default search engine, has built-in telemetry, and even has an opt-out rss-like news feed similar to Firefox Pocket. These shouldn't be the things that come to mind if someone were to imagine a privacy oriented browser.

Auto-updates

-

Brave will check for updates every time you run it, and you can't turn it off from the browser. Athough, it's on Brave's low priority list to add an option to do so[2]. The reason why it's low priority would be because it's been over a year and there hasn't been an implementation of it yet.

+

Brave will check for updates every time you run it, and you can't turn it off from the browser. Athough, it's on Brave's low priority list to add an option to do so.[2] The reason why it's low priority would be because it's been over a year and there hasn't been an implementation of it yet.

Brave has built-in telemetry

-

While running, Brave will make lots of requests to the domain p3a.brave.com as telemetry. They claim they store the collected data for several days[8]. This feature is an opt-out that can be disabled. This opt-out can be disabled here.

+

While running, Brave will make lots of requests to the domain p3a.brave.com as telemetry. They claim they store the collected data for several days.[8] This feature is an opt-out that can be disabled. This opt-out can be disabled here.

Brave Today

Brave now has new feature similar to Firefox Pocket called Brave Today. If you don't know what Firefox Pocket is, it's basically an rss-like news feed that's shown in every blank tab. This feature Brave has is sadly an opt-out rather than an opt-in and sends lots of requests to Brave's servers. It can't seem to be disabled it in and of itself, but setting the tabs to blank seems to stop the requests.

SafeBrowsing

Brave uses SafeBrowsing. It's a feature that tries to "protect" the user from potentially unsafe websites and extensions. However, it sends requests to fetch the information required. Brave's SafeBrowsing is powered by google.[10] This opt-out can be disabled here.

Brave Rewards

-

Brave has a rewards program. You can find more information about it here[3]. At first glance it looks like the rewards program is an opt-in, but the browser makes requests to these domains regardless if you sign up or not:

+

Brave has a rewards program. You can find more information about it here.[3] At first glance it looks like the rewards program is an opt-in, but the browser makes requests to these domains regardless if you sign up or not:

rewards.brave.com

api.rewards.brave.com

@@ -38,11 +38,11 @@

Miscellaneous requests worth noting

Brave on first run sends a request to fetch the library used for checking spelling errors:

brave spelling library -

Brave on startup sends a request to variations.brave.com. Brave uses this to turn on and off features. There isn't a way to disable this as of yet.[11].

+

Brave on startup sends a request to variations.brave.com. Brave uses this to turn on and off features. There isn't a way to disable this as of yet.[11]

brave verification tool

Brave fetches the list of affiliates through laptop-updates.brave.com:

custom headers -

Brave makes a request to static1.brave.com every once and a while, which looks like it's used to fetch plugin information[4]? When the url was placed into the browser, it was directed to Google's error 404 page[9].

+

Brave makes a request to static1.brave.com every once and a while, which looks like it's used to fetch plugin information?[4] When the url was placed into the browser, it was directed to Google's error 404 page.[9]

static brave google error 404

A quick curl --head static1.brave.com shows that Brave uses Google's gstatic, which uses Cloudflare as well:

@@ -108,4 +108,4 @@
- + \ No newline at end of file