Badwolf is a minimalist and privacy-oriented web browser based on WebKitGTK.
-
Spyware Level: Not Spyware
-
BadWolf makes no unsolicited requests at all.
-
BadWolf is a pretty decent browser worth looking into. A couple of neat features worth noting is that BadWolf has a JavaScript switch and an image viewer switch, which is useful for daily tasks.
Badwolf is a minimalist and privacy-oriented web browser based on WebKitGTK.
+
Spyware Level: Not Spyware
+
BadWolf makes no unsolicited requests at all.
+
BadWolf is a pretty decent browser worth looking into. A couple of neat features worth noting is that BadWolf has a JavaScript switch and an image viewer switch, which is useful for daily tasks.
Badwolf ist ein minimalistischer und auf Privatsphäre ausgelegter Webbrowser, basierend auf WebKitGTK.
-
Spyware-Level: Keine Spyware
-
BadWolf stellt nicht ungefragt Verbindungen her.
-
BadWolf ist ein guter Browser und definitiv einen Blick wert. Die nützlichsten Funktionen sind der integrierte JavaScript-Schalter und die Option, Bilder standardmässig nicht anzuzeigen.
Badwolf ist ein minimalistischer und auf Privatsphäre ausgelegter Webbrowser, basierend auf WebKitGTK.
+
Spyware-Level: Keine Spyware
+
BadWolf stellt nicht ungefragt Verbindungen her.
+
BadWolf ist ein guter Browser und definitiv einen Blick wert. Die nützlichsten Funktionen sind der integrierte JavaScript-Schalter und die Option, Bilder standardmässig nicht anzuzeigen.
- Bing is yet another spyware search engine that collects your
- information and sells it to advertisers. It's strongly recommended
- that you do not use Bing.
-
-
- At some point Bing had a privacy policy, but Microsoft doesn't seem to
- be hosting it anymore. So, this article will look at the Microsoft
- Privacy Statement[1] to help us
- understand what information Bing collects. Similarly to the privacy
- policies of Google and Apple, the Microsoft privacy statement eclipses
- the entire spyware platform and does not help you understand in great
- detail what kind of information one single program could be
- collecting. (although this policy is more specific)
-
+ Bing is yet another spyware search engine that collects your
+ information and sells it to advertisers. It's strongly recommended
+ that you do not use Bing.
+
+
+ At some point Bing had a privacy policy, but Microsoft doesn't seem to
+ be hosting it anymore. So, this article will look at the Microsoft
+ Privacy Statement[1] to help us
+ understand what information Bing collects. Similarly to the privacy
+ policies of Google and Apple, the Microsoft privacy statement eclipses
+ the entire spyware platform and does not help you understand in great
+ detail what kind of information one single program could be
+ collecting. (although this policy is more specific)
+
-
- "Microsoft collects data from you, through our interactions with you
- and through our products for a variety of purposes described
- below. [...] You provide some of this data directly, such as when
- you [...] submit a search query to Bing"
-
-
+
+
+ "Microsoft collects data from you, through our interactions with you
+ and through our products for a variety of purposes described
+ below. [...] You provide some of this data directly, such as when
+ you [...] submit a search query to Bing"
+
+
-
- Later in the Interactions -> Device and usage data section of this
- statement, it is clarified again that Microsoft collects your:
- "Browse History. Data about the web pages you visit.", as well
- as your:
- "Images. Images and related information, such as picture metadata.
- For example, we collect the image you provide when you use a Bing
- image-enabled service."
-
+
+ Later in the Interactions -> Device and usage data section of this
+ statement, it is clarified again that Microsoft collects your:
+ "Browse History. Data about the web pages you visit.", as well
+ as your:
+ "Images. Images and related information, such as picture metadata.
+ For example, we collect the image you provide when you use a Bing
+ image-enabled service."
+
-
- Microsoft claims to store this information for an unlimited amount of
- time, but it claims that it will eventually anonymize this information
- in a process that takes 18 months to complete.
-
-
+
+ Microsoft claims to store this information for an unlimited amount of
+ time, but it claims that it will eventually anonymize this information
+ in a process that takes 18 months to complete.
+
+
-
-
- "Has Microsoft adopted and announced a specific retention period for
- a certain data type? For example, for Bing search queries, we
- de-identify stored queries by removing the entirety of the IP
- address after 6 months, and cookie IDs and other cross-session
- identifiers after 18 months. "
-
-
+
+
+ "Has Microsoft adopted and announced a specific retention period for
+ a certain data type? For example, for Bing search queries, we
+ de-identify stored queries by removing the entirety of the IP
+ address after 6 months, and cookie IDs and other cross-session
+ identifiers after 18 months. "
+
+
-
Bing uses your search history to profile you for advertising
+
Bing uses your search history to profile you for advertising
-
- "Microsoft may use data we collect to select and deliver some of the
- ads you see on Microsoft web properties, such as Microsoft.com, MSN
- and Bing."
-
-
-
- So since your search history is part of the "data we collect", the
- natural conclusion is that, your search queries are being used to
- profile you for advertising. And of course, this is confirmed in this
- section:
-
+
+ "Microsoft may use data we collect to select and deliver some of the
+ ads you see on Microsoft web properties, such as Microsoft.com, MSN
+ and Bing."
+
+
+
+ So since your search history is part of the "data we collect", the
+ natural conclusion is that, your search queries are being used to
+ profile you for advertising. And of course, this is confirmed in this
+ section:
+
-
-
- "The ads that you see may be selected based on data we process about
- you, such as your interests and favorites, your location, your
- transactions, how you use our products,
-
- your search queries
-
- , or the content you view. For example, if you view content on MSN
- about automobiles, we may show advertisements about cars; if you
- search “pizza places in Seattle” on Bing, you may see advertisements
- in your search results for restaurants in Seattle."
-
-
+
+
+ "The ads that you see may be selected based on data we process about
+ you, such as your interests and favorites, your location, your
+ transactions, how you use our products,
+
+ your search queries
+
+ , or the content you view. For example, if you view content on MSN
+ about automobiles, we may show advertisements about cars; if you
+ search “pizza places in Seattle” on Bing, you may see advertisements
+ in your search results for restaurants in Seattle."
+
+
-
Bing sells your search history to other spyware platforms
+
Bing sells your search history to other spyware platforms
-
- "We may share data we collect with third parties, such as Oath,
- AppNexus, or Facebook (see below), so that the ads you see in our
- products, their products, or other sites and apps serviced by these
- partners are more relevant and valuable to you. "
-
-
+
+ "We may share data we collect with third parties, such as Oath,
+ AppNexus, or Facebook (see below), so that the ads you see in our
+ products, their products, or other sites and apps serviced by these
+ partners are more relevant and valuable to you. "
+
+
Brave Browser is a Chromium fork with many interesting features not found elsewhere, such as built-in Adblock and other extensions, fingerprinting protection, a cleaner Preferences menu compared to other Chrome forks, and the (opt-in) ability to automatically support (pay) the websites you visit. The developers describe it as "A browser with your interests at heart."[1] with the built-in privacy protections.
-
Spyware Level: High
-
Brave is self updating software, uses Google as the default search engine, has built-in telemetry, and even has an opt-out rss-like news feed similar to Firefox Pocket. These shouldn't be the things that come to mind if someone were to imagine a privacy oriented browser.
-
Auto-updates
-
Brave will check for updates every time you run it, and you can't turn it off from the browser. Athough, it's on Brave's low priority list to add an option to do so.[2] The reason why it's low priority would be because it's been over a year and there hasn't been an implementation of it yet.
-
Brave has built-in telemetry
-
While running, Brave will make lots of requests to the domain p3a.brave.com as telemetry. They claim they store the collected data for several days.[8] This feature is an opt-out that can be disabled. This opt-out can be disabled here.
-
Brave Today
-
Brave now has new feature similar to Firefox Pocket called Brave Today. If you don't know what Firefox Pocket is, it's basically an rss-like news feed that's shown in every blank tab. This feature Brave has is sadly an opt-out rather than an opt-in and sends lots of requests to Brave's servers. It can't seem to be disabled it in and of itself, but setting the tabs to blank seems to stop the requests.
-
SafeBrowsing
-
Brave uses SafeBrowsing. It's a feature that tries to "protect" the user from potentially unsafe websites and extensions. However, it sends requests to fetch the information required. Brave's SafeBrowsing is powered by google.[10] This opt-out can be disabled here.
-
Brave Rewards
-
Brave has a rewards program. You can find more information about it here.[3] At first glance it looks like the rewards program is an opt-in, but the browser makes requests to these domains regardless if you sign up or not:
-
-
rewards.brave.com
-
api.rewards.brave.com
-
grant.rewards.brave.com
-
-
A quick update: These requests have been reported as a bug and for the most part have been fixed (with a couple exceptions). I'll remove this section once the bug has been completely fixed.[12]
-
Miscellaneous requests worth noting
-
Brave on first run sends a request to fetch the library used for checking spelling errors:
-
-
Brave on startup sends a request to variations.brave.com. Brave uses this to turn on and off features. There isn't a way to disable this as of yet.[11]
-
-
Brave fetches the list of affiliates through laptop-updates.brave.com:
-
-
Brave makes a request to static1.brave.com every once and a while, which looks like it's used to fetch plugin information?[4] When the url was placed into the browser, it was directed to Google's error 404 page.[9]
-
-
-
A quick curl --head static1.brave.com shows that Brave uses Google's gstatic, which uses Cloudflare as well:
-
-
On the first run, Brave fetches five extensions from brave-core-ext.s3.brave.com and tries to install them:
-
-
Not spyware related, but worth noting
-
Anti-privacy search engine by default
-
Google is the default search engine of Brave. For a browser that claims to be privacy oriented, this is a red flag. They at least make it easy for you to change the default search engine on the first run.
Brave Browser is a Chromium fork with many interesting features not found elsewhere, such as built-in Adblock and other extensions, fingerprinting protection, a cleaner Preferences menu compared to other Chrome forks, and the (opt-in) ability to automatically support (pay) the websites you visit. The developers describe it as "A browser with your interests at heart."[1] with the built-in privacy protections.
+
Spyware Level: High
+
Brave is self updating software, uses Google as the default search engine, has built-in telemetry, and even has an opt-out rss-like news feed similar to Firefox Pocket. These shouldn't be the things that come to mind if someone were to imagine a privacy oriented browser.
+
Auto-updates
+
Brave will check for updates every time you run it, and you can't turn it off from the browser. Athough, it's on Brave's low priority list to add an option to do so.[2] The reason why it's low priority would be because it's been over a year and there hasn't been an implementation of it yet.
+
Brave has built-in telemetry
+
While running, Brave will make lots of requests to the domain p3a.brave.com as telemetry. They claim they store the collected data for several days.[8] This feature is an opt-out that can be disabled. This opt-out can be disabled here.
+
Brave Today
+
Brave now has new feature similar to Firefox Pocket called Brave Today. If you don't know what Firefox Pocket is, it's basically an rss-like news feed that's shown in every blank tab. This feature Brave has is sadly an opt-out rather than an opt-in and sends lots of requests to Brave's servers. It can't seem to be disabled it in and of itself, but setting the tabs to blank seems to stop the requests.
+
SafeBrowsing
+
Brave uses SafeBrowsing. It's a feature that tries to "protect" the user from potentially unsafe websites and extensions. However, it sends requests to fetch the information required. Brave's SafeBrowsing is powered by google.[10] This opt-out can be disabled here.
+
Brave Rewards
+
Brave has a rewards program. You can find more information about it here.[3] At first glance it looks like the rewards program is an opt-in, but the browser makes requests to these domains regardless if you sign up or not:
+
+
rewards.brave.com
+
api.rewards.brave.com
+
grant.rewards.brave.com
+
+
A quick update: These requests have been reported as a bug and for the most part have been fixed (with a couple exceptions). I'll remove this section once the bug has been completely fixed.[12]
+
Miscellaneous requests worth noting
+
Brave on first run sends a request to fetch the library used for checking spelling errors:
+
+
Brave on startup sends a request to variations.brave.com. Brave uses this to turn on and off features. There isn't a way to disable this as of yet.[11]
+
+
Brave fetches the list of affiliates through laptop-updates.brave.com:
+
+
Brave makes a request to static1.brave.com every once and a while, which looks like it's used to fetch plugin information?[4] When the url was placed into the browser, it was directed to Google's error 404 page.[9]
+
+
+
A quick curl --head static1.brave.com shows that Brave uses Google's gstatic, which uses Cloudflare as well:
+
+
On the first run, Brave fetches five extensions from brave-core-ext.s3.brave.com and tries to install them:
+
+
Not spyware related, but worth noting
+
Anti-privacy search engine by default
+
Google is the default search engine of Brave. For a browser that claims to be privacy oriented, this is a red flag. They at least make it easy for you to change the default search engine on the first run.
Brave Browser - форк Chromium'а со множеством интересных возможностей, которых нет где-либо еще, такие как встроенный блокировщик рекламы и другие расширения, защита от отпечатков браузера, менее загруженное меню по сравнению с другими форками Chrome и встроенная возможность для автоматического пожертвования сайтам, которые вы посещаете. Разработчики описывают его как "Браузер, защищающий ваши интересы"[1] со встроенной защитой конфиденциальности пользователя.
-
Уровень слежки: Высокий
-
Brave обновляется автоматически, использует Google в качестве поисковика по умолчанию, имеет встроенную телеметрию и даже имеет ленту новостей, похожую на Firefox Pocket. Этого не должно быть в браузере, который ориентирован на конфиденциальность пользователя.
-
Автоматические обновления
-
Brave будет проверять обновления каждый раз, когда вы его запускаете, и вы не можете это отключить. Добавление данной опции обладает низким приоритетом в разработке Brave[2], так как прошло уже больше года и её всё еще нет.
-
Brave has built-in telemetry
-
Во время работы Brave будет делать много запросов к домену p3a.brave.com в качестве телеметрии. Они утверждают, что хранят данные только несколько дней[8]. Эта опция может быть отключена здесь.
-
Brave Today
-
Brave содержит сервис похожий на Firefox Pocket - Brave Today. Это новостная лента, которая показывается на каждой пустой новой вкладке. Эта возможность к сожалению включена по умолчанию и посылает множество запросов к серверам Brave. Кажется, что нельзя отключить эту опцию, но если установить новые вкладки как пустые, то похоже, что это останавливает запросы.
-
SafeBrowsing
-
Brave использует SafeBrowsing. Это функция, которая пытается "защитить" пользователя от возможных небезопасных веб-сайтов и расширений. Однако, она посылает запросы, чтобы получить требуемую информацию. Brave SafeBrowsing поддерживается Google[10]. Данная функция может быть отключена здесь.
-
Brave Rewards
-
У Brave есть программа вознаграждений[3]. На первый взгляд кажется, что она необязательна, но браузер делает запросы к доменам ниже независимо от регистрации в программе:
-
-
rewards.brave.com
-
api.rewards.brave.com
-
grant.rewards.brave.com
-
-
Небольшое дополнение: об этих запросах сообщалось как об ошибках, и по большей части они исправлены (за несколькими исключениями). Этот раздел будет удалён, как только ошибки будут полностью исправлены[12].
-
Другие запросы которые стоит отметить
-
При первом запуске Brave отправляет запрос, чтобы получить библиотеку для проверки орфографии.
-
-
При старте Brave посылает запросы к variations.brave.com. Brave использует это для включения и выключения функций. Пока нет никакого способа отключить это[11].
-
-
Brave получает список партнёров через запросы к laptop-updates.brave.com:
-
-
Время от времени Brave делает запрос к static1.brave.com, что выглядит как будто он пытается получить информацию о плагинах[4]. В браузере эта ссылка ведёт на страницу Google с ошибкой 404[9].
-
-
-
Команда curl --head static1.brave.com показывает, что Brave использует Google gstatic, который также использует Cloudflare:
-
-
При первом запуске Brave скачивает пять расширений из brave-core-ext.s3.brave.com и пытается установить их:
-
-
Не связано со слежением, но стоит отметить
-
Неконфиденциальный поисковик по умолчанию
-
Google - стандартная поисковая система в Brave. Это очень странно для браузера, позиционирующего себя приватным. По крайней мере, при первом запуске Brave даёт выбор поисковой системы по умолчанию.
Brave Browser - форк Chromium'а со множеством интересных возможностей, которых нет где-либо еще, такие как встроенный блокировщик рекламы и другие расширения, защита от отпечатков браузера, менее загруженное меню по сравнению с другими форками Chrome и встроенная возможность для автоматического пожертвования сайтам, которые вы посещаете. Разработчики описывают его как "Браузер, защищающий ваши интересы"[1] со встроенной защитой конфиденциальности пользователя.
+
Уровень слежки: Высокий
+
Brave обновляется автоматически, использует Google в качестве поисковика по умолчанию, имеет встроенную телеметрию и даже имеет ленту новостей, похожую на Firefox Pocket. Этого не должно быть в браузере, который ориентирован на конфиденциальность пользователя.
+
Автоматические обновления
+
Brave будет проверять обновления каждый раз, когда вы его запускаете, и вы не можете это отключить. Добавление данной опции обладает низким приоритетом в разработке Brave[2], так как прошло уже больше года и её всё еще нет.
+
Brave has built-in telemetry
+
Во время работы Brave будет делать много запросов к домену p3a.brave.com в качестве телеметрии. Они утверждают, что хранят данные только несколько дней[8]. Эта опция может быть отключена здесь.
+
Brave Today
+
Brave содержит сервис похожий на Firefox Pocket - Brave Today. Это новостная лента, которая показывается на каждой пустой новой вкладке. Эта возможность к сожалению включена по умолчанию и посылает множество запросов к серверам Brave. Кажется, что нельзя отключить эту опцию, но если установить новые вкладки как пустые, то похоже, что это останавливает запросы.
+
SafeBrowsing
+
Brave использует SafeBrowsing. Это функция, которая пытается "защитить" пользователя от возможных небезопасных веб-сайтов и расширений. Однако, она посылает запросы, чтобы получить требуемую информацию. Brave SafeBrowsing поддерживается Google[10]. Данная функция может быть отключена здесь.
+
Brave Rewards
+
У Brave есть программа вознаграждений[3]. На первый взгляд кажется, что она необязательна, но браузер делает запросы к доменам ниже независимо от регистрации в программе:
+
+
rewards.brave.com
+
api.rewards.brave.com
+
grant.rewards.brave.com
+
+
Небольшое дополнение: об этих запросах сообщалось как об ошибках, и по большей части они исправлены (за несколькими исключениями). Этот раздел будет удалён, как только ошибки будут полностью исправлены[12].
+
Другие запросы которые стоит отметить
+
При первом запуске Brave отправляет запрос, чтобы получить библиотеку для проверки орфографии.
+
+
При старте Brave посылает запросы к variations.brave.com. Brave использует это для включения и выключения функций. Пока нет никакого способа отключить это[11].
+
+
Brave получает список партнёров через запросы к laptop-updates.brave.com:
+
+
Время от времени Brave делает запрос к static1.brave.com, что выглядит как будто он пытается получить информацию о плагинах[4]. В браузере эта ссылка ведёт на страницу Google с ошибкой 404[9].
+
+
+
Команда curl --head static1.brave.com показывает, что Brave использует Google gstatic, который также использует Cloudflare:
+
+
При первом запуске Brave скачивает пять расширений из brave-core-ext.s3.brave.com и пытается установить их:
+
+
Не связано со слежением, но стоит отметить
+
Неконфиденциальный поисковик по умолчанию
+
Google - стандартная поисковая система в Brave. Это очень странно для браузера, позиционирующего себя приватным. По крайней мере, при первом запуске Brave даёт выбор поисковой системы по умолчанию.
- CCleaner, developed by Piriform, is a utility program used to clean
- potentially unwanted files and invalid Windows Registry entries from a
- computer.
-
-
Spyware Level: EXTREMELY HIGH
-
- CCleaner is spyware that collects your personal information to
- advertise to you. It also sells your information to third parties so
- that they can advertise to you. It collects a huge amount of very
- personal information, like your
- physical location. CCleaner uses the
- technique of privacy policy obfuscation where it provides one privacy
- policy for every single product its company offers, making it more
- difficult to know what parts of the privacy policy apply to which
- program.
-
-
CCleaner collects and sells user information to advertisers
-
- CCleaner clearly shows in its privacy settings that it is collecting
- information about your computer and selling that information to
- advertisers. Below is a screenshot on how to mitigate some of it.
-
+ CCleaner, developed by Piriform, is a utility program used to clean
+ potentially unwanted files and invalid Windows Registry entries from a
+ computer.
+
+
Spyware Level: EXTREMELY HIGH
+
+ CCleaner is spyware that collects your personal information to
+ advertise to you. It also sells your information to third parties so
+ that they can advertise to you. It collects a huge amount of very
+ personal information, like your
+ physical location. CCleaner uses the
+ technique of privacy policy obfuscation where it provides one privacy
+ policy for every single product its company offers, making it more
+ difficult to know what parts of the privacy policy apply to which
+ program.
+
+
CCleaner collects and sells user information to advertisers
+
+ CCleaner clearly shows in its privacy settings that it is collecting
+ information about your computer and selling that information to
+ advertisers. Below is a screenshot on how to mitigate some of it.
+
CCleaner tracks a huge amount of personal information
-
- If we look at the privacy policy, we can see that CCleaner reports the
- following[3]:
-
-
-
IP Address
-
Unique User ID
-
Operating System
-
Other Avast Products installed
-
- physical location
-
-
+
CCleaner tracks a huge amount of personal information
+
+ If we look at the privacy policy, we can see that CCleaner reports the
+ following[3]:
+
+
+
IP Address
+
Unique User ID
+
Operating System
+
Other Avast Products installed
+
+ physical location
+
+
-
- Beyond this, CCleaner is integrated with the following spyware
- platforms, which all collect their own sets of information:
-
-
-
Google Analytics
-
Logentries
-
+
+ Beyond this, CCleaner is integrated with the following spyware
+ platforms, which all collect their own sets of information:
+
+
+
Google Analytics
+
Logentries
+
-
- It would be very time-consuming to go through all of those privacy
- policies (especially because many of these are obfuscated), but it
- should be enough to understand that CCleaner is full of third party
- spyware, as well as first party spyware.
-
-
- "When we collect your email address, we may market our other
- products and services to you. You may choose to unsubscribe from
- future email marketing by following the instructions in the email."
-
-
-
CCleaner tracks your physical location
-
- According to the privacy policy, the CCleaner website tries to track
- your physical location.[3]
-
-
-
- "Our websites use cookies to acquire data that may be used to
- determine your physical location via your Internet Protocol address
- (“IP Address”) and automated geolocation techniques, or to acquire
- basic information about the computer, tablet, or mobile phone that
- you use to visit us."
-
-
-
- "location data" is also mentioned when talking about the
- information that CCleaner itself collects about its users.
-
-
Past Security Flaws
-
- In the past, CCleaner has been compromised and backdoors have been
- added to it.[1]
-
-
-
-
-
-
+
+ It would be very time-consuming to go through all of those privacy
+ policies (especially because many of these are obfuscated), but it
+ should be enough to understand that CCleaner is full of third party
+ spyware, as well as first party spyware.
+
+
+ "When we collect your email address, we may market our other
+ products and services to you. You may choose to unsubscribe from
+ future email marketing by following the instructions in the email."
+
+
+
CCleaner tracks your physical location
+
+ According to the privacy policy, the CCleaner website tries to track
+ your physical location.[3]
+
+
+
+ "Our websites use cookies to acquire data that may be used to
+ determine your physical location via your Internet Protocol address
+ (“IP Address”) and automated geolocation techniques, or to acquire
+ basic information about the computer, tablet, or mobile phone that
+ you use to visit us."
+
+
+
+ "location data" is also mentioned when talking about the
+ information that CCleaner itself collects about its users.
+
+
Past Security Flaws
+
+ In the past, CCleaner has been compromised and backdoors have been
+ added to it.[1]
+
+
+
+
+
+
diff --git a/articles/explorer.html b/articles/explorer.html
index 78cee01..1161c80 100644
--- a/articles/explorer.html
+++ b/articles/explorer.html
@@ -2,21 +2,21 @@
-
- Internet Explorer — Spyware Watchdog
-
+
+ Internet Explorer — Spyware Watchdog
+
-
Internet Explorer is a Web Browser distributed by Microsoft with most versions of the Microsoft Windows Operating system.
-
-
Spyware Level: EXTREMELY HIGH
+
+
Spyware Level: EXTREMELY HIGH
Internet Explorer contains many serious spyware features, however all of these features appear to be "opt-out" features. It is not verified whether or not opting out will actually disable all of these features, or if there are other spyware features that are not known which cannot be opted out of. Internet Explorer can record your search history and location, and report that information to Microsoft. Internet Explorer is not the worst spyware, but it is still loaded with spyware features that can mine serious information from users.
@@ -38,30 +38,30 @@
Internet Explorer has an anti-privacy search engine by default
The default search engine is Bing which datamines its users and sells that information to advertisers.
- This article was originally written by digdeeper.neocities.org
- Formatting changes and some sections were written by the site maintainer.
- Other Anonymous contributors have added other sections and various changes to this article, as well.
+
Credits
+
+ This article was originally written by digdeeper.neocities.org
+ Formatting changes and some sections were written by the site maintainer.
+ Other Anonymous contributors have added other sections and various changes to this article, as well.
Sources
diff --git a/articles/firefox_es.html b/articles/firefox_es.html
index 9c283eb..ebf0204 100644
--- a/articles/firefox_es.html
+++ b/articles/firefox_es.html
@@ -200,12 +200,12 @@ Una mejor forma de entender esto es que Mozilla quiere pretender que incluir spy
-
Créditos
-
- Este artículo fue escrito originalmente por digdeeper.neocities.org
- Algunos cambios de formato y secciones fueron escritos por el mantenedor del sitio.
- Otros colaboradores anónimos han añadido secciones y varios cambios a este artículo, también.
- El artículo fue traducido al español por un colaborador anónimo.
+
Créditos
+
+ Este artículo fue escrito originalmente por digdeeper.neocities.org
+ Algunos cambios de formato y secciones fueron escritos por el mantenedor del sitio.
+ Otros colaboradores anónimos han añadido secciones y varios cambios a este artículo, también.
+ El artículo fue traducido al español por un colaborador anónimo.
HTTP is a protocol usually used for transferring HyperText Markup Language documents accross the internet.
-
Spyware Level: Not Rated
-
HTTP is a protocol that is not designed with the privacy of its users in mind. The language used in the HTTP specification explicitly says that the protocol was designed with enabling the datamining of its users in mind, and contains features that are not absolutely necessary for the purpose of the protocol, but allow the protocol compromise user privacy.
-
"User-Agent" Datamining feature
-
Section 14.43[1] of the HTTP specification details the "User-Agent" feature of the protocol that, when implemented, will attach information about your computing enviroment that can be used to track you. The biggest danger of the User-Agent is that there is no way to anonymously opt-out of this- even if you do not provide a user-agent, because almost everyone else does, you will be tracked by the fact that you do not provide that information. There are many strategies to mitigate this, with only varying levels of success, but the problem is that this is the acceptable standard of how HTTP is used and not the forgotten feature that it should be. Not only does the User-Agent feature collect this unncessary information, its purpose is explicitly stated in the protocol specifications to aid in datamining.
-
"The User-Agent request-header field contains information about the user agent originating the request. This is for statistical purposes, the tracing of protocol violations, and automated recognition of user agents for the sake of tailoring responses to avoid particular user agent limitations. User agents SHOULD include this field with requests."
-
Acknowledgement of HTTP's privacy problem
-
In the HTTP specification, the W3C explicitly acknowledges the serious privacy violations that implementations of this protocol are capable of comitting. Section 15.1[2] of the HTTP specification has a very detailed analysis of the implications of the comprimization of privacy that the User-Agent allows to happen and suggests how to use the User-Agent feature: as an opt-in feature where the privacy concerns of using such a feature are properly explained to the user. Even though this is a good section, it shows a very naive viewpoint from the W3C, the expectation that this feature would not be abused, and the expectation that implementers of this standard would respect the privacy of their users and would not use these features of the protocol to datamine users.
-
At best, you could call this mindset naive. If you want to hold the W3C in contempt, you could call it malicious. It's easy to write in your standard that while you could use this protocol to monitor the behavior of users, you should ask for their permission. But once that standard is widely implemented, and is widely used for the exact malicious purpose that was acknowledged in its specification, who's fault is that?
HTTP is a protocol usually used for transferring HyperText Markup Language documents accross the internet.
+
Spyware Level: Not Rated
+
HTTP is a protocol that is not designed with the privacy of its users in mind. The language used in the HTTP specification explicitly says that the protocol was designed with enabling the datamining of its users in mind, and contains features that are not absolutely necessary for the purpose of the protocol, but allow the protocol compromise user privacy.
+
"User-Agent" Datamining feature
+
Section 14.43[1] of the HTTP specification details the "User-Agent" feature of the protocol that, when implemented, will attach information about your computing enviroment that can be used to track you. The biggest danger of the User-Agent is that there is no way to anonymously opt-out of this- even if you do not provide a user-agent, because almost everyone else does, you will be tracked by the fact that you do not provide that information. There are many strategies to mitigate this, with only varying levels of success, but the problem is that this is the acceptable standard of how HTTP is used and not the forgotten feature that it should be. Not only does the User-Agent feature collect this unncessary information, its purpose is explicitly stated in the protocol specifications to aid in datamining.
+
"The User-Agent request-header field contains information about the user agent originating the request. This is for statistical purposes, the tracing of protocol violations, and automated recognition of user agents for the sake of tailoring responses to avoid particular user agent limitations. User agents SHOULD include this field with requests."
+
Acknowledgement of HTTP's privacy problem
+
In the HTTP specification, the W3C explicitly acknowledges the serious privacy violations that implementations of this protocol are capable of comitting. Section 15.1[2] of the HTTP specification has a very detailed analysis of the implications of the comprimization of privacy that the User-Agent allows to happen and suggests how to use the User-Agent feature: as an opt-in feature where the privacy concerns of using such a feature are properly explained to the user. Even though this is a good section, it shows a very naive viewpoint from the W3C, the expectation that this feature would not be abused, and the expectation that implementers of this standard would respect the privacy of their users and would not use these features of the protocol to datamine users.
+
At best, you could call this mindset naive. If you want to hold the W3C in contempt, you could call it malicious. It's easy to write in your standard that while you could use this protocol to monitor the behavior of users, you should ask for their permission. But once that standard is widely implemented, and is widely used for the exact malicious purpose that was acknowledged in its specification, who's fault is that?
- SRWare Iron is a free web browser, and an implementation of Chromium by SRWare of Germany.
-
+
+ SRWare Iron is a free web browser, and an implementation of Chromium by SRWare of Germany.
+
Spyware Level: EXTREMELY HIGH
SRWare Iron claims to be a privacy respecting web browser that is an alternative to Google Chrome's
@@ -155,18 +155,18 @@
(why else would he take the time to integrate these things into his browser? We can only speculate.)
At the end of the day it's pretty clear that this browser is a huge scam and you shouldn't use it.
-
-
-
+
+
+
+ This article was last edited on 11/20/2018
+
+
If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.
+
All contributions must be licensed under the CC0 license to be accepted.
- SRWare Iron jest darmową przeglądarką internetową i implementacją Chromium stworzoną przez SRWare z Niemiec.
-
+
+ SRWare Iron jest darmową przeglądarką internetową i implementacją Chromium stworzoną przez SRWare z Niemiec.
+
Poziom Oprogramowania Szpiegowskiego: Ekstermalnie Wysoki
SRWare Iron uważa się za przestrzegającą prywatność przeglądarkę internetową będącą alternatywą dla
@@ -157,18 +157,18 @@
czas na integrowanie tego wszystkiego z jego przeglądarką? Możemy tylko spekulować.)
W końcu jest całkiem jasne że ta przeglądarka to ogromny przekręt i nie powinno się jej używać.
-
-
-
+
+
+
+ This article was last edited on 11/20/2018
+
+
If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.
+
All contributions must be licensed under the CC0 license to be accepted.
Librewolf is a Firefox fork with the primary goals of privacy, security and user freedom.[1]
-
-
Version tested: 95.0.2
+
+
Version tested: 95.0.2
Spyware Level: Low
-
-
Librewolf makes some calls on startup to f.s.s.m.c.qjz9zk which looks like an obliterated address, and shavar.services.mozilla.com which is intended (however it can be disabled by clearing the URL in browser.safebrowsing.provider.mozilla.updateURL).[2] There is also an attempt to check for updates regarding the pre-installed uBlock Origin extension.
-
-
This is a big improvement compared to Firefox.
-
-
+
+
Librewolf makes some calls on startup to f.s.s.m.c.qjz9zk which looks like an obliterated address, and shavar.services.mozilla.com which is intended (however it can be disabled by clearing the URL in browser.safebrowsing.provider.mozilla.updateURL).[2] There is also an attempt to check for updates regarding the pre-installed uBlock Origin extension.
- From their website: "NetSurf is a multi-platform web browser for RISC OS, UNIX-like platforms (including Linux), Mac OS X, and more" [1] Version Tested: Netsurf 3.9
-
-
Spyware Level: Low
-
Upon launch Netsurf makes a request to get the default search engine's icon, that default search engine is Google. This was tested with mitmproxy. Other than that, there are no unsolicited requests. After following the mitigation guide, this software is not spyware.
- Z ich strony internetowej: "NetSurf jest wieloplatformową przeglądarką internetową dla RISC OS, platform podobnych do UNIX-owych (w tym Linux), Mac OS X i innych" [1] Wersja testowana: Netsurf 3.9
-
-
Poziom Oprogramowania Szpiegowskiego: Niski
-
Po uruchomieniu Netsurf zwraca się z prośbą o otrzymanie ikony domyślnej wyszukiwarki, którą jest Google. Zostało to przetestowane za pomocą mitmproxy. Poza tym, nie ma żadnych niepożądanych żądań. Po zastosowaniu się do poradnika mitygacji, to oprogramowanie nie jest oprogramowaniem szpiegowskim.
+ Z ich strony internetowej: "NetSurf jest wieloplatformową przeglądarką internetową dla RISC OS, platform podobnych do UNIX-owych (w tym Linux), Mac OS X i innych" [1] Wersja testowana: Netsurf 3.9
+
+
Poziom Oprogramowania Szpiegowskiego: Niski
+
Po uruchomieniu Netsurf zwraca się z prośbą o otrzymanie ikony domyślnej wyszukiwarki, którą jest Google. Zostało to przetestowane za pomocą mitmproxy. Poza tym, nie ma żadnych niepożądanych żądań. Po zastosowaniu się do poradnika mitygacji, to oprogramowanie nie jest oprogramowaniem szpiegowskim.
- A web browser made by Opera Software, using the Blink engine. Has some interesting features like mouse gestures, a built-in ad blocker and VPN. It is the sixth most popular browser. But how does it look like in terms of privacy?
+ A web browser made by Opera Software, using the Blink engine. Has some interesting features like mouse gestures, a built-in ad blocker and VPN. It is the sixth most popular browser. But how does it look like in terms of privacy?
Spyware Level: EXTREMELY HIGH
@@ -19,55 +19,55 @@
Geolocation
-
The first request Opera makes is the geolocation request: which includes your country and the precise timestamp.
+
The first request Opera makes is the geolocation request: which includes your country and the precise timestamp.
-
Homepage request
+
Homepage request
-
If this is the first time you run Opera, it makes this request: which will redirect you to their homepage. Then, that homepage will make a bunch of other requests, including to google analytics, facebook (if you're logged in, they now know who you are), and even yandex.ru. The yandex request will set a uniquely identifying cookie.
+
If this is the first time you run Opera, it makes this request: which will redirect you to their homepage. Then, that homepage will make a bunch of other requests, including to google analytics, facebook (if you're logged in, they now know who you are), and even yandex.ru. The yandex request will set a uniquely identifying cookie.
-
Cxense analytics
+
Cxense analytics
-
Later, it will make a few requests to cxense.com. What is Cxense?
+
Later, it will make a few requests to cxense.com. What is Cxense?
-
We are Cxense. We help hundreds of leading publishers and marketers across the globe transform their raw data into their most valuable resource. Built on the premise of 1:1 analytics and communication; allowing you to both gain unprecedented insight about your individual customers, and to action this insight real-time in all your marketing and sales channels.
+
We are Cxense. We help hundreds of leading publishers and marketers across the globe transform their raw data into their most valuable resource. Built on the premise of 1:1 analytics and communication; allowing you to both gain unprecedented insight about your individual customers, and to action this insight real-time in all your marketing and sales channels.
-
This request seems to include a unique ID
+
This request seems to include a unique ID
-
Search engines
+
Search engines
-
Opera will also download a list of search engines, which you cannot delete, only add new ones (at least from the GUI). Apparently, there are some convoluted methods of deleting the search engines, but I haven't confirmed them. Of course, the default search engine is the anti-privacy Google.
+
Opera will also download a list of search engines, which you cannot delete, only add new ones (at least from the GUI). Apparently, there are some convoluted methods of deleting the search engines, but I haven't confirmed them. Of course, the default search engine is the anti-privacy Google.
-
OCSP querying
+
OCSP querying
-
Opera will query OCSP servers (ocsp.comodoca.com) to check if SSL certificates expired.
+
Opera will query OCSP servers (ocsp.comodoca.com) to check if SSL certificates expired.
-
Malware / Phishing protection
-
Anytime you visit a website, Opera will make a request like this: to check if it is malicious. So it is literally spying on your whole browsing history. Fortunately, this can be turned off.
+
Malware / Phishing protection
+
Anytime you visit a website, Opera will make a request like this: to check if it is malicious. So it is literally spying on your whole browsing history. Fortunately, this can be turned off.
-
Other requests
+
Other requests
-
Other requests include ones to googletagmanager, google ads specific for your country, more requests to yandex (these include your screen size, encoding, and the page you came from), more geolocation, etc. Together, Opera made 55 unsolicited requests in my first run of it. Analyzing them all would probably take a book.
+
Other requests include ones to googletagmanager, google ads specific for your country, more requests to yandex (these include your screen size, encoding, and the page you came from), more geolocation, etc. Together, Opera made 55 unsolicited requests in my first run of it. Analyzing them all would probably take a book.
-
Facebook integration
+
Facebook integration
-
Opera has a Facebook chat button on the sidebar, and Facebook is one of the most anti-privacy organizations out there.
+
Opera has a Facebook chat button on the sidebar, and Facebook is one of the most anti-privacy organizations out there.
-
Opera's "Partners"
-
Opera has a list of "partners" — those are the websites that are in the Speed Dial by default. If you click on one of them from there, they will know you visited from Opera's Speed Dial. Those requests also include unique user IDs.
- What happens if you close Opera and run it again? The websites in the Speed Dial will change to the ones from your country! And the same rule about them knowing where you came from applies.
+
Opera's "Partners"
+
Opera has a list of "partners" — those are the websites that are in the Speed Dial by default. If you click on one of them from there, they will know you visited from Opera's Speed Dial. Those requests also include unique user IDs.
+ What happens if you close Opera and run it again? The websites in the Speed Dial will change to the ones from your country! And the same rule about them knowing where you came from applies.
-
Opera is closed source
-
And it will stay that way. From their FAQ (the message used to be there in 2017, they must have deleted it somewhere in 2018):
+
Opera is closed source
+
And it will stay that way. From their FAQ (the message used to be there in 2017, they must have deleted it somewhere in 2018):
-
Opera has not officialy open sourced its browser. However, leaks of the Presto web engine Opera used have appeared on the internet.
+
Opera has not officialy open sourced its browser. However, leaks of the Presto web engine Opera used have appeared on the internet.
-
Even with that however, there could still other spyware might be hiding in there.
-
-
-
Credits
-
- This article was written by digdeeper.neocities.org
- Formatting changes were done by the site maintainer.
+
Even with that however, there could still other spyware might be hiding in there.
+
+
+
Credits
+
+ This article was written by digdeeper.neocities.org
+ Formatting changes were done by the site maintainer.
From their website: "Otter Browser aims to recreate the best aspects of the classic Opera (12.x) UI using Qt5." Their motto is: "Controlled by the user, not vice versa". Version tested: 0.9.12 (SlackBuild from slackbuilds.org). Program used for testing requests: Mitmproxy.
-
Spyware Level: Not Spyware
-
Otter Browser makes no unsolicited requests at all. It is fully open source. The developers, also, don't plan to include any spyware "features" in the future. This seems like a true privacy-based web browser (at least for now).
-
-
This article was created on 11/25/2017
-
This article was lasted edited on 10/5/2020
-
-
If you want to contribute to this website, you can always make a pull request.
-
All contributions must be licensed under the CC0 license to be accepted.
From their website: "Otter Browser aims to recreate the best aspects of the classic Opera (12.x) UI using Qt5." Their motto is: "Controlled by the user, not vice versa". Version tested: 0.9.12 (SlackBuild from slackbuilds.org). Program used for testing requests: Mitmproxy.
+
Spyware Level: Not Spyware
+
Otter Browser makes no unsolicited requests at all. It is fully open source. The developers, also, don't plan to include any spyware "features" in the future. This seems like a true privacy-based web browser (at least for now).
+
+
This article was created on 11/25/2017
+
This article was lasted edited on 10/5/2020
+
+
If you want to contribute to this website, you can always make a pull request.
+
All contributions must be licensed under the CC0 license to be accepted.
+
+
+
+
\ No newline at end of file
diff --git a/articles/qutebrowser.html b/articles/qutebrowser.html
index 0739cfe..7ea79b7 100644
--- a/articles/qutebrowser.html
+++ b/articles/qutebrowser.html
@@ -1,34 +1,34 @@
-
-
-
- Qutebrowser - Spyware Watchdog
-
-
-
-
Qutebrowser is a keyboard-focused browser with a minimal GUI. It's based on Python and PyQt5 and free software, licensed under the GPL. Program tested: v1.6.1 for Debian Buster. Mitmproxy was used to check for connections.
-
Spyware Level: Not Spyware
-
Qutebrowser makes no unsolicited requests at all. It is also libre software. This web browser is a great choice to use, and there is nothing to complain about from a privacy standpoint. (although I don't really know how to use the User Interface that well...) So far this browser looks like it can stand tall in the ranks of the other privacy-respecting web browsers out there.
-
-
This article was created on 5/10/2018
-
This article was lasted edited on 10/7/2020
-
-
If you want to contribute to this website, you can always make a pull request.
-
All contributions must be licensed under the CC0 license to be accepted.
Qutebrowser is a keyboard-focused browser with a minimal GUI. It's based on Python and PyQt5 and free software, licensed under the GPL. Program tested: v1.6.1 for Debian Buster. Mitmproxy was used to check for connections.
+
Spyware Level: Not Spyware
+
Qutebrowser makes no unsolicited requests at all. It is also libre software. This web browser is a great choice to use, and there is nothing to complain about from a privacy standpoint. (although I don't really know how to use the User Interface that well...) So far this browser looks like it can stand tall in the ranks of the other privacy-respecting web browsers out there.
+
+
This article was created on 5/10/2018
+
This article was lasted edited on 10/7/2020
+
+
If you want to contribute to this website, you can always make a pull request.
+
All contributions must be licensed under the CC0 license to be accepted.
Qutebrowser - веб-браузер, ориентированный на управление с клавиатуры, с минимальным графическим интерфейсом. Он основан на Python, PyQt5 и свободном ПО, лицензированном под GPL. Программа протестирована: v1.6.1 для Debian Buster. Mitmproxy было использовано для проверки соединений.
-
Spyware Level: Not Spyware
-
Qutebrowser никогда не делает нежелательных запросов. Это свободное программное обеспечение. Этот браузер - отличный выбор, и с точки зрения приватности жаловаться здесь не на что (хотя я не знаю как управляться с этим пользовательским интерфейсом...). Пока этот браузер выглядит достойным, чтобы стоять в одном ряду с другими браузерами, уважающими конфиденциальность пользователя.
-
-
Этот перевод был создан 9/7/2021
-
Этот перевод в последний раз изменялся 9/7/2021
-
-
If you want to contribute to this website, you can always make a pull request.
-
All contributions must be licensed under the CC0 license to be accepted.
Qutebrowser - веб-браузер, ориентированный на управление с клавиатуры, с минимальным графическим интерфейсом. Он основан на Python, PyQt5 и свободном ПО, лицензированном под GPL. Программа протестирована: v1.6.1 для Debian Buster. Mitmproxy было использовано для проверки соединений.
+
Spyware Level: Not Spyware
+
Qutebrowser никогда не делает нежелательных запросов. Это свободное программное обеспечение. Этот браузер - отличный выбор, и с точки зрения приватности жаловаться здесь не на что (хотя я не знаю как управляться с этим пользовательским интерфейсом...). Пока этот браузер выглядит достойным, чтобы стоять в одном ряду с другими браузерами, уважающими конфиденциальность пользователя.
+
+
Этот перевод был создан 9/7/2021
+
Этот перевод в последний раз изменялся 9/7/2021
+
+
If you want to contribute to this website, you can always make a pull request.
+
All contributions must be licensed under the CC0 license to be accepted.
SeaMonkey is a web browser, email client, news reader, HTML editor and an IRC client.[2]
-
Spyware Level: Medium
-
SeaMonkey makes about 35 requests on first start, with a connection to Google SafeBrowsing recurring about every 30 minutes, though it can be disabled.
SeaMonkey is a web browser, email client, news reader, HTML editor and an IRC client.[2]
+
Spyware Level: Medium
+
SeaMonkey makes about 35 requests on first start, with a connection to Google SafeBrowsing recurring about every 30 minutes, though it can be disabled.
- Slimjet is a clone of the SlimBrowser web browser from FlashPeak that uses the Chromium as a base.
-
-
Spyware Level: EXTREMELY HIGH
-
+
+ Slimjet is a clone of the SlimBrowser web browser from FlashPeak that uses the Chromium as a base.
+
+
Spyware Level: EXTREMELY HIGH
+
Slimjet's website claims that it is very committed to user privacy, and that it blocks Google tracking, unlike Google Chrome[1]. However, this claim is not true. Slimjet is constantly sending information to google and connecting to google
services. Slimjet claims to be concerned about privacy but ultimately retains just about all of the spyware features found in Google Chrome, as well as additional spyware added on by FlashPoint. In this way, Slimjet manages to implement all of the spyware that is found in browsers like Google Chrome, except instead of one company having this information, it's split up among several companies...
@@ -74,18 +74,18 @@
Obviously you can tell that any kind of service to sync your search history "in the cloud" is a privacy nightmare. Now both Google and Slimjet have access to your search history...
-
-
-
+
+
+
+ This article was last edited on 8/4/2018
+
+
If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.
+
All contributions must be licensed under the CC0 license to be accepted.
Slimjet jest klonem przeglądarki internetowej SlimBrowser od FlashPeak która wykorzystuje kod źródłowy Chromium.
-
-
Poziom Oprogramowania Szpiegowskiego: Ekstermalnie Wysoki
-
+
+
Poziom Oprogramowania Szpiegowskiego: Ekstermalnie Wysoki
+
Na swojej stronie internetowej Slimjet twierdzi że jest bardzo zaangażowana w dbanie o prywatność użytkownika i blokuje śledzenie Google, w przeciwieństwie do Google Chrome[1]. Jednak, to twierdzenie jest nieprawdziwe. Slimjet stale wysyła informacje do Google i łączy się z ich
usługami. Slimjet twierdzi że obawia się o prywatność ale ostatecznie zachowuje prawie wszystkie funkcje szpiegowskie znalezione w Google Chrome, jak również dodatkowe śledzenie dodane przez FlashPoint. W ten sposób, Slimjet udaje się zaimplementować całe oprogramowanie szpiegowskie które można znaleźć w przeglądarkach takich jak Google Chrome, z wyjątkiem tego że zamiast do jednej firmy która posiada te informacje, jest ono podzielone na kilka firm...
@@ -75,18 +75,18 @@
Oczywiście można powiedzieć że każdy rodzaj usługi synchronizującej historię wyszukiwania "w chmurze" to koszmar prywatności. Teraz zarówno Google jak i Slimjet mają dostęp do twojej historii przeglądania...
-
-
-
+
+
+
+ This article was last edited on 8/4/2018
+
+
If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.
+
All contributions must be licensed under the CC0 license to be accepted.
- From their website: "surf is a simple web browser based on WebKit2/GTK+. It is able to display websites and follow links."[1] Program tested: v2.0 for Linux. Mitmproxy was used to check for connections.
-
-
Spyware Level: Not Spyware
-
- Surf makes no unsolicited requests at all.
- It is also fully libre software under the expat license. It was tested in conjunction with tabbed, another piece of software developed by the same people for use with surf, it adds support for tabs. From a privacy standpoint, this browser is an excellent choice.
-
-
Surf requires proxychains to connect to Tor, as it only supports HTTP proxies, not SOCKS (which is what Tor uses).
+ From their website: "surf is a simple web browser based on WebKit2/GTK+. It is able to display websites and follow links."[1] Program tested: v2.0 for Linux. Mitmproxy was used to check for connections.
+
+
Spyware Level: Not Spyware
+
+ Surf makes no unsolicited requests at all.
+ It is also fully libre software under the expat license. It was tested in conjunction with tabbed, another piece of software developed by the same people for use with surf, it adds support for tabs. From a privacy standpoint, this browser is an excellent choice.
+
+
Surf requires proxychains to connect to Tor, as it only supports HTTP proxies, not SOCKS (which is what Tor uses).
- D'apres le site de Suckless: "surf est un navigateur simple basé sur WebKit2/GTK+. Il peut afficher des sites web et suivre des liens."[1] Testé: version 2.0 pour Linux. Mitmproxy a été utilisé pour vérifier les connections.
-
-
Niveau: Pas un Spyware
-
- Surf ne fait aucune requete non-solicitée.
- C'est aussi un logiciel libre sous la license Expat. Il a été testé en meme temps que tabbed, un logiciel développé pour les utilisateurs de surf qui ajoute le support pour des onglets0. D'un point de vue vie privée, Surf est un navigateur parfait.
-
-
Surf a besoin de Proxychains pour se connecter a Tor car il ne supporte que les proxys HTTP (au lieu de SOCKS pour Tor).
+ D'apres le site de Suckless: "surf est un navigateur simple basé sur WebKit2/GTK+. Il peut afficher des sites web et suivre des liens."[1] Testé: version 2.0 pour Linux. Mitmproxy a été utilisé pour vérifier les connections.
+
+
Niveau: Pas un Spyware
+
+ Surf ne fait aucune requete non-solicitée.
+ C'est aussi un logiciel libre sous la license Expat. Il a été testé en meme temps que tabbed, un logiciel développé pour les utilisateurs de surf qui ajoute le support pour des onglets0. D'un point de vue vie privée, Surf est un navigateur parfait.
+
+
Surf a besoin de Proxychains pour se connecter a Tor car il ne supporte que les proxys HTTP (au lieu de SOCKS pour Tor).
- Z ich strony internetowej: "surf" to prosta przeglądarka internetowa oparta na WebKit2/GTK+. Jest ona w stanie wyświetlać strony internetowe i podążać za linkami."[1] Program przetestowany: v2.0 dla Linuksa. Do sprawdzania połączeń użyto Mitmproxy.
-
-
Poziom Oprogramowania Szpiegowskiego: Brak Oprogramowania Szpiegowskiego
-
- Surf nie wysyła żadnych niepożądanych żądań.
- Jest to również w pełni wolne oprogramowanie na licencji expat. Zostało ono przetestowane w połączeniu z tabbed, kolejnym oprogramowaniem stworzonym przez tych samych ludzi do użytku z surf, dodaje wsparcie dla kart. Z punktu widzenia prywatności, ta przeglądarka jest doskonałym wyborem.
-
-
Surf wymaga serwerów proxychains, aby połączyć się z Tor, ponieważ obsługuje on tylko proxy HTTP, a nie SOCKS (czyli to, czego używa Tor).
+ Z ich strony internetowej: "surf" to prosta przeglądarka internetowa oparta na WebKit2/GTK+. Jest ona w stanie wyświetlać strony internetowe i podążać za linkami."[1] Program przetestowany: v2.0 dla Linuksa. Do sprawdzania połączeń użyto Mitmproxy.
+
+
Poziom Oprogramowania Szpiegowskiego: Brak Oprogramowania Szpiegowskiego
+
+ Surf nie wysyła żadnych niepożądanych żądań.
+ Jest to również w pełni wolne oprogramowanie na licencji expat. Zostało ono przetestowane w połączeniu z tabbed, kolejnym oprogramowaniem stworzonym przez tych samych ludzi do użytku z surf, dodaje wsparcie dla kart. Z punktu widzenia prywatności, ta przeglądarka jest doskonałym wyborem.
+
+
Surf wymaga serwerów proxychains, aby połączyć się z Tor, ponieważ obsługuje on tylko proxy HTTP, a nie SOCKS (czyli to, czego używa Tor).
- По их сайту: "surf - простой веб-браузер, основанный на WebKit2/GTK+. Он может показывать веб-сайты и переходить по ссылкам."[1] Программа протестирована: v2.0 для Linux. Mitmproxy было использовано для проверки соединений.
-
-
Уровень слежки: Нет
-
- Surf никогда не делает нежелательных запросов.
- Это полностью свободное программное обеспечение, лицензированное под MIT. Он был протестирован вместе с tabbed - другая программа, разрабатываемая теми же людьми для использования с surf, она добавляет поддержку вкладок. С точки зрения приватности, этот браузер - отличный выбор.
-
-
Surf требует proxychains для соединения с Tor, так как он поддерживает только HTPP прокси, не SOCKS (которое использует TOR).
+ По их сайту: "surf - простой веб-браузер, основанный на WebKit2/GTK+. Он может показывать веб-сайты и переходить по ссылкам."[1] Программа протестирована: v2.0 для Linux. Mitmproxy было использовано для проверки соединений.
+
+
Уровень слежки: Нет
+
+ Surf никогда не делает нежелательных запросов.
+ Это полностью свободное программное обеспечение, лицензированное под MIT. Он был протестирован вместе с tabbed - другая программа, разрабатываемая теми же людьми для использования с surf, она добавляет поддержку вкладок. С точки зрения приватности, этот браузер - отличный выбор.
+
+
Surf требует proxychains для соединения с Tor, так как он поддерживает только HTPP прокси, не SOCKS (которое использует TOR).
Tor is free software and an open network that helps you defend against traffic analysis, a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security.[1] This article is about the desktop Tor Browser Bundle, which is based on Firefox. Tor itself can be used with any browser.
-
Spyware Level: Low
-
The Tor browser is a privacy focused web browser that is used to access the internet through the Tor Network. Connections through the Tor network are much more private than normal connections as you do not have an IP address that is associated with you. While spyware services can tell that you are connecting from the Tor network, their ability to identify and profile you is greatly reduced.
-
-
Tor Browser has automatic updates, and sends telemetry, albeit over Tor.
-
-
If you go to about:networking, you will see several addresses that are affiliated with Mozilla, even before Tor is connected. You can mitigate the spyware, but note that there is a chance that it will be overwritten by future updates.
Tor is free software and an open network that helps you defend against traffic analysis, a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security.[1] This article is about the desktop Tor Browser Bundle, which is based on Firefox. Tor itself can be used with any browser.
+
Spyware Level: Low
+
The Tor browser is a privacy focused web browser that is used to access the internet through the Tor Network. Connections through the Tor network are much more private than normal connections as you do not have an IP address that is associated with you. While spyware services can tell that you are connecting from the Tor network, their ability to identify and profile you is greatly reduced.
+
+
Tor Browser has automatic updates, and sends telemetry, albeit over Tor.
+
+
If you go to about:networking, you will see several addresses that are affiliated with Mozilla, even before Tor is connected. You can mitigate the spyware, but note that there is a chance that it will be overwritten by future updates.
Telegram is an instant messaging program that allows you to send text, images, videos and also any other files to other Telegram users.
-
Spyware Level: Not Rated
-
Telegram has some privacy problems such as the telephone number verification, and routing communications through official Telegram servers in most cases. However, Telegram contains privacy features and claims to not collect any user information[1].
-
Telephone Number Required
-
Telegram features the more modern spyware feature that requires the user to associate their persistent user identity with a telephone number. This is obviously a breach of privacy, because Telegram requires the user to disclose this personal information.
-
Centralized communication routing
-
Telegram does not use peer-to-peer or private servers for the majority of its communications. This means that Telegram is capable of logging all of the communications you send through its service, unless you opt to only use the Peer-to-Peer features of Telegram. Centralized communication routing has a high potential to be spyware. Telegram attempts to use Peer-to-Peer communication for Voice Calls, but it may disclose IP address to the counterpart. Telegram claims in its privacy policy.[1] that it does not collect any information, but it is impossible to prove this.
-
Telegram's server software is closed source and Telegram does not distribute its server software. There is no way for other people to host their own Telegram services because of this, meaning that the servers that the developers operate are the only choice for using this messaging platform.
-
Telegram does not follow its GPLv2 Obligations
-
Telegram clients are advertised as free software, but in practice the source code is not immediately accessible.[2], the delay sometimes being up to 5 months. So, unknown spyware features could be in the official Telegram client binaries that you download, without you knowing. It's recommended that you build an outdated version of telegram from its source code, since it's not provable whether or not the binaries that are distributed have unknown spyware or not.
Telegram is an instant messaging program that allows you to send text, images, videos and also any other files to other Telegram users.
+
Spyware Level: Not Rated
+
Telegram has some privacy problems such as the telephone number verification, and routing communications through official Telegram servers in most cases. However, Telegram contains privacy features and claims to not collect any user information[1].
+
Telephone Number Required
+
Telegram features the more modern spyware feature that requires the user to associate their persistent user identity with a telephone number. This is obviously a breach of privacy, because Telegram requires the user to disclose this personal information.
+
Centralized communication routing
+
Telegram does not use peer-to-peer or private servers for the majority of its communications. This means that Telegram is capable of logging all of the communications you send through its service, unless you opt to only use the Peer-to-Peer features of Telegram. Centralized communication routing has a high potential to be spyware. Telegram attempts to use Peer-to-Peer communication for Voice Calls, but it may disclose IP address to the counterpart. Telegram claims in its privacy policy.[1] that it does not collect any information, but it is impossible to prove this.
+
Telegram's server software is closed source and Telegram does not distribute its server software. There is no way for other people to host their own Telegram services because of this, meaning that the servers that the developers operate are the only choice for using this messaging platform.
+
Telegram does not follow its GPLv2 Obligations
+
Telegram clients are advertised as free software, but in practice the source code is not immediately accessible.[2], the delay sometimes being up to 5 months. So, unknown spyware features could be in the official Telegram client binaries that you download, without you knowing. It's recommended that you build an outdated version of telegram from its source code, since it's not provable whether or not the binaries that are distributed have unknown spyware or not.
- Waterfox is a web browser that is a fork of Firefox.
- Note: This article has a few issues. See this for more details.
-
-
Spyware Level: Medium
-
- Waterfox is a fork of Firefox that claims to be more private and secure
- than Firefox. However, Waterfox contains telemetry and shares
- information about you with Mozilla, and has other spyware features.
-
-
Waterfox connects to spyware services when it is first run
-
- If you start up Waterfox for the first time, it will make 55 requests[4] to several spyware platforms, notably
- Matomo, and Mozilla online services like its Geolocation service, and several other Mozilla services, as
- well as Waterfox's own update service. You can look at a list of these requests
- here.
-
-
Waterfox is integrated into the "Firefox Accounts" spyware platform
-
- The "Firefox Accounts" platform allows you to sync a lot of sensitive
- information, such as your internet history, across all of your devices.
- This is, of course, all being stored on Mozilla's servers.[3]
- This feature
- is opt-in spyware, but it should still be mentioned.
- If you don't want your internet history to be uploaded to Mozilla servers,
- don't use this feature.
-
-
Waterfox is self updating software
-
- Self updates are a spyware feature since they are usually ways for the developer of a program to put spyware into their software without presenting it in a prominent way
- where the user can understand what they are giving up when they download the update.
-
-
Other known spywares, like Chromium, make use of this method
-
Not spyware related, but worth noting
-
Anti-privacy search engine by default
-
- By default Waterfox uses the search engine Bing.
- Why would a privacy-based Web Browser offer this search engine by default? The other offered search engines are not much better- we have the option of searching with Google,
- which also logs your internet searches, and Ecosia, which also logs your internet searches (but it gives them to Bing). The developers attitude towards these search engines is concerning:
-
-
- "Bing is actually quite good for privacy as well (let's not forget Mozilla even suggested them as a more privacy focused search back in 2009)."[2]
-
-
- It's very clear that while the browser advertises itself as very privacy focused, the actual words and actions of the developers aren't consistent with this claim.
-
+ Waterfox is a web browser that is a fork of Firefox.
+ Note: This article has a few issues. See this for more details.
+
+
Spyware Level: Medium
+
+ Waterfox is a fork of Firefox that claims to be more private and secure
+ than Firefox. However, Waterfox contains telemetry and shares
+ information about you with Mozilla, and has other spyware features.
+
+
Waterfox connects to spyware services when it is first run
+
+ If you start up Waterfox for the first time, it will make 55 requests[4] to several spyware platforms, notably
+ Matomo, and Mozilla online services like its Geolocation service, and several other Mozilla services, as
+ well as Waterfox's own update service. You can look at a list of these requests
+ here.
+
+
Waterfox is integrated into the "Firefox Accounts" spyware platform
+
+ The "Firefox Accounts" platform allows you to sync a lot of sensitive
+ information, such as your internet history, across all of your devices.
+ This is, of course, all being stored on Mozilla's servers.[3]
+ This feature
+ is opt-in spyware, but it should still be mentioned.
+ If you don't want your internet history to be uploaded to Mozilla servers,
+ don't use this feature.
+
+
Waterfox is self updating software
+
+ Self updates are a spyware feature since they are usually ways for the developer of a program to put spyware into their software without presenting it in a prominent way
+ where the user can understand what they are giving up when they download the update.
+
+
Other known spywares, like Chromium, make use of this method
+
Not spyware related, but worth noting
+
Anti-privacy search engine by default
+
+ By default Waterfox uses the search engine Bing.
+ Why would a privacy-based Web Browser offer this search engine by default? The other offered search engines are not much better- we have the option of searching with Google,
+ which also logs your internet searches, and Ecosia, which also logs your internet searches (but it gives them to Bing). The developers attitude towards these search engines is concerning:
+
+
+ "Bing is actually quite good for privacy as well (let's not forget Mozilla even suggested them as a more privacy focused search back in 2009)."[2]
+
+
+ It's very clear that while the browser advertises itself as very privacy focused, the actual words and actions of the developers aren't consistent with this claim.
+
Web Browser is a browser originally based on Pale Moon.
-
Spyware Level: Not Spyware
-
Web Browser makes no unsolicited requests at all. It is also fully open source.[1] Due to it being based on Pale Moon, it has access to all of the XUL plugins available.
Web Browser is a browser originally based on Pale Moon.
+
Spyware Level: Not Spyware
+
Web Browser makes no unsolicited requests at all. It is also fully open source.[1] Due to it being based on Pale Moon, it has access to all of the XUL plugins available.
WebDiscover is a web browser made by WebDiscover Media.
-
Spyware Level: EXTREMELY HIGH
-
WebDiscover uses the spyware search engine Yahoo as it's default search engine, but on its website it says it uses the spyware search engine Bing as it's default search engine. It is hard to review since every time I run it, it messes up MITMproxy so I can't see what it's doing. The privacy policy explains that it collects a large amount of personal information from its users, so it is at least not a secret that this browser is spyware. This program acts in a very suspicious way and the privacy policy contains a lot of language in it about the use of the information it collects that elevates it to a uniquely bad stance on user privacy and use of user information, so I would recommend staying far away from it.
-
WebDiscover installs itself onto users computers through installer bundling
-
WebDiscover is mostly installed through other programs as an opt-out. This means that most users did not want to install this browser, and were tricked into doing it by other software's installer programs. For example[2]: [1][2][3][4][5][6][7][8][9][10]
-
WebDiscover collects a large amount of information about its users
-
According to its privacy policy[1], WebDiscover collects the following information about its users as its browser is downloaded and used:
-
-
Web Browser type
-
Operating System type and version
-
Domain Name
-
Browser version
-
Browser usage and statistics
-
-
Some of this information is typical of the kind of info that is collected by developers who write programs that phone home using the HTTP protocol. However, WebDiscover also collects the following information about its users which is more concerning:
-
"We may collect Personal Data and Anonymous Data when you download the Browser. We may also collect Personal Data when you send us information or communications directly. “Personal Data” means data that allows someone to identify or contact you including, without limitation, your name, physical address, electronic mail (email) address, phone number, and credit card information (collectively, your “Personal Data”) for the purposes of recording the transaction when you engage in activities on the Site or through use of the Browser."[1]
-
So, WebDiscover will profile your computer, and WebDiscover Media will use every opportunity they get to collect information about you.
-
WebDiscover sells information about its users
-
In this quote from the privacy policy:
-
"We may share Anonymous Data with selected third parties and business partners..."
-
Confirming that the information that WebDiscover collects about you will be sold to advertisers.
-
WebDiscover uses your personal information in a malicious way
-
WebDiscover sells your information to advertising companies that will send you junk mail separately from WebDiscover's discretion- it also DOES NOT comply with requests to stop contact, and requires you to separately request each company that it has sold your information to, to stop contacting you. I didn't check if they would comply with those requests or not. The following quotes from the privacy policy should explain this:
-
"To opt-out of having future third-party marketing communications sent to you, you will be required to unsubscribe with the applicable third party providers. Despite your request to no longer receive future newsletters or promotional and marketing communications from us, we reserve the right to continue to send you notices of any updates to the Browser, our Software End User License Agreement, and our Privacy Policy."[1]
-
WebDiscover also claims that anyone who acts in a way that "damages the reputation" of their company will have all of the personal information that WebDiscover has collected about them disclosed to any party at their discretion.
-
"If we determine, in our sole discretion, that you have engaged in conduct which might be considered, unlawful, fraudulent, or which might harm or damage the reputation or standing of WebDiscover Media with either the general public or with a business partner or potential business partner of WebDiscover Media, we reserve the right to release your Personal Information to such persons or third parties as we consider necessary in order to prevent you from causing injury to, or otherwise injuring or interfering, now or in the future, with WebDiscover Media' rights, property or operations or otherwise the rights, property or operations of anyone else who could be harmed by such conduct."[1]
-
Which is basically threatening their users that they will use the information they collect to dox anyone who says bad things about their software. This is possibly the most anti-user statement that I have read in a privacy policy.
-
Phoning Home
-
When WebDiscover is started, it will begin making requests to ec2-54-191-159-75.us-west-2.compute.amazonaws.com
-
This is presumably how it collects a lot of the personal information about its users. This was discovered using Microsoft Network Monitor 3.4.
WebDiscover is a web browser made by WebDiscover Media.
+
Spyware Level: EXTREMELY HIGH
+
WebDiscover uses the spyware search engine Yahoo as it's default search engine, but on its website it says it uses the spyware search engine Bing as it's default search engine. It is hard to review since every time I run it, it messes up MITMproxy so I can't see what it's doing. The privacy policy explains that it collects a large amount of personal information from its users, so it is at least not a secret that this browser is spyware. This program acts in a very suspicious way and the privacy policy contains a lot of language in it about the use of the information it collects that elevates it to a uniquely bad stance on user privacy and use of user information, so I would recommend staying far away from it.
+
WebDiscover installs itself onto users computers through installer bundling
+
WebDiscover is mostly installed through other programs as an opt-out. This means that most users did not want to install this browser, and were tricked into doing it by other software's installer programs. For example[2]: [1][2][3][4][5][6][7][8][9][10]
+
WebDiscover collects a large amount of information about its users
+
According to its privacy policy[1], WebDiscover collects the following information about its users as its browser is downloaded and used:
+
+
Web Browser type
+
Operating System type and version
+
Domain Name
+
Browser version
+
Browser usage and statistics
+
+
Some of this information is typical of the kind of info that is collected by developers who write programs that phone home using the HTTP protocol. However, WebDiscover also collects the following information about its users which is more concerning:
+
"We may collect Personal Data and Anonymous Data when you download the Browser. We may also collect Personal Data when you send us information or communications directly. “Personal Data” means data that allows someone to identify or contact you including, without limitation, your name, physical address, electronic mail (email) address, phone number, and credit card information (collectively, your “Personal Data”) for the purposes of recording the transaction when you engage in activities on the Site or through use of the Browser."[1]
+
So, WebDiscover will profile your computer, and WebDiscover Media will use every opportunity they get to collect information about you.
+
WebDiscover sells information about its users
+
In this quote from the privacy policy:
+
"We may share Anonymous Data with selected third parties and business partners..."
+
Confirming that the information that WebDiscover collects about you will be sold to advertisers.
+
WebDiscover uses your personal information in a malicious way
+
WebDiscover sells your information to advertising companies that will send you junk mail separately from WebDiscover's discretion- it also DOES NOT comply with requests to stop contact, and requires you to separately request each company that it has sold your information to, to stop contacting you. I didn't check if they would comply with those requests or not. The following quotes from the privacy policy should explain this:
+
"To opt-out of having future third-party marketing communications sent to you, you will be required to unsubscribe with the applicable third party providers. Despite your request to no longer receive future newsletters or promotional and marketing communications from us, we reserve the right to continue to send you notices of any updates to the Browser, our Software End User License Agreement, and our Privacy Policy."[1]
+
WebDiscover also claims that anyone who acts in a way that "damages the reputation" of their company will have all of the personal information that WebDiscover has collected about them disclosed to any party at their discretion.
+
"If we determine, in our sole discretion, that you have engaged in conduct which might be considered, unlawful, fraudulent, or which might harm or damage the reputation or standing of WebDiscover Media with either the general public or with a business partner or potential business partner of WebDiscover Media, we reserve the right to release your Personal Information to such persons or third parties as we consider necessary in order to prevent you from causing injury to, or otherwise injuring or interfering, now or in the future, with WebDiscover Media' rights, property or operations or otherwise the rights, property or operations of anyone else who could be harmed by such conduct."[1]
+
Which is basically threatening their users that they will use the information they collect to dox anyone who says bad things about their software. This is possibly the most anti-user statement that I have read in a privacy policy.
+
Phoning Home
+
When WebDiscover is started, it will begin making requests to ec2-54-191-159-75.us-west-2.compute.amazonaws.com
+
This is presumably how it collects a lot of the personal information about its users. This was discovered using Microsoft Network Monitor 3.4.
BadWolf is a pretty decent browser worth looking into. A couple of neat features worth noting is that BadWolf has a JavaScript switch and an image viewer switch, which is useful for daily tasks.
BadWolf ist ein guter Browser und definitiv einen Blick wert. Die nützlichsten Funktionen sind der integrierte JavaScript-Schalter und die Option, Bilder standardmässig nicht anzuzeigen.
Dieser Artikel wurde zuletzt am 12.2.2022 bearbeitet
-
+
If you want to edit this article, or contribute your own article(s), visit us
diff --git a/articles/bleachbit.html b/articles/bleachbit.html
index 2faacb7..aa14c79 100644
--- a/articles/bleachbit.html
+++ b/articles/bleachbit.html
@@ -18,12 +18,12 @@
Bleachbit is Tool to Clean Your System and Free Disk Space. Also, BleachBit can Shred Files.
Google is the default search engine of Brave. For a browser that claims to be privacy oriented, this is a red flag. They at least make it easy for you to change the default search engine on the first run.
-
+
Sources
@@ -147,10 +147,10 @@
[ghostarchive.org]
-
+ This article was created on 5/7/2018 This article was last edited on 8/17/2021
-
+
If you want to contribute to this website, you can always make a pull request.
All contributions must be licensed under the CC0 license to be accepted.
Google - стандартная поисковая система в Brave. Это очень странно для браузера, позиционирующего себя приватным. По крайней мере, при первом запуске Brave даёт выбор поисковой системы по умолчанию.
In the HTTP specification, the W3C explicitly acknowledges the serious privacy violations that implementations of this protocol are capable of comitting. Section 15.1[2] of the HTTP specification has a very detailed analysis of the implications of the comprimization of privacy that the User-Agent allows to happen and suggests how to use the User-Agent feature: as an opt-in feature where the privacy concerns of using such a feature are properly explained to the user. Even though this is a good section, it shows a very naive viewpoint from the W3C, the expectation that this feature would not be abused, and the expectation that implementers of this standard would respect the privacy of their users and would not use these features of the protocol to datamine users.
At best, you could call this mindset naive. If you want to hold the W3C in contempt, you could call it malicious. It's easy to write in your standard that while you could use this protocol to monitor the behavior of users, you should ask for their permission. But once that standard is widely implemented, and is widely used for the exact malicious purpose that was acknowledged in its specification, who's fault is that?
From their website: "Otter Browser aims to recreate the best aspects of the classic Opera (12.x) UI using Qt5." Their motto is: "Controlled by the user, not vice versa". Version tested: 0.9.12 (SlackBuild from slackbuilds.org). Program used for testing requests: Mitmproxy.
Spyware Level: Not Spyware
Otter Browser makes no unsolicited requests at all. It is fully open source. The developers, also, don't plan to include any spyware "features" in the future. This seems like a true privacy-based web browser (at least for now).
-
+
This article was created on 11/25/2017
This article was lasted edited on 10/5/2020
-
+
If you want to contribute to this website, you can always make a pull request.
All contributions must be licensed under the CC0 license to be accepted.
Qutebrowser is a keyboard-focused browser with a minimal GUI. It's based on Python and PyQt5 and free software, licensed under the GPL. Program tested: v1.6.1 for Debian Buster. Mitmproxy was used to check for connections.
Spyware Level: Not Spyware
Qutebrowser makes no unsolicited requests at all. It is also libre software. This web browser is a great choice to use, and there is nothing to complain about from a privacy standpoint. (although I don't really know how to use the User Interface that well...) So far this browser looks like it can stand tall in the ranks of the other privacy-respecting web browsers out there.
-
+
This article was created on 5/10/2018
This article was lasted edited on 10/7/2020
-
+
If you want to contribute to this website, you can always make a pull request.
All contributions must be licensed under the CC0 license to be accepted.
Qutebrowser - веб-браузер, ориентированный на управление с клавиатуры, с минимальным графическим интерфейсом. Он основан на Python, PyQt5 и свободном ПО, лицензированном под GPL. Программа протестирована: v1.6.1 для Debian Buster. Mitmproxy было использовано для проверки соединений.
Spyware Level: Not Spyware
Qutebrowser никогда не делает нежелательных запросов. Это свободное программное обеспечение. Этот браузер - отличный выбор, и с точки зрения приватности жаловаться здесь не на что (хотя я не знаю как управляться с этим пользовательским интерфейсом...). Пока этот браузер выглядит достойным, чтобы стоять в одном ряду с другими браузерами, уважающими конфиденциальность пользователя.
-
+
Этот перевод был создан 9/7/2021
Этот перевод в последний раз изменялся 9/7/2021
-
+
If you want to contribute to this website, you can always make a pull request.
All contributions must be licensed under the CC0 license to be accepted.
diff --git a/articles/seamonkey.html b/articles/seamonkey.html
index da6b81f..9b49cab 100644
--- a/articles/seamonkey.html
+++ b/articles/seamonkey.html
@@ -27,10 +27,10 @@
SeaMonkey Logo (WikiMedia)
Telegram clients are advertised as free software, but in practice the source code is not immediately accessible.[2], the delay sometimes being up to 5 months. So, unknown spyware features could be in the official Telegram client binaries that you download, without you knowing. It's recommended that you build an outdated version of telegram from its source code, since it's not provable whether or not the binaries that are distributed have unknown spyware or not.
Web Browser makes no unsolicited requests at all. It is also fully open source.[1] Due to it being based on Pale Moon, it has access to all of the XUL plugins available.
CCleaner, developed by Piriform, is a utility program used to clean
@@ -42,7 +42,7 @@
class="screenshot"
src="../images/ccleaner_privacy.png"
alt="CCleaner privacy settings"
- />
+/>
CDex is an Open Source Digital Audio CD Extractor.
@@ -48,9 +48,9 @@
class="screenshot"
src="../images/cdex_bundling.png"
alt="CDex installer spyware opt-out screen"
- />
+/>
@@ -24,22 +24,22 @@ Clementine - is a music player and library organizer, based on Amarok 1.4, and l
Clementine is using Non-Free Web services
It's made to give search suggestitions, lyrics, and internet radio and podcast lists. Also, Clementine is using Wikipedia as the main source of information about artists. Wikipedia is logging your IP-adress. Clementine does have the native possibility to run network traffic through a proxy.
If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted.
@@ -30,14 +30,14 @@
here!
The spotlight is very much appreciated.
-
+
+/>
Discord is spyware because it collects all information that passes
through its communication platform. As Discord is a centralized
@@ -148,7 +148,7 @@
class="screenshot"
src="../images/discord_process_logging.png"
alt="Discord process logging as described in [2] confirmed with procmon"
- />
+/>
Discord claims this feature can be disabled through the UI.
This is sadly false.
@@ -165,7 +165,7 @@
class="screenshot"
src="../images/discord_data.png"
alt="Discord process logging usefulness"
- />
+/>
That the process logging features of Discord are now being recorded on
Discord's servers as a form of telemetry (spyware), and removes
@@ -185,7 +185,7 @@
class="screenshot"
src="../images/discord_2.png"
alt="Discord confirms process logging is used for advertising"
- />
+/>
Discord tries to force some users to give their Telephone numbers
@@ -207,7 +207,7 @@
class="screenshot"
src="../images/discord_verify.png"
alt="discord phone verification"
- />
+/>
Discord receives government requests for your information
@@ -224,7 +224,7 @@
>
in case the link there dies.
-
+
Speculation on Discord's future
It's unknown whether Discord currently is or isn't selling user
@@ -264,7 +264,7 @@
liquidate this asset.
@@ -44,7 +44,7 @@ DuckDuckGo is a search engine created by Gabriel Weinberg and owned by Duck Duck
DuckDuckGo uses clear gifs from the domain improving.duckduckgo.com. This is a tracking technique and can be used to collect analytics about your web browser.
Whenever you use DuckDuckGo, several requests will be sent to this domain.[4] This is of course not the kind of behavior that you would expect from a privacy concerned website, but there it is. Do you trust DuckDuckGo to collect "anonymous" analytics about you?
-
+
Further Reading
@@ -54,7 +54,7 @@ DuckDuckGo is a search engine created by Gabriel Weinberg and owned by Duck Duck
[www.webcitation.org]
-
+
Sources
1.
@@ -90,14 +90,14 @@ DuckDuckGo is a search engine created by Gabriel Weinberg and owned by Duck Duck
*This is a machine-translated mirror of an article written in German hosted here. Links to the original article can be found on that page.
-
+
This article was last edited on 8/17/2021
If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted.
Tor Browser has automatic updates, and sends telemetry, albeit over Tor.
If you go to about:networking, you will see several addresses that are affiliated with Mozilla, even before Tor is connected. You can mitigate the spyware, but note that there is a chance that it will be overwritten by future updates.
Brave Browser is a Chromium fork with many interesting features not found elsewhere, such as built-in Adblock and other extensions, fingerprinting protection, a cleaner Preferences menu compared to other Chrome forks, and the (opt-in) ability to automatically support (pay) the websites you visit. The developers describe it as "A browser with your interests at heart."[1] with the built-in privacy protections.
Spyware Level: High
Brave is self updating software, uses Google as the default search engine, has built-in telemetry, and even has an opt-out rss-like news feed similar to Firefox Pocket. These shouldn't be the things that come to mind if someone were to imagine a privacy oriented browser.
Brave Browser - форк Chromium'а со множеством интересных возможностей, которых нет где-либо еще, такие как встроенный блокировщик рекламы и другие расширения, защита от отпечатков браузера, менее загруженное меню по сравнению с другими форками Chrome и встроенная возможность для автоматического пожертвования сайтам, которые вы посещаете. Разработчики описывают его как "Браузер, защищающий ваши интересы"[1] со встроенной защитой конфиденциальности пользователя.
Уровень слежки: Высокий
Brave обновляется автоматически, использует Google в качестве поисковика по умолчанию, имеет встроенную телеметрию и даже имеет ленту новостей, похожую на Firefox Pocket. Этого не должно быть в браузере, который ориентирован на конфиденциальность пользователя.
Discord is an instant messaging application for macOS, Windows, GNU/Linux,
Android, and iOS. Discord is used to communicate via voice chat and
diff --git a/articles/discord_es.html b/articles/discord_es.html
index 229a6f1..046eb6f 100644
--- a/articles/discord_es.html
+++ b/articles/discord_es.html
@@ -9,9 +9,6 @@
Discord es un programa de mensajería instantanea disponible para MacOS, GNU/Linux, Android, Windows, Android e iOS.
Discord puede usarse para comunicarse vía voz y chat de texto, también se puede usar para compartir archivos e imágenes.
@@ -235,4 +232,4 @@ por si el link muere.
-
\ No newline at end of file
+
diff --git a/articles/duckduckgo.html b/articles/duckduckgo.html
index 47575a1..a39566f 100644
--- a/articles/duckduckgo.html
+++ b/articles/duckduckgo.html
@@ -14,11 +14,6 @@
DuckDuckGo es un motor de busqueda creado por Gabriel Weinberg y mantenido or Duck Duck Go, inc
Nivel de spyware: Posiblemente spyware
DuckDuckGo es un motor de busqueda que jura proteger la privacidad de sus usuarios [1]debido a que es un servicio sentralizado, no es posible saber si es spyware viendo la tecnologia que usa. hay algunos avisos para dudar si es realmente privado. Este artículo es solo para hacerte decidir si usar o no este servicio. Ultimamente no hay prueba de que DuckDuckGo es spyware. Pero hay algunas razones para sospechar de ser spyware, de todas formas, esta bien saber de que DuckDuckGo Ofrece un dominio onion asi que no debes dudar en usarlo si estás en TOR
Mozilla Firefox is one of the most popular and longest existing
browsers. Its developers have earned it a reputation for being a "privacy and security-based browser, respecting the user" — but is it justified, or just marketing? In fact, over the years they have made several anti-privacy (and generally anti-user) decisions, but this article will focus exclusively on spying. Version tested: 52.5.0, with the default settings. Program used for testing requests: Mitmproxy.
diff --git a/articles/firefox_es.html b/articles/firefox_es.html
index 290dfe3..886b95e 100644
--- a/articles/firefox_es.html
+++ b/articles/firefox_es.html
@@ -9,9 +9,6 @@
Mozilla Firefox es uno de los navegadores web más populares y perdurables. Sus desarrolladores han adquirido cierta reputación por desarrollar un "navegador que respeta la privacidad y seguridad del usuario" - pero, ¿es algo justificado o sólo una estrategia de marketing? Bueno, de hecho, a través de sus años de existencia, los desarrolladores han tomado varias decisiones que podrían ser consideradas anti-privacidad (y anti-usuario en general), pero en este artículo nos estaremos enfocando exclusivamente en aquellas que pueden ser consideradas spyware. Versión testeada: 52.5.0, con la configuración por defecto. Programas usados para buscar solicitudes web: Mitmproxy.
El buscador de Google es un motor de busqueda creado y mantenido por Google
Nivel de spyware EXTREMADAMENTE ALTO
El buscador de Google recolecta tu información personal y está altamente integrado con otros servicios que también recolectan tu información personal. En la política de privacidad de Google[1] está escrita de mandera que no dice que tipos de información recolectam por lo que miente. Así que lo mejor que puedes hacer, es afirmar que cada vez que usas un servicio de Google es saber que está haciendo lo posible para obtener toda tu información.
-
\ No newline at end of file
+
diff --git a/articles/google_search_tr.html b/articles/google_search_tr.html
index ac1833f..6265cb0 100644
--- a/articles/google_search_tr.html
+++ b/articles/google_search_tr.html
@@ -10,10 +10,6 @@
-
\ No newline at end of file
+
diff --git a/articles/hexchat.html b/articles/hexchat.html
index cca25cc..fed897b 100644
--- a/articles/hexchat.html
+++ b/articles/hexchat.html
@@ -9,9 +9,6 @@
-
\ No newline at end of file
+
diff --git a/articles/icecat_it.html b/articles/icecat_it.html
index 9a040a9..ec15ea5 100644
--- a/articles/icecat_it.html
+++ b/articles/icecat_it.html
@@ -9,11 +9,6 @@
From their website: "NetSurf is a multi-platform web browser for RISC OS, UNIX-like platforms (including Linux), Mac OS X, and more" [1] Version Tested: Netsurf 3.9
Z ich strony internetowej: "NetSurf jest wieloplatformową przeglądarką internetową dla RISC OS, platform podobnych do UNIX-owych (w tym Linux), Mac OS X i innych" [1] Wersja testowana: Netsurf 3.9
Qutebrowser is a keyboard-focused browser with a minimal GUI. It's based on Python and PyQt5 and free software, licensed under the GPL. Program tested: v1.6.1 for Debian Buster. Mitmproxy was used to check for connections.
Spyware Level: Not Spyware
Qutebrowser makes no unsolicited requests at all. It is also libre software. This web browser is a great choice to use, and there is nothing to complain about from a privacy standpoint. (although I don't really know how to use the User Interface that well...) So far this browser looks like it can stand tall in the ranks of the other privacy-respecting web browsers out there.
Qutebrowser - веб-браузер, ориентированный на управление с клавиатуры, с минимальным графическим интерфейсом. Он основан на Python, PyQt5 и свободном ПО, лицензированном под GPL. Программа протестирована: v1.6.1 для Debian Buster. Mitmproxy было использовано для проверки соединений.
Spyware Level: Not Spyware
Qutebrowser никогда не делает нежелательных запросов. Это свободное программное обеспечение. Этот браузер - отличный выбор, и с точки зрения приватности жаловаться здесь не на что (хотя я не знаю как управляться с этим пользовательским интерфейсом...). Пока этот браузер выглядит достойным, чтобы стоять в одном ряду с другими браузерами, уважающими конфиденциальность пользователя.
-
\ No newline at end of file
+
diff --git a/articles/slimjet.html b/articles/slimjet.html
index d925221..1e8f35f 100644
--- a/articles/slimjet.html
+++ b/articles/slimjet.html
@@ -14,9 +14,6 @@
From their website: "surf is a simple web browser based on WebKit2/GTK+. It is able to display websites and follow links."[1] Program tested: v2.0 for Linux. Mitmproxy was used to check for connections.
D'apres le site de Suckless: "surf est un navigateur simple basé sur WebKit2/GTK+. Il peut afficher des sites web et suivre des liens."[1] Testé: version 2.0 pour Linux. Mitmproxy a été utilisé pour vérifier les connections.
Z ich strony internetowej: "surf" to prosta przeglądarka internetowa oparta na WebKit2/GTK+. Jest ona w stanie wyświetlać strony internetowe i podążać za linkami."[1] Program przetestowany: v2.0 dla Linuksa. Do sprawdzania połączeń użyto Mitmproxy.
По их сайту: "surf - простой веб-браузер, основанный на WebKit2/GTK+. Он может показывать веб-сайты и переходить по ссылкам."[1] Программа протестирована: v2.0 для Linux. Mitmproxy было использовано для проверки соединений.
Badwolf is a minimalist and privacy-oriented web browser based on WebKitGTK.
Spyware Level: Not Spyware
BadWolf makes no unsolicited requests at all.
BadWolf is a pretty decent browser worth looking into. A couple of neat features worth noting is that BadWolf has a JavaScript switch and an image viewer switch, which is useful for daily tasks.
Badwolf ist ein minimalistischer und auf Privatsphäre ausgelegter Webbrowser, basierend auf WebKitGTK.
Spyware-Level: Keine Spyware
BadWolf stellt nicht ungefragt Verbindungen her.
BadWolf ist ein guter Browser und definitiv einen Blick wert. Die nützlichsten Funktionen sind der integrierte JavaScript-Schalter und die Option, Bilder standardmässig nicht anzuzeigen.
+
+
+
-
\ No newline at end of file
+
diff --git a/articles/bing.html b/articles/bing.html
index 1543196..497582a 100644
--- a/articles/bing.html
+++ b/articles/bing.html
@@ -1,14 +1,12 @@
+
-
+
+
Bing — Spyware Watchdog
-
- Bing is yet another spyware search engine that collects your
- information and sells it to advertisers. It's strongly recommended
- that you do not use Bing.
-
-
- At some point Bing had a privacy policy, but Microsoft doesn't seem to
- be hosting it anymore. So, this article will look at the Microsoft
- Privacy Statement[1] to help us
- understand what information Bing collects. Similarly to the privacy
- policies of Google and Apple, the Microsoft privacy statement eclipses
- the entire spyware platform and does not help you understand in great
- detail what kind of information one single program could be
- collecting. (although this policy is more specific)
-
-
+
Bing is yet another spyware search engine that collects your information and sells it to advertisers. It's strongly recommended that you do not use Bing.
+
At some point Bing had a privacy policy, but Microsoft doesn't seem to be hosting it anymore. So, this article will look at the Microsoft Privacy Statement[1] to help us understand what information Bing collects. Similarly to the privacy policies of Google and Apple, the Microsoft privacy statement eclipses the entire spyware platform and does not help you understand in great detail what kind of information one single program could be collecting. (although this policy is more specific)
-
- "Microsoft collects data from you, through our interactions with you
- and through our products for a variety of purposes described
- below. [...] You provide some of this data directly, such as when
- you [...] submit a search query to Bing"
-
-
-
-
- Later in the Interactions -> Device and usage data section of this
- statement, it is clarified again that Microsoft collects your:
- "Browse History. Data about the web pages you visit.", as well
- as your:
- "Images. Images and related information, such as picture metadata.
- For example, we collect the image you provide when you use a Bing
- image-enabled service."
-
-
-
- Microsoft claims to store this information for an unlimited amount of
- time, but it claims that it will eventually anonymize this information
- in a process that takes 18 months to complete.
-
-
-
-
-
- "Has Microsoft adopted and announced a specific retention period for
- a certain data type? For example, for Bing search queries, we
- de-identify stored queries by removing the entirety of the IP
- address after 6 months, and cookie IDs and other cross-session
- identifiers after 18 months. "
-
-
"Microsoft collects data from you, through our interactions with you and through our products for a variety of purposes described below. [...] You provide some of this data directly, such as when you [...] submit a search query to Bing"
+
Later in the Interactions -> Device and usage data section of this statement, it is clarified again that Microsoft collects your: "Browse History. Data about the web pages you visit.", as well as your: "Images. Images and related information, such as picture metadata. For example, we collect the image you provide when you use a Bing image-enabled service."
+
Microsoft claims to store this information for an unlimited amount of time, but it claims that it will eventually anonymize this information in a process that takes 18 months to complete.
+
"Has Microsoft adopted and announced a specific retention period for a certain data type? For example, for Bing search queries, we de-identify stored queries by removing the entirety of the IP address after 6 months, and cookie IDs and other cross-session identifiers after 18 months."
Bing uses your search history to profile you for advertising
-
- "Microsoft may use data we collect to select and deliver some of the
- ads you see on Microsoft web properties, such as Microsoft.com, MSN
- and Bing."
-
-
-
- So since your search history is part of the "data we collect", the
- natural conclusion is that, your search queries are being used to
- profile you for advertising. And of course, this is confirmed in this
- section:
-
-
-
-
- "The ads that you see may be selected based on data we process about
- you, such as your interests and favorites, your location, your
- transactions, how you use our products,
-
- your search queries
-
- , or the content you view. For example, if you view content on MSN
- about automobiles, we may show advertisements about cars; if you
- search “pizza places in Seattle” on Bing, you may see advertisements
- in your search results for restaurants in Seattle."
-
-
"Microsoft may use data we collect to select and deliver some of the ads you see on Microsoft web properties, such as Microsoft.com, MSN and Bing."
+
So since your search history is part of the "data we collect", the natural conclusion is that, your search queries are being used to profile you for advertising. And of course, this is confirmed in this section:
+
"The ads that you see may be selected based on data we process about you, such as your interests and favorites, your location, your transactions, how you use our products, your search queries, or the content you view. For example, if you view content on MSN about automobiles, we may show advertisements about cars; if you search “pizza places in Seattle” on Bing, you may see advertisements in your search results for restaurants in Seattle."
Bing sells your search history to other spyware platforms
-
- "We may share data we collect with third parties, such as Oath,
- AppNexus, or Facebook (see below), so that the ads you see in our
- products, their products, or other sites and apps serviced by these
- partners are more relevant and valuable to you. "
-
-
"We may share data we collect with third parties, such as Oath, AppNexus, or Facebook (see below), so that the ads you see in our products, their products, or other sites and apps serviced by these partners are more relevant and valuable to you."
Brave Browser is a Chromium fork with many interesting features not found elsewhere, such as built-in Adblock and other extensions, fingerprinting protection, a cleaner Preferences menu compared to other Chrome forks, and the (opt-in) ability to automatically support (pay) the websites you visit. The developers describe it as "A browser with your interests at heart."[1] with the built-in privacy protections.
+
Spyware Level: High
+
Brave is self updating software, uses Google as the default search engine, has built-in telemetry, and even has an opt-out rss-like news feed similar to Firefox Pocket. These shouldn't be the things that come to mind if someone were to imagine a privacy oriented browser.
+
Auto-updates
+
Brave will check for updates every time you run it, and you can't turn it off from the browser. Athough, it's on Brave's low priority list to add an option to do so.[2] The reason why it's low priority would be because it's been over a year and there hasn't been an implementation of it yet.
+
Brave has built-in telemetry
+
While running, Brave will make lots of requests to the domain p3a.brave.com as telemetry. They claim they store the collected data for several days.[8] This feature is an opt-out that can be disabled. This opt-out can be disabled here.
+
Brave Today
+
Brave now has new feature similar to Firefox Pocket called Brave Today. If you don't know what Firefox Pocket is, it's basically an rss-like news feed that's shown in every blank tab. This feature Brave has is sadly an opt-out rather than an opt-in and sends lots of requests to Brave's servers. It can't seem to be disabled it in and of itself, but setting the tabs to blank seems to stop the requests.
+
SafeBrowsing
+
Brave uses SafeBrowsing. It's a feature that tries to "protect" the user from potentially unsafe websites and extensions. However, it sends requests to fetch the information required. Brave's SafeBrowsing is powered by google.[10] This opt-out can be disabled here.
+
Brave Rewards
+
Brave has a rewards program. You can find more information about it here.[3] At first glance it looks like the rewards program is an opt-in, but the browser makes requests to these domains regardless if you sign up or not:
+
+
rewards.brave.com
+
api.rewards.brave.com
+
grant.rewards.brave.com
+
+
A quick update: These requests have been reported as a bug and for the most part have been fixed (with a couple exceptions). I'll remove this section once the bug has been completely fixed.[12]
+
Miscellaneous requests worth noting
+
Brave on first run sends a request to fetch the library used for checking spelling errors:
+
+
Brave on startup sends a request to variations.brave.com. Brave uses this to turn on and off features. There isn't a way to disable this as of yet.[11]
+
+
Brave fetches the list of affiliates through laptop-updates.brave.com:
+
+
Brave makes a request to static1.brave.com every once and a while, which looks like it's used to fetch plugin information?[4] When the url was placed into the browser, it was directed to Google's error 404 page.[9]
+
+
+
A quick curl --head static1.brave.com shows that Brave uses Google's gstatic, which uses Cloudflare as well:
+
+
On the first run, Brave fetches five extensions from brave-core-ext.s3.brave.com and tries to install them:
+
+
Not spyware related, but worth noting
+
Anti-privacy search engine by default
+
Google is the default search engine of Brave. For a browser that claims to be privacy oriented, this is a red flag. They at least make it easy for you to change the default search engine on the first run.
-
-
Brave
-
Brave Browser is a Chromium fork with many interesting features not found elsewhere, such as built-in Adblock and other extensions, fingerprinting protection, a cleaner Preferences menu compared to other Chrome forks, and the (opt-in) ability to automatically support (pay) the websites you visit. The developers describe it as "A browser with your interests at heart."[1] with the built-in privacy protections.
-
Spyware Level: High
-
Brave is self updating software, uses Google as the default search engine, has built-in telemetry, and even has an opt-out rss-like news feed similar to Firefox Pocket. These shouldn't be the things that come to mind if someone were to imagine a privacy oriented browser.
-
Auto-updates
-
Brave will check for updates every time you run it, and you can't turn it off from the browser. Athough, it's on Brave's low priority list to add an option to do so.[2] The reason why it's low priority would be because it's been over a year and there hasn't been an implementation of it yet.
-
Brave has built-in telemetry
-
While running, Brave will make lots of requests to the domain p3a.brave.com as telemetry. They claim they store the collected data for several days.[8] This feature is an opt-out that can be disabled. This opt-out can be disabled here.
-
Brave Today
-
Brave now has new feature similar to Firefox Pocket called Brave Today. If you don't know what Firefox Pocket is, it's basically an rss-like news feed that's shown in every blank tab. This feature Brave has is sadly an opt-out rather than an opt-in and sends lots of requests to Brave's servers. It can't seem to be disabled it in and of itself, but setting the tabs to blank seems to stop the requests.
-
SafeBrowsing
-
Brave uses SafeBrowsing. It's a feature that tries to "protect" the user from potentially unsafe websites and extensions. However, it sends requests to fetch the information required. Brave's SafeBrowsing is powered by google.[10] This opt-out can be disabled here.
-
Brave Rewards
-
Brave has a rewards program. You can find more information about it here.[3] At first glance it looks like the rewards program is an opt-in, but the browser makes requests to these domains regardless if you sign up or not:
-
-
rewards.brave.com
-
api.rewards.brave.com
-
grant.rewards.brave.com
-
-
A quick update: These requests have been reported as a bug and for the most part have been fixed (with a couple exceptions). I'll remove this section once the bug has been completely fixed.[12]
-
Miscellaneous requests worth noting
-
Brave on first run sends a request to fetch the library used for checking spelling errors:
-
-
Brave on startup sends a request to variations.brave.com. Brave uses this to turn on and off features. There isn't a way to disable this as of yet.[11]
-
-
Brave fetches the list of affiliates through laptop-updates.brave.com:
-
-
Brave makes a request to static1.brave.com every once and a while, which looks like it's used to fetch plugin information?[4] When the url was placed into the browser, it was directed to Google's error 404 page.[9]
-
-
-
A quick curl --head static1.brave.com shows that Brave uses Google's gstatic, which uses Cloudflare as well:
-
-
On the first run, Brave fetches five extensions from brave-core-ext.s3.brave.com and tries to install them:
-
-
Not spyware related, but worth noting
-
Anti-privacy search engine by default
-
Google is the default search engine of Brave. For a browser that claims to be privacy oriented, this is a red flag. They at least make it easy for you to change the default search engine on the first run.
Brave Browser - форк Chromium'а со множеством интересных возможностей, которых нет где-либо еще, такие как встроенный блокировщик рекламы и другие расширения, защита от отпечатков браузера, менее загруженное меню по сравнению с другими форками Chrome и встроенная возможность для автоматического пожертвования сайтам, которые вы посещаете. Разработчики описывают его как "Браузер, защищающий ваши интересы"[1] со встроенной защитой конфиденциальности пользователя.
+
Уровень слежки: Высокий
+
Brave обновляется автоматически, использует Google в качестве поисковика по умолчанию, имеет встроенную телеметрию и даже имеет ленту новостей, похожую на Firefox Pocket. Этого не должно быть в браузере, который ориентирован на конфиденциальность пользователя.
+
Автоматические обновления
+
Brave будет проверять обновления каждый раз, когда вы его запускаете, и вы не можете это отключить. Добавление данной опции обладает низким приоритетом в разработке Brave[2], так как прошло уже больше года и её всё еще нет.
+
Brave has built-in telemetry
+
Во время работы Brave будет делать много запросов к домену p3a.brave.com в качестве телеметрии. Они утверждают, что хранят данные только несколько дней[8]. Эта опция может быть отключена здесь.
+
Brave Today
+
Brave содержит сервис похожий на Firefox Pocket - Brave Today. Это новостная лента, которая показывается на каждой пустой новой вкладке. Эта возможность к сожалению включена по умолчанию и посылает множество запросов к серверам Brave. Кажется, что нельзя отключить эту опцию, но если установить новые вкладки как пустые, то похоже, что это останавливает запросы.
+
SafeBrowsing
+
Brave использует SafeBrowsing. Это функция, которая пытается "защитить" пользователя от возможных небезопасных веб-сайтов и расширений. Однако, она посылает запросы, чтобы получить требуемую информацию. Brave SafeBrowsing поддерживается Google[10]. Данная функция может быть отключена здесь.
+
Brave Rewards
+
У Brave есть программа вознаграждений[3]. На первый взгляд кажется, что она необязательна, но браузер делает запросы к доменам ниже независимо от регистрации в программе:
+
+
rewards.brave.com
+
api.rewards.brave.com
+
grant.rewards.brave.com
+
+
Небольшое дополнение: об этих запросах сообщалось как об ошибках, и по большей части они исправлены (за несколькими исключениями). Этот раздел будет удалён, как только ошибки будут полностью исправлены[12].
+
Другие запросы которые стоит отметить
+
При первом запуске Brave отправляет запрос, чтобы получить библиотеку для проверки орфографии.
+
+
При старте Brave посылает запросы к variations.brave.com. Brave использует это для включения и выключения функций. Пока нет никакого способа отключить это[11].
+
+
Brave получает список партнёров через запросы к laptop-updates.brave.com:
+
+
Время от времени Brave делает запрос к static1.brave.com, что выглядит как будто он пытается получить информацию о плагинах[4]. В браузере эта ссылка ведёт на страницу Google с ошибкой 404[9].
+
+
+
Команда curl --head static1.brave.com показывает, что Brave использует Google gstatic, который также использует Cloudflare:
+
+
При первом запуске Brave скачивает пять расширений из brave-core-ext.s3.brave.com и пытается установить их:
+
+
Не связано со слежением, но стоит отметить
+
Неконфиденциальный поисковик по умолчанию
+
Google - стандартная поисковая система в Brave. Это очень странно для браузера, позиционирующего себя приватным. По крайней мере, при первом запуске Brave даёт выбор поисковой системы по умолчанию.
-
-
Brave
-
Brave Browser - форк Chromium'а со множеством интересных возможностей, которых нет где-либо еще, такие как встроенный блокировщик рекламы и другие расширения, защита от отпечатков браузера, менее загруженное меню по сравнению с другими форками Chrome и встроенная возможность для автоматического пожертвования сайтам, которые вы посещаете. Разработчики описывают его как "Браузер, защищающий ваши интересы"[1] со встроенной защитой конфиденциальности пользователя.
-
Уровень слежки: Высокий
-
Brave обновляется автоматически, использует Google в качестве поисковика по умолчанию, имеет встроенную телеметрию и даже имеет ленту новостей, похожую на Firefox Pocket. Этого не должно быть в браузере, который ориентирован на конфиденциальность пользователя.
-
Автоматические обновления
-
Brave будет проверять обновления каждый раз, когда вы его запускаете, и вы не можете это отключить. Добавление данной опции обладает низким приоритетом в разработке Brave[2], так как прошло уже больше года и её всё еще нет.
-
Brave has built-in telemetry
-
Во время работы Brave будет делать много запросов к домену p3a.brave.com в качестве телеметрии. Они утверждают, что хранят данные только несколько дней[8]. Эта опция может быть отключена здесь.
-
Brave Today
-
Brave содержит сервис похожий на Firefox Pocket - Brave Today. Это новостная лента, которая показывается на каждой пустой новой вкладке. Эта возможность к сожалению включена по умолчанию и посылает множество запросов к серверам Brave. Кажется, что нельзя отключить эту опцию, но если установить новые вкладки как пустые, то похоже, что это останавливает запросы.
-
SafeBrowsing
-
Brave использует SafeBrowsing. Это функция, которая пытается "защитить" пользователя от возможных небезопасных веб-сайтов и расширений. Однако, она посылает запросы, чтобы получить требуемую информацию. Brave SafeBrowsing поддерживается Google[10]. Данная функция может быть отключена здесь.
-
Brave Rewards
-
У Brave есть программа вознаграждений[3]. На первый взгляд кажется, что она необязательна, но браузер делает запросы к доменам ниже независимо от регистрации в программе:
-
-
rewards.brave.com
-
api.rewards.brave.com
-
grant.rewards.brave.com
-
-
Небольшое дополнение: об этих запросах сообщалось как об ошибках, и по большей части они исправлены (за несколькими исключениями). Этот раздел будет удалён, как только ошибки будут полностью исправлены[12].
-
Другие запросы которые стоит отметить
-
При первом запуске Brave отправляет запрос, чтобы получить библиотеку для проверки орфографии.
-
-
При старте Brave посылает запросы к variations.brave.com. Brave использует это для включения и выключения функций. Пока нет никакого способа отключить это[11].
-
-
Brave получает список партнёров через запросы к laptop-updates.brave.com:
-
-
Время от времени Brave делает запрос к static1.brave.com, что выглядит как будто он пытается получить информацию о плагинах[4]. В браузере эта ссылка ведёт на страницу Google с ошибкой 404[9].
-
-
-
Команда curl --head static1.brave.com показывает, что Brave использует Google gstatic, который также использует Cloudflare:
-
-
При первом запуске Brave скачивает пять расширений из brave-core-ext.s3.brave.com и пытается установить их:
-
-
Не связано со слежением, но стоит отметить
-
Неконфиденциальный поисковик по умолчанию
-
Google - стандартная поисковая система в Brave. Это очень странно для браузера, позиционирующего себя приватным. По крайней мере, при первом запуске Brave даёт выбор поисковой системы по умолчанию.
- CCleaner, developed by Piriform, is a utility program used to clean
- potentially unwanted files and invalid Windows Registry entries from a
- computer.
-
+
CCleaner, developed by Piriform, is a utility program used to clean potentially unwanted files and invalid Windows Registry entries from a computer.
Spyware Level: EXTREMELY HIGH
-
- CCleaner is spyware that collects your personal information to
- advertise to you. It also sells your information to third parties so
- that they can advertise to you. It collects a huge amount of very
- personal information, like your
- physical location. CCleaner uses the
- technique of privacy policy obfuscation where it provides one privacy
- policy for every single product its company offers, making it more
- difficult to know what parts of the privacy policy apply to which
- program.
-
+
CCleaner is spyware that collects your personal information to advertise to you. It also sells your information to third parties so that they can advertise to you. It collects a huge amount of very personal information, like your physical location. CCleaner uses the technique of privacy policy obfuscation where it provides one privacy policy for every single product its company offers, making it more difficult to know what parts of the privacy policy apply to which program.
CCleaner collects and sells user information to advertisers
-
- CCleaner clearly shows in its privacy settings that it is collecting
- information about your computer and selling that information to
- advertisers. Below is a screenshot on how to mitigate some of it.
-
CCleaner clearly shows in its privacy settings that it is collecting information about your computer and selling that information to advertisers. Below is a screenshot on how to mitigate some of it.
CCleaner tracks a huge amount of personal information
-
- If we look at the privacy policy, we can see that CCleaner reports the
- following[3]:
-
+
If we look at the privacy policy, we can see that CCleaner reports the following[3]:
IP Address
Unique User ID
Operating System
Other Avast Products installed
-
- physical location
-
+
physical location
-
-
- Beyond this, CCleaner is integrated with the following spyware
- platforms, which all collect their own sets of information:
-
+
Beyond this, CCleaner is integrated with the following spyware platforms, which all collect their own sets of information:
Google Analytics
Logentries
-
-
- It would be very time-consuming to go through all of those privacy
- policies (especially because many of these are obfuscated), but it
- should be enough to understand that CCleaner is full of third party
- spyware, as well as first party spyware.
-
+
It would be very time-consuming to go through all of those privacy policies (especially because many of these are obfuscated), but it should be enough to understand that CCleaner is full of third party spyware, as well as first party spyware.
-
- "When we collect your email address, we may market our other
- products and services to you. You may choose to unsubscribe from
- future email marketing by following the instructions in the email."
-
-
"When we collect your email address, we may market our other products and services to you. You may choose to unsubscribe from future email marketing by following the instructions in the email."
CCleaner tracks your physical location
-
- According to the privacy policy, the CCleaner website tries to track
- your physical location.[3]
-
-
-
- "Our websites use cookies to acquire data that may be used to
- determine your physical location via your Internet Protocol address
- (“IP Address”) and automated geolocation techniques, or to acquire
- basic information about the computer, tablet, or mobile phone that
- you use to visit us."
-
-
-
- "location data" is also mentioned when talking about the
- information that CCleaner itself collects about its users.
-
+
According to the privacy policy, the CCleaner website tries to track your physical location.[3]
+
"Our websites use cookies to acquire data that may be used to determine your physical location via your Internet Protocol address (“IP Address”) and automated geolocation techniques, or to acquire basic information about the computer, tablet, or mobile phone that you use to visit us."
+
"location data" is also mentioned when talking about the information that CCleaner itself collects about its users.
Past Security Flaws
-
- In the past, CCleaner has been compromised and backdoors have been
- added to it.[1]
-
+
In the past, CCleaner has been compromised and backdoors have been added to it.[1]
- CDex is an Open Source Digital Audio CD Extractor.
-
+
CDex is an Open Source Digital Audio CD Extractor.
Spyware Level: Low
-
- CDex's installer bundles it with spyware, and it will randomly suggest
- a spyware program to the user, with a chance to opt-out. Usually it
- attempts to bundle itself with the WebDiscover browser and one time I
- got it to try and offer me an antivirus program, but I wasn't able to
- reproduce this. The program was tested on Windows 7 32-bit with
- Microsoft Network Monitor 3.4 and Wireshark 2.6.2. The version of the
- program tested was 2.06.
- It did not make any connections to the internet
- that my tests were able to find. To test the program I ripped the
- audio files out of a CD with both network monitoring programs open.
-
+
CDex's installer bundles it with spyware, and it will randomly suggest a spyware program to the user, with a chance to opt-out. Usually it attempts to bundle itself with the WebDiscover browser and one time I got it to try and offer me an antivirus program, but I wasn't able to reproduce this. The program was tested on Windows 7 32-bit with Microsoft Network Monitor 3.4 and Wireshark 2.6.2. The version of the program tested was 2.06. It did not make any connections to the internet that my tests were able to find. To test the program I ripped the audio files out of a CD with both network monitoring programs open.
Bundling with spyware
-
- CDex attempts to bundle itself with the
- WebDiscover web browser.
- This is an Opt-out and not an Opt-in like it should be. This program
- is spyware, because according to its privacy policy[1], it collects information about its users.
-
-
+
CDex attempts to bundle itself with the WebDiscover web browser. This is an Opt-out and not an Opt-in like it should be. This program is spyware, because according to its privacy policy[1], it collects information about its users.
- Google Chrome is a web browser developed and distributed by Google.
-
-
Spyware Level: EXTREMELY HIGH
-
Google Chrome is not fully open source
-
- Large parts of Google Chrome are open source, however not all of them are, and this prevents people from
- checking the entire software for potential spyware features that are not disclosed.
-
-
Google Chrome tracks the user's search history
-
- Google Chrome contains several spyware features that reply on the user's search history being uploaded to Google
- servers. This is confirmed by the language in the privacy policy[1], clarifying the
- spyware features that rely on this.
-
-
- The first spyware feature is Google Chrome's integration with the "Google Account" spyware platform. " If you
- are signed in to a Google site or signed in to Chrome and Google is your default search engine, searches you
- perform using the address bar in Chrome are stored in your Google account. "
-
-
- Google Chrome also contains a spyware feature called "Search prediction service". It is explained that: "When
- you search using the address bar in Chrome, the characters you type (even if you haven’t hit "enter" yet) are
- sent to your default search engine. If Google is your default search engine, predictions are based on your own
- search history, topics related to what you’re typing and what other people are searching for."
-
-
- There is also the spyware feature "Navigation Assistance" which states that: "When you can’t connect to a web
- page, you can get suggestions for alternative pages similar to the one you're trying to reach. In order to
- offer you suggestions, Chrome sends Google the URL of the page you're trying to reach. "
-
-
Google Chrome profiles your computer usage
-
- In the privacy policy[1], Google details the extreme spyware feature it labels
- "Usage Statistics and Crash Reports". What it does, is it sends very detailed information about your hardware
- and computer usage, which confirms that it definitely contains the following spyware features:
-
-
A tracker that records mouse input over time
-
A tracker that profiles memory usage
-
-
- But, it can also be extrapolated from the vague language that Chrome could and probably does monitor what other
- programs you have open. Either way, it is an extreme amount of information being collected, since it can be used
- to recreate what the user is doing on their desktop at all times. Chrome clarifies that this information is
- being sent whenever a website is being "slow" or whenever Google Chrome crashes.
-
-
Google Chrome is integrated with Google Payments
-
- Google Payments is a spyware service that records your banking information and sends it to Google.[2] This service is integrated into the Google Chrome browser, which makes it another
- opt-in spyware feature in the software.
-
-
Google Chrome contains a keylogger
-
- This was confirmed in multiple places[3][4]. Basically,
- whenever you type into the search bar, that information is sent to Google. You can apparently turn it off by
- opting out of the "suggestion service".
-
-
Google Chrome records your voice
-
- Google Chrome is confirmed to be constantly listening to any open microphones on your computer. This can be
- found in this statement[5] in a privacy publication. "Voice & audio
- information may be collected. For example, if your child uses audio activation commands (e.g., "OK, Google" or
- touching the microphone icon), a recording of the following speech/audio, plus a few seconds before,
- will be stored to their account…" This feature is opt-in if you are using the "Google Accounts" spyware
- platform and specifically tell Google to build a profile of your child. It's unverified whether or not Google
- uploads information it listens too to its servers outside of this feature.
-
-
Google Chrome saves user passwords on Google Servers
-
- Any password stored in Google Chrome's "password management" feature is uploaded to Google if you sign into the
- "Google Accounts" spyware platform.
-
-
Google Chrome profiles users in other various ways
-
- According to the privacy policy[1], Google Chrome profiles what kinds of web forms
- you fill out, as well as what kind of language the content you consume is primarily in. Google Chrome also
- creates a unique identifier for each install you do. This unique identifier is sent to Google whenever you start
- the browser, so that Google can create a consistent user identity for you, undermining anonymity. Google also
- stores all of your settings on it's official servers when using the "Google Accounts" feature.
-
-
Google Chrome is self-updating software
-
- Google Chrome has an updater which is constantly running in the background and syncing with Google servers to
- check for updates. The updater will download and run unverified binaries from Google when it updates Google
- Chrome. It is impossible for an automatic updater service such as this to verify that the updates are not
- spyware and/or do not contain additional spyware features.
-