diff --git a/LICENSE.txt b/LICENSE.txt
new file mode 100644
index 0000000..37426bc
--- /dev/null
+++ b/LICENSE.txt
@@ -0,0 +1,119 @@
+Creative Commons Legal Code
+
+CC0 1.0 Universal CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES
+NOT PROVIDE LEGAL SERVICES. DISTRIBUTION OF THIS DOCUMENT DOES NOT CREATE
+AN ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS INFORMATION
+ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES REGARDING THE USE
+OF THIS DOCUMENT OR THE INFORMATION OR WORKS PROVIDED HEREUNDER, AND DISCLAIMS
+LIABILITY FOR DAMAGES RESULTING FROM THE USE OF THIS DOCUMENT OR THE INFORMATION
+OR WORKS PROVIDED HEREUNDER.
+
+Statement of Purpose
+
+The laws of most jurisdictions throughout the world automatically confer exclusive
+Copyright and Related Rights (defined below) upon the creator and subsequent
+owner(s) (each and all, an "owner") of an original work of authorship and/or
+a database (each, a "Work").
+
+Certain owners wish to permanently relinquish those rights to a Work for the
+purpose of contributing to a commons of creative, cultural and scientific
+works ("Commons") that the public can reliably and without fear of later claims
+of infringement build upon, modify, incorporate in other works, reuse and
+redistribute as freely as possible in any form whatsoever and for any purposes,
+including without limitation commercial purposes. These owners may contribute
+to the Commons to promote the ideal of a free culture and the further production
+of creative, cultural and scientific works, or to gain reputation or greater
+distribution for their Work in part through the use and efforts of others.
+
+For these and/or other purposes and motivations, and without any expectation
+of additional consideration or compensation, the person associating CC0 with
+a Work (the "Affirmer"), to the extent that he or she is an owner of Copyright
+and Related Rights in the Work, voluntarily elects to apply CC0 to the Work
+and publicly distribute the Work under its terms, with knowledge of his or
+her Copyright and Related Rights in the Work and the meaning and intended
+legal effect of CC0 on those rights.
+
+1. Copyright and Related Rights. A Work made available under CC0 may be protected
+by copyright and related or neighboring rights ("Copyright and Related Rights").
+Copyright and Related Rights include, but are not limited to, the following:
+
+i. the right to reproduce, adapt, distribute, perform, display, communicate,
+and translate a Work;
+
+ ii. moral rights retained by the original author(s) and/or performer(s);
+
+iii. publicity and privacy rights pertaining to a person's image or likeness
+depicted in a Work;
+
+iv. rights protecting against unfair competition in regards to a Work, subject
+to the limitations in paragraph 4(a), below;
+
+v. rights protecting the extraction, dissemination, use and reuse of data
+in a Work;
+
+vi. database rights (such as those arising under Directive 96/9/EC of the
+European Parliament and of the Council of 11 March 1996 on the legal protection
+of databases, and under any national implementation thereof, including any
+amended or successor version of such directive); and
+
+vii. other similar, equivalent or corresponding rights throughout the world
+based on applicable law or treaty, and any national implementations thereof.
+
+2. Waiver. To the greatest extent permitted by, but not in contravention of,
+applicable law, Affirmer hereby overtly, fully, permanently, irrevocably and
+unconditionally waives, abandons, and surrenders all of Affirmer's Copyright
+and Related Rights and associated claims and causes of action, whether now
+known or unknown (including existing as well as future claims and causes of
+action), in the Work (i) in all territories worldwide, (ii) for the maximum
+duration provided by applicable law or treaty (including future time extensions),
+(iii) in any current or future medium and for any number of copies, and (iv)
+for any purpose whatsoever, including without limitation commercial, advertising
+or promotional purposes (the "Waiver"). Affirmer makes the Waiver for the
+benefit of each member of the public at large and to the detriment of Affirmer's
+heirs and successors, fully intending that such Waiver shall not be subject
+to revocation, rescission, cancellation, termination, or any other legal or
+equitable action to disrupt the quiet enjoyment of the Work by the public
+as contemplated by Affirmer's express Statement of Purpose.
+
+3. Public License Fallback. Should any part of the Waiver for any reason be
+judged legally invalid or ineffective under applicable law, then the Waiver
+shall be preserved to the maximum extent permitted taking into account Affirmer's
+express Statement of Purpose. In addition, to the extent the Waiver is so
+judged Affirmer hereby grants to each affected person a royalty-free, non
+transferable, non sublicensable, non exclusive, irrevocable and unconditional
+license to exercise Affirmer's Copyright and Related Rights in the Work (i)
+in all territories worldwide, (ii) for the maximum duration provided by applicable
+law or treaty (including future time extensions), (iii) in any current or
+future medium and for any number of copies, and (iv) for any purpose whatsoever,
+including without limitation commercial, advertising or promotional purposes
+(the "License"). The License shall be deemed effective as of the date CC0
+was applied by Affirmer to the Work. Should any part of the License for any
+reason be judged legally invalid or ineffective under applicable law, such
+partial invalidity or ineffectiveness shall not invalidate the remainder of
+the License, and in such case Affirmer hereby affirms that he or she will
+not (i) exercise any of his or her remaining Copyright and Related Rights
+in the Work or (ii) assert any associated claims and causes of action with
+respect to the Work, in either case contrary to Affirmer's express Statement
+of Purpose.
+
+ 4. Limitations and Disclaimers.
+
+a. No trademark or patent rights held by Affirmer are waived, abandoned, surrendered,
+licensed or otherwise affected by this document.
+
+b. Affirmer offers the Work as-is and makes no representations or warranties
+of any kind concerning the Work, express, implied, statutory or otherwise,
+including without limitation warranties of title, merchantability, fitness
+for a particular purpose, non infringement, or the absence of latent or other
+defects, accuracy, or the present or absence of errors, whether or not discoverable,
+all to the greatest extent permissible under applicable law.
+
+c. Affirmer disclaims responsibility for clearing rights of other persons
+that may apply to the Work or any use thereof, including without limitation
+any person's Copyright and Related Rights in the Work. Further, Affirmer disclaims
+responsibility for obtaining any necessary consents, permissions or other
+rights required for any use of the Work.
+
+d. Affirmer understands and acknowledges that Creative Commons is not a party
+to this document and has no duty or obligation with respect to this CC0 or
+use of the Work.
\ No newline at end of file
diff --git a/articles/1password.html b/articles/1password.html
index 1143d44..b496eef 100644
--- a/articles/1password.html
+++ b/articles/1password.html
@@ -41,16 +41,15 @@
This article was last edited on 6/16/2018
- If you want to edit this article, or contribute your own article(s),
- contact us on XMPP over in spyware@conference.nuegia.net, or visit us
+ If you want to edit this article, or contribute your own article(s), visit us
at the git repo on
- Codeberg.
+ Codeberg.
All contributions must be licensed under the CC0 license to be
accepted.
-
+
diff --git a/articles/amd.html b/articles/amd.html
index 7081db4..94bfe39 100644
--- a/articles/amd.html
+++ b/articles/amd.html
@@ -125,16 +125,15 @@
This article was last edited on 1/10/2019
- If you want to edit this article, or contribute your own article(s),
- contact us on XMPP over in spyware@conference.nuegia.net, or visit us
+ If you want to edit this article, or contribute your own article(s), visit us
at the git repo on
- Codeberg.
+ Codeberg.
All contributions must be licensed under the CC0 license to be
accepted.
-
diff --git a/articles/bing.html b/articles/bing.html
index 922d8a5..144c1f5 100644
--- a/articles/bing.html
+++ b/articles/bing.html
@@ -152,16 +152,15 @@
This article was last edited on 5/30/2018
- If you want to edit this article, or contribute your own article(s),
- contact us on XMPP over in spyware@conference.nuegia.net, or visit us
+ If you want to edit this article, or contribute your own article(s), visit us
at the git repo on
- Codeberg.
+ Codeberg.
All contributions must be licensed under the CC0 license to be
accepted.
- Note: This article is outdated. I will try to update it soon.
-
-
-
- Brave Browser is a Chromium fork with many interesting features not
- found elsewhere, such as built-in Adblock and other extensions,
- fingerprinting protection, cleaner Preferences menu than other Chrome
- forks, and the (opt-in) ability to automatically support (pay) the
- websites you visit. The developers describe it as
- "A browser with your interests at heart."[1] With the built-in privacy
- protections, some would seem to agree with that. Let's see how it
- stacks up when we take everything into account.
-
-
Spyware Level: High
-
- Auto-updates that can be turned off only by hacky workarounds.
- Google as default search engine.
- Analytics on Brave's home page. Two other requests made at each start
- of Brave. Whitelisting spyware from Facebook and Twitter.[5]
- Has some decent privacy protections built in, but uMatrix is still
- better. Some privacy features are there by default, but, it's still
- trying to work with advertisers (same as Mozilla did with their
- Sponsored Tiles). Despite claiming to be
- "A browser with your interests at heart."[1], it has Google as default
- search engine, as well as shitty forced updates. Anyway, despite the
- privacy protections, you should stay away from this browser — it seems
- to have a "mission" to switch the internet to its version of
- "user-respecting" ads, (we know how that turned out for Mozilla), and
- that's slimy and suspicious. Beyond that it has repeatedly shown
- itself to be dishonest and disingenuous about what it's mission and
- goals and operations are.
-
-
Whitelisting spyware from Facebook and Twitter
-
- On its website, Brave claims that
- "Brave fights malware and prevents tracking, keeping your
- information safe and secure. It’s our top priority."[6]. Yet despite this claim, Brave actually
- disables its tracking protections for
- Facebook and Twitter's spyware scripts that allow them to track people
- across the web.[5] Brave's spyware
- protections, and any claims that it makes to work in the interests of
- its users,
- cannot be taken seriously. Brave is
- actively working
- against its users while lying to them
- about supposed privacy protections that it offers. This problem
- becomes even more serious when you take into account Brave's response
- to this situation:
-
-
-
- "Loading a script from an edge-cache does not track a user without
- third-party cookies or equivalent browser-local storage, which Brave
- always blocks and always will block. In other words, sending
- requests and receiving responses without cookies or other means of
- identifying users does not necessarily create a tracking threat."
-
-
- [7]
-
-
-
- This statement is just completely wrong.
- Just because a website isn't able to store cookies, does not mean
- that it cannot uniquely identify you. Executing JavaScript spyware
- from Facebook and Twitter is
-
- more than enough.
-
- Blocking cookies is not going to stop them from tracking you. This
- isn't even information that is difficult to verify. There are many
- websites that you can visit right now, to see just how much
- information a JavaScript program designed to track you can get.
-
- Brave will check for updates every time you run it, and you CANNOT
- turn it off (except through fiddling with DNS and such) ! What is the
- devs' answer? From their GitHub page
- [2]:
-
-
-
-
- "We don't plan on adding in UI to disable updates, but users can
- easily adjust environment variables if they really want to put
- themselves at risk."
-
-
-
-
and
-
-
-
- "i feel that being able to figure out how to do this is a
- sufficiently high bar for users who want to turn off autoupdating
- (to prove they know what they're doing and understand the security
- implications)"
-
-
-
-
- So according to the devs, you have to hunt down random internet
- comments to be able to disable auto-updating. Brave will also update
- what looks like the list of its "partners" every time you run it.
- Extensions are also updated often.
-
-
-
-
Anti-privacy search engine by default
-
- Google
- is the default search engine of Brave, and the issues with it are well
- known and would take a book to describe them all.
-
-
-
Brave's start page contains analytics
-
- Brave will connect to its home page, https://brave.com, automatically
- on the first run of Brave, and that page contains Piwik's analytics
- scripts. This is the full request:
-
- It will also make a connection to Google to download some fonts. You
- can disable these on subsequent runs by changing the start page.
-
-
Crash reports
-
- Enabled by default, but can be disabled from the preferences menu.
-
-
Other requests
-
- Brave will make a connection to this site every time it is started up:
-
- It probably has something to do with their project of working with
- advertisers to provide more relevant targeted ads, which sounds pretty
- disgusting, but can be turned off ("Notify me about token
- promotions"). You can read more about it here
- [3]
- .It will also make this request which downloads the rulesets for HTTPS
- Everywhere:
-
-
-
Brave's privacy protections
-
- Brave Browser also contains in-built privacy protections such as HTTPS
- Everywhere, AdBlock, cookie blocking, script blocking, and
- fingerprinting protections — that are configurable site by site. This
- is commendable of course, but in the end, uMatrix outclasses them.
- Trackers, for example, easily avoid pure AdBlock (so you will be
- tracked by Facebook and such), and binary script blocking breaks
- sites. Nice effort on Brave's part though, and the fingerprinting
- protection I don't think is found in any other browser (but I didn't
- confirm if it actually works).
-
Brave Browser is a Chromium fork with many interesting features not found elsewhere, such as built-in Adblock and other extensions, fingerprinting protection, a cleaner Preferences menu compared to other Chrome forks, and the (opt-in) ability to automatically support (pay) the websites you visit. The developers describe it as "A browser with your interests at heart."[1] with the built-in privacy protections.
+
Spyware Level: High
+
Brave is self updating software, uses Google as the default search engine, has built-in telemetry, and even has an opt-out rss-like news feed similar to Firefox Pocket. These shouldn't be the things that come to mind if someone were to imagine a privacy oriented browser.
+
Whitelisting spyware from Facebook and Twitter
+
On its website, Brave claims that "Brave fights malware and prevents tracking, keeping your information safe and secure. It’s our top priority."[6]. Yet despite this claim, Brave actually disables its tracking protections for Facebook and Twitter's scripts that allow them to track people across the web.[5] Brave has been actively downplaying the role that JavaScript plays when tracking someone.
+
+
"Loading a script from an edge-cache does not track a user without third-party cookies or equivalent browser-local storage, which Brave always blocks and always will block. In other words, sending requests and receiving responses without cookies or other means of identifying users does not necessarily create a tracking threat."[7]
+
+
This couldn't be more far from the truth. Just because a website isn't able to store cookies, doesn't mean it can't uniquely identify you. Using JavaScript from Facebook and Twitter would be more than enough to track you and blocking cookies alone isn't going to stop that. Just as a quick point of reference to what information JavaScript can scrape, you might want to visit this website.
+
They later on added an option to the extension to disable all of the JavaScript, but this new feature seems to be nothing more than the JavaScript switch found in vanilla Chromium. They recently added an option here to block some of the scripts from Facebook, Twitter, and LinkedIn after receiving pushback as a result of the controversy.
+
A quick note on the whitelisting trackers: This specific point on whitelisting trackers isn't making the case of Brave being spyware as much as it's making the case of Brave's privacy features being snake oil.
+
Auto-updates
+
Brave will check for updates every time you run it, and you can't turn it off from the browser. Athough, it's on Brave's low priority list to add an option to do so[2]. The reason why it's low priority would be because it's been over a year and there hasn't been an implementation of it yet.
+
A special note is that on most (all?) GNU/Linux distributions, the automatic updates are only for the extensions.
+
Anti-privacy search engine by default
+
Google is the default search engine of Brave. For a browser that claims to be privacy oriented, this is a red flag. They at least make it easy for you to change the default search engine on the first run.
+
Brave has built-in telemetry
+
While running, Brave will make lots of requests to the domain p3a.brave.com as telemetry. They claim they store the collected data for several days[8]. Telemetry should be the last thing to come to mind if someone were to imagine a privacy oriented browser. This feature is an opt-out that can be disabled. This opt-out can be disabled here.
+
Brave Today
+
Brave now has new feature similar to Firefox Pocket called Brave Today. If you don't know what Firefox Pocket is, it's basically an rss-like news feed that's shown in every blank tab. This feature Brave has is sadly an opt-out rather than an opt-in and sends lots of requests to Brave's servers. It can't seem to be disabled it in and of itself, but setting the tabs to blank seems to stop the requests.
+
SafeBrowsing
+
Brave uses SafeBrowsing. It's a feature that tries to "protect" the user from potentially unsafe websites and extensions. However, it sends requests to fetch the information required. Judging by some of the information in the Miscellaneous requests worth noting section, it wouldn't be too far-fetched of Brave to use Google's SafeBrowsing rather than their own implementation. This opt-out can be disabled here.
+
Brave Rewards
+
Brave has a rewards program. You can find more information about it here[3]. At first glance it looks like the rewards program is an opt-in, but the browser makes requests to these domains regardless if you sign up or not:
+
+
rewards.brave.com
+
api.rewards.brave.com
+
grant.rewards.brave.com
+
+
Miscellaneous requests worth noting
+
Brave on first run sends a request to fetch the library used for checking spelling errors:
+
+
Brave on first run sends a request to variations.brave.com. A guess would be that this request has to do with the crypto aspect of the rewards program. It could also be some way of verifying the list of affiliates. The later is unlikely because the request that fetches the list of affiliates is constant to whether or not the seed request is made:
+
+
Right after the request to variations.brave.com is made, Brave fetches the list of affiliates through laptop-updates.brave.com. As stated before, the previous request doesn't seem to be a requirement for this request.
+
+
Brave makes a request to static1.brave.com every once and a while, which looks like it's used to fetch plugin information[4]? When the url was placed into the browser, it was directed to Google's error 404 page[9]. This seems kind of unsettling that one of Brave's domains would do that:
+
+
+
A quick curl --head static1.brave.com shows that Brave uses Google's gstatic, which uses Cloudflare as well:
+
+
On the first run, Brave fetches five extensions from brave-core-ext.s3.brave.com and tries to install them:
+
+ This article was created on 5/7/2018
+ This article was last edited on 12/30/2020
+
+
If you want to contribute to this website, you can always make a pull request.
+
All contributions must be licensed under the CC0 license to be accepted.
+
+
+
+
+
\ No newline at end of file
diff --git a/articles/browsers.html b/articles/browsers.html
index 7ee5138..1723fa6 100644
--- a/articles/browsers.html
+++ b/articles/browsers.html
@@ -177,7 +177,9 @@
Brave
@@ -283,16 +285,15 @@
This article was last edited on 2/20/2019
- If you want to edit this article, or contribute your own article(s),
- contact us on XMPP over in spyware@conference.nuegia.net, or visit us
+ If you want to edit this article, or contribute your own article(s), visit us
at the git repo on
- Codeberg.
+ Codeberg.
All contributions must be licensed under the CC0 license to be
accepted.
-
+
diff --git a/articles/ccleaner.html b/articles/ccleaner.html
index 5525350..188a649 100644
--- a/articles/ccleaner.html
+++ b/articles/ccleaner.html
@@ -158,16 +158,15 @@
This article was last edited on 8/21/2018
- If you want to edit this article, or contribute your own article(s),
- contact us on XMPP over in spyware@conference.nuegia.net, or visit us
+ If you want to edit this article, or contribute your own article(s), visit us
at the git repo on
- Codeberg.
+ Codeberg.
All contributions must be licensed under the CC0 license to be
accepted.
-
diff --git a/articles/cdex.html b/articles/cdex.html
index f5f5006..3f9b326 100644
--- a/articles/cdex.html
+++ b/articles/cdex.html
@@ -66,16 +66,15 @@
This article was last edited on 7/29/2018
- If you want to edit this article, or contribute your own article(s),
- contact us on XMPP over in spyware@conference.nuegia.net, or visit us
+ If you want to edit this article, or contribute your own article(s), visit us
at the git repo on
- Codeberg.
+ Codeberg.
All contributions must be licensed under the CC0 license to be
accepted.
Google Chrome is a web browser developed and distributed by Google.
@@ -124,9 +128,9 @@
This article was last edited on 12/12/2018
-
If you want to edit this article, or contribute your own article(s), contact us on XMPP over inspyware@conference.nuegia.net, or visit us at the git repo on Codeberg.
+
If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.
All contributions must be licensed under the CC0 license to be accepted.