From article:

If you have the Brave Browser installed on your Windows devices, then you may also have Brave VPN services installed on the machine. Brave installs these services without user consent on Windows devices.

More reason to ditch the crypto bro browser.

    • funkajunk@lemm.eeEnglish
      0·
      9 months ago

      Not that I’m defending anybody but how is this touching your “network stack” any more than any other application?

      • t3rmit3@beehaw.org
        0·
        9 months ago

        because a VPN is both a new network interface, and it has the ability to change how your traffic routes. Most applications don’t do that.

        • funkajunk@lemm.eeEnglish
          0·
          9 months ago

          I see now that it was adding a wireguard interface, but without seeing the configuration being used, there’s no telling if they are routing anything more than the traffic from the browser.

          As an aside, are you serving applications from your workstation?

          • abhibeckert@beehaw.org
            2·
            8 months ago

            there’s no telling if they are routing anything more than the traffic from the browser

            Yeah that’s the problem “there’s no telling”. Messing with network settings is opening a can of worms and highly likely to cause problems one day.

          • t3rmit3@beehaw.org
            1·
            8 months ago

            Whether they route only the browser or traffic or not, that is messing with my traffic routing, and that’s dangerous. If they control the VPN exit node (but especially if they control that AND the browser), they can do almost anything they want with/ to your browser traffic.

            Not sure what me serving out applications from my endpoint device has to do with this, but yes, I sometimes do (LAN games, netcat listeners, python servers, etc).

  • Engywuck@lemm.ee
    8·
    9 months ago

    https://old.reddit.com/r/brave_browser/comments/17b0pxl/brave_appears_to_install_vpn_services_without/k5kwd97/

    https://github.com/brave/brave-browser/issues/33726

    And crypto are disabled by default.

    No, I wont’ ditch it. It’s the best browser out there, right now, since scummy/corrupt/hypocrite Mozilla (which, remember, is in bed with Google, Amazon and Facebook while criticizing them) decided that Firefox is just a side project for them and they’re deceiving people making them believe that donations fund FF development.

    Don’t even bother to reply. I’m not going to fuel this shitty thread any further.

    • WastedJobe@feddit.de
      68·
      9 months ago

      “In bed with”=takes their money to have their search engine and lets you change it in 30 seconds while being completely open source

      I don’t see the problem.

          • 30p87@feddit.de
            11·
            9 months ago

            0.980s by using ydotool key 29:1 20:1 20:0 29:0 -d 0 && ydotool type "about>preferences\n" -d 0 && sleep 0.26 && ydotool type "search engine\t" -d 0 && ydotool key 103:1 103:0 -d 20

      • flora_explora@beehaw.org
        2·
        9 months ago

        Tbf, changing the default search engine probably has the effect that the vast majority of users will stick with it. So, although it is pretty easy for you and me to change the search engine, it still promotes Google quite a lot and thus undermines the independent character of Firefox as a whole.

        • WastedJobe@feddit.de
          4·
          9 months ago

          Absolutely. I would prefer they didn’t have google as the default, but I’d rather have Firefox with good funding and google as default than firefox with very little funding.

      • ByteWelder@lemmy.ml
        5·
        9 months ago

        I applaud LibreWolf’s efforts, but the hard-coded timezone makes it unusable for me. Other than that, it’s a great browser. I used it several months until the timezone confusion got the best of me.

          • Baggins@beehaw.orgEnglish
            2·
            9 months ago

            Yes, what is the deal? I can’t say that I’ve noticed any issues. Am in UK if that makes a difference. And I usually run it through Proton VPN.

            • abhibeckert@beehaw.org
              2·
              8 months ago

              Two issues.

              First of all a lot of websites show times in your current timezone. Beehaw for example says you wrote your post “2 days ago”. Depending what timezone my browser is in, that could display 3 days or 1 day. When I hover over it, it shows the exact date/time in my timezone. Which is handy.

              Second it doesn’t actually achieve the intended goal. Even if you use a VPN chances are you’ve set it to give you a public IP address close to you to have good performance. And if your IP address is in Proton’s London datacentre but your timezone is UTC+0 when everyone else is UTC+1… well you stand out like a single black sheep in a flock of white ones and ad networks are absolutely fingerprinting you with that.

            • Aatube@kbin.social
              1·
              9 months ago

              While I’ve never used LibreWolf before (I use Waterfox), that probably does make a difference as the UK is UTC+0.

          • ByteWelder@lemmy.ml
            1·
            9 months ago

            If I recall correctly, it was meant as a measure against fingerprinting. It’s basically one less thing to uniquely define a user based on the info that the browser gives to a website. I’m not sure if it’s still like that, cause it’s been easily a year since I used LibreWolf.

    • Moonrise2473@feddit.it
      47·
      9 months ago

      It’s still a behavior like “we are the best software in the world, once we get admin permission we can do whatever we want without additional user consent, people appreciate it”.

      No. You must ask permission to install useless Windows services, even if they’re disabled.

    • Norgur@kbin.social
      44·
      9 months ago

      No one told you to ditch it. But can you fanboii a little less aggressively, please?