I read an article a while ago that put pretty convincing arguments forward to not use Brave. You should be able to find it if you search on Lemmy
this post was submitted on 28 Sep 2023
20 points (100.0% liked)
Privacy Guides
17002 readers
2 users here now
In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
- We prefer posting about open-source software whenever possible.
- This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
- No soliciting engagement: Don't ask for upvotes, follows, etc.
- Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
- Be civil, no violence, hate speech. Assume people here are posting in good faith.
- Don't repost topics which have already been covered here.
- News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
- Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
- No help vampires: This is not a tech support subreddit, don't abuse our community's willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
- No misinformation: Extraordinary claims must be matched with evidence.
- Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
- General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.
Additional Resources:
- EFF: Surveillance Self-Defense
- Consumer Reports Security Planner
- Jonah Aragon (YouTube)
- r/Privacy
- Big Ass Data Broker Opt-Out List
founded 2 years ago
MODERATORS
This one I think:
I dont think I can take that article seriously when they recommend Chromium with uBlock as an alternative 💀
I mean, agreed, but Chromium and Chrome are different. Just in case you thought they are the same, wasn't exactly clear to me. But I also might remember wrong, in my memory Chromium is the base for Chrome and has a lot less Google stuff baked in.
I'm aware that they're different. Chromium is a much better option that Chrome, but not a good option overall for privacy. If you like Chromium, try UnGoogled Chromium!
What is wrong with Chromium with uBlock origin? I was a Brave user then after all their controversies I moved on to Chromium. I use FF primarily though, only Chromium for websites that have issues
Chromium bundles a lot of google telemetry into it, even though it is the open source base of Chrome. Ungoogled Chromium is a recommendation that's actually private. I also only use Chromium for websites that have issues.
I have tried Ungoogled Chromium before. While it's undeniably better in security and privacy, there were also many things that are not so convenient such as installing extensions, streaming with widevine DRM etc. For a program that serves the sole purpose of filling the compatibility gap, the fact that it doesn't "just works" makes it less optimal than vanilla Chromium for me
"Privacy" browser. lol. lmao even.
I'm not ruling out user error yet. 🫠
Use wireshark?
Its encrypted traffic, just getting a bunch of bytes. I don't see the server in the brave git repo.
Idk, something in there is sending data over what looks like a web socket.
Install mitmproxy and set the proxy settings to mitm. Maybe it will work.
I'd uninstall Brave if you care about privacy. Also check out the creator...
Could it be a connectivity check for captive portals?
What does that mean? Still, Edge doesn't seem to do this.
It seem that's a cloudflare load balancer IP so it doesn't really give any clues as to where the data is going.
Yeah, not sure. I see a post on reddit about Firefox hitting a similar host, but not sure it's related.
Does anyone else see this?
Using a privte tab doesn't send anything out when idle.
It could be a notification for a webpage? I think it has to do websockets for that, but I’m not 100% sure
I'll try clearing data, maybe your on the right track.
maybe you have opt-out logs enabled? try to disable them 😃
Do you know where this setting is? I'm not seeing it
it is in privacy and security section in settings. allow analytics, PING and send everyday data.
Yes, this is disabled.
weird situation D:
Brave Homepage? Sync disabled? Update check?
Oh i forgot, when in the private window, there is no traffic when sitting at the new tab page.
This is sitting on the new tab page. No news or any widgets. Sync is never enabled. I though about update check, but that's really offten to keep checking.
I didn't get to try out other suggestions here yet, will on Monday when I'm back at the computer.
Try removing bitwarden and do the same test. Ibet bitwarden is checking for updates that it needs to sync.
OP says it is trying to contact some aws server. Bitwarden afaik does not use aws. Brave probably is.
Apologies...I misread that
I did this, no change.
You can likely inspect the traffic if you use Wireshark.
I did, but it looked like https traffic as it was labeled as this and the data was just bytes