Live data from Hacker News

Brave, the false sensation of privacy

ebin.city

271–280 of 501 posts

Re: Brave, the false sensation of privacy

#271
post #246
post #209

Earlier quoted context omitted.

Third party untrusted binaries last I checked

You can build it yourself, but even with a midrange desktop it'll take you at least an hour to build. A laptop would probably take 2-3 at least.

Are you going to read the source to confirm nothing malicious was added?

Re: Brave, the false sensation of privacy

#272

Earlier quoted context omitted.

> Many seem to argue that "They'll pay to have ads removed", but that doesn't seem to hold true when services offers that exact option. I would pay for ad free Youtube, if it was an option. Even with Youtube Premium, included promotions continue to be shown

Well yeah, they don't stop someone advertising a product in the main content. If they did, then James Bond movies would be a lot shorter.

The ad-blockers also don’t block those, so I don’t think that was the point.

Re: Brave, the false sensation of privacy

#274

Earlier quoted context omitted.

KYC, AML, CYA, IANAL

KYC stands for "Know Your Customer" and it's a reference to laws that require businesses to have a clue who they're doing business with. It's not a legitimate response to the concern here. The concern is failure to provide adequate information about the consequences of your actions up front. They're going to benefit from the ads, and they won't necessarily have to pay for that benefit, because they didn't adequately…

It was just a funny comment. They absolutely let you know in the docs on and the site and in every interview the CEO does that it is a requirement to complete KYC to receive the funds. I don't know what to say, it's all there, in the docs. In the FAQ: https://support.brave.com/hc/en-us/articles/360032158891-Wha...

Re: Brave, the false sensation of privacy

#275

Earlier quoted context omitted.

Lots of people are pointing out that this isn't the case anymore , but the fact is that it used to work this way, and they only changed it after backlash. That was enough to turn me off of Brave forever.

Yeah, I too dislike it when companies respond positively in response to criticism. I prefer the orgs I interact with to be perfect and never make mistakes and when they do (but they don't because I only interact with perfect institutions) I prefer them to double-down instead of improve.

The point is that Brave can't be trusted by default. It's nice that they roll back dark patterns when they're caught by people like Tom Scott, I guess?

Re: Brave, the false sensation of privacy

#276

Earlier quoted context omitted.

Lots of people are pointing out that this isn't the case anymore , but the fact is that it used to work this way, and they only changed it after backlash. That was enough to turn me off of Brave forever.

Yeah, I too dislike it when companies respond positively in response to criticism. I prefer the orgs I interact with to be perfect and never make mistakes and when they do (but they don't because I only interact with perfect institutions) I prefer them to double-down instead of improve.

When somebody shows you who they are, believe them.

Re: Brave, the false sensation of privacy

#277
post #246

Earlier quoted context omitted.

You can build it yourself, but even with a midrange desktop it'll take you at least an hour to build. A laptop would probably take 2-3 at least.

Are you going to read the source to confirm nothing malicious was added?

There's around 4.9k lines of python code and 15.9k lines of patches. That doesn't seem that hard to scrutinize. From a threat model point of view you should be more worried about supply chain attacks from all the third party programs/libraries you have installed on your computer.

Re: Brave, the false sensation of privacy

#278
post #181

In 2001 or so I considered entering into an encrypted email correspondence with my brother, for fun. I quickly gave up on the idea because I realized that I didn’t trust that my computer or my brother’s computer didn’t already have spyware of some kind, I didn’t trust the integrity of any encryption/decryption tools that existed, didn’t trust myself not to lose the passwords or leave them lying around, and didn’t tru…

Do you lock the doors on your house? Why bother? Someone could break a window? Security is about identifying and mitigating threat models. For example, if you're concerned with mass surveillance an encrypted messenger will stop that. Just because something doesn't protect against CIA 0days doesn't make it worthless.

A house is almost nothing like a computer along any dimension that the metaphor could possibly make sense.

Besides, unless you've built your own encrypted messenger, you're still putting trust in several agents that you have no reason to trust.

Re: Brave, the false sensation of privacy

#279
Browsers are responsible for a very large chunk of our ability to interact with the world. In that sense I greatly appreciate the article trying to illuminate some areas of Brave which are not necessarily obvious upfront.

I am absolutely inclined to believe that Brave is not as private as it appears.

What also comes to mind is that Brave's founder Brandon Eich is a homophobe who donated to ban gay marriage in California (Prop 8, https://slate.com/technology/2014/04/brendan-eich-why-mozill...). That alone is sufficient to doubt the integrity of his organization.

Re: Brave, the false sensation of privacy

#280

I would love to use something other than brave but Firefox is shit and arguably getting worse over time. They have been sacrificing ux for revenue streams for a while now. Also extension management is a joke, especially if you have more than 5 extensions. I have like 30 chrome extensions... Most of which get used at least weekly. Many of them do things like prevent sites from blocking text select or copy paste, thing…

> I would love to use something other than brave but Firefox is shit and arguably getting worse over time.

As someone who's used Chrome exclusively for the good part of a decade and has been using Firefox again for the last several months, I don't get this criticism at all. It seems…fine? In any case it's radically better than it was when I initially switched to Chrome from Firefox.

Post reply on HN