this post was submitted on 10 Sep 2023
96 points (84.3% liked)

Privacy

29784 readers
692 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago
MODERATORS
 

https://privacytests.org rate Brave as the best browser.

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 102 points 9 months ago (1 children)

What hasn't been said as explicitly yet: It being Chromium-based means there's tons of implementation details that are bad, which will not be listed in any such comparison table.

For example, the Battery Status web standard was being abused, so Mozilla removed their implementation: https://www.bleepingcomputer.com/news/software/battery-status-api-being-removed-from-firefox-due-to-privacy-concerns/
Chromium-based browsers continue to be standards-compliant in this regard.

And this is still quite a high-level decision. As a software engineer, I can attest that we make tiny design decisions every single day. I'd much rather have those design decisions made under the helm of a non-profit, with privacy as one of their explicit goals, than under an ad corporation.

And Brave shipping that ad corp implementation with just a few superficial patches + privacy-extensions is what us experts call: Lipstick on a pig.

load more comments (1 replies)
[–] [email protected] 61 points 9 months ago* (last edited 9 months ago) (1 children)

The man who is CEO is a shitter who gave us the blessing/curse that is JavaScript

They're relying on a cryptocurrency for growth

They use Chromium/Blink

[–] [email protected] 7 points 9 months ago (1 children)

Its the same guy who made firefox though?

load more comments (1 replies)
[–] [email protected] 60 points 9 months ago (28 children)

I don't run Brave because Brave runs a crypto scam right in the browser.

I don't care that you can disable it, I don't care that it might be the only way they found to make a buck out of free software: anyone who dabbles in crypto is instantly sketchy. And I don't want to run a piece of software as critical as a browser made by someone who's not 100% trustworthy.

[–] [email protected] 6 points 9 months ago

I don't care that you can disable it

It's opt-in.

load more comments (27 replies)
[–] [email protected] 58 points 9 months ago (2 children)

brave owns that domain, I believe. Of course they are going to rate their browser te best

[–] [email protected] 32 points 9 months ago

Not exactly, the guy who runs it became a brave employee shortly after starting it. but they claim to continue to run it independently.

[–] [email protected] 10 points 9 months ago

They were not rated that well in the beginning. Brave contacted the guy who runs the website and asked about the tests he was running, then patched their browser accordingly until it passed all the tests it does today.

[–] [email protected] 46 points 9 months ago (2 children)

That's just browsers with default settings. Firefox doesn't have a built in ad block, so it will always perform worse in that test. I guess FF + ublock origin + hardened settings (such as arkenfox) would perform like brave, if not better. For example, if you check android browsers, you see that Mull (a hardened fork of Firefox) performs great, even without ublock (that you can install as extension anyway).

load more comments (2 replies)
[–] [email protected] 46 points 9 months ago (1 children)

Judging by a default browser is also really misleading. Firefox is by far the most private with extensions, no competition.

[–] [email protected] 7 points 9 months ago (3 children)

What extensions would you recommend?

[–] [email protected] 21 points 9 months ago

This is just my personal list

  • Ublock origin in advanced mode to block js like matrix did (or in basic mode on mobile/if you don't want to waste time fixing broke websites)
  • Decentraleyes to avoid loading libraries
  • Cookies autodelete to you guess it
  • Consent O Matic to auto consent gdpr banners
  • Link cleaner to clean copied urls from tracking queries
  • Redirector to redirect famous websites to their alternative front-ends (YouTube to piped etc)
[–] [email protected] 12 points 9 months ago (3 children)

I go pretty hard core while making sure it "just works". People will mention LibreWolf, but the fingerprint resistance causes too much breakage for me. I install uBlock Origin no matter what, enable every single filter except the language lists. I install Dark Reader and set it to a timed schedule which is comfy for me.

Then I install NoScript then enable "Temporary set top level sites to trusted" and enable media under the trusted tab. This fixed majority of the breakage, but you sometimes need to tweak it. You can just not use NoScript if it's too much of a hassle, uBlock Origin does basically everything you need anyways.

Also of course if you're using stock Firefox, make sure to turn off analytics and telemetry in the settings, go to about:config and set pocket.enabled (or something like that, idr) to false. Then I set my default search to duckduckgo.

load more comments (3 replies)
load more comments (1 replies)
[–] [email protected] 37 points 9 months ago (4 children)

From the JDLR dept… notice how brave is listed first, and passes every test (except a very few)

This report just looks biased. Even if it is totally legitimate, and many users have pointed out how it isn’t , it looks biased.

It looks like every sales pitch for a product where they list everything their product does and how it’s better than the other things.

I vote librewolf

[–] [email protected] 7 points 9 months ago

And under misc. tests, neither Mullvad nor Tor are identified as being Tor enabled? Say what now?

[–] [email protected] 4 points 9 months ago (2 children)

Please forgive me, I'm going to keep asking this everywhere I can until hopefully get an answer.

I love librewolf and I want to use it, but I can't get it to render the symbols that some websites use to make their UI work. I've tried downloading fonts but they're all mapped to private use area. I think they need to be downloaded on a per website basis but librewolf seems to categorically refuse.

I really want to stop using brave and I honestly don't want to figure out arkenfox.

[–] [email protected] 6 points 9 months ago

Since LibreWolf is libre software, it’s likely that a user has freedom to tweak this maybe via about:config. You just need to ask this directly in the LibreWolf community.

I think I know what you’re talking about, though. Perhaps CSS @font-face is forbidden, because many sites use Google fonts, which allows them to track you.

If Tor Browser is acceptable, give it a try. While TB too has very strict font restrictions to avoid finger-printing (so that a remote site may not know which fonts your system already has), web fonts are allowed by default. It’s relatively harder to distinguish/track individual Tor users, since TB hides your real IP & by default cookies are per session only.

LibreWolf shows your real IP, so it’s understandable and reasonable that it wants to be more careful about fonts. Still a user should be given freedom to do whatever, at their own risk. That’s what free software is all about, after all. Just a thought…

load more comments (1 replies)
load more comments (2 replies)
[–] [email protected] 37 points 9 months ago (2 children)

The product isn't all that bad, but the company behind it have proven they're not trustworthy many times over.

load more comments (2 replies)
[–] [email protected] 28 points 9 months ago (4 children)

That website is run by an employee of Brave, who rates the privacy of browsers based on their default settings (which Brave tends to perform best in). If browsers prompt the user to select their privacy settings on a first run, he scores them based as if the user had selected the worst privacy options.

If he actually spent a few minutes setting up each browser, as is always recommended within the privacy community, that table will look a lot different. But then Brave wouldn't stand out as much...

load more comments (4 replies)
[–] [email protected] 27 points 9 months ago

Chromium, Crypto, Trash UI

[–] [email protected] 26 points 9 months ago* (last edited 9 months ago) (1 children)

For further explanation of any point, please hit me up :)

  • It is Chromium based
  • It has used dubious methods in the past (replacing links with affiliate links, the whole ad/crypto thing, ...)
  • Brave's business model relies on ads (I think)
  • [This is a weak point, but at least in the privacy community, Brave isn't super popular. It feels more geared towards the "hyped crypto early adopters". ^[1]^ It might be "fine" for someone switching from Chrome (which is always a good thing) but going all the way would be a modded Firefox.]

TL;DR For most provacy concious Brave users, Brave is a step in their journey towards more privacy, and not the final destination.

[1] The "dumb AF tech youtubers" you mentioned in another post are typically the Brave hype crowd. This is not meant to discredit Brave; it's just that a share of their users are this way.

[–] [email protected] 10 points 9 months ago

All good points but I'd like to point out that the first one is likely the biggest reason not to use it - it's based on Chromium and continues to give Google/Chrome the browser market share to dictate the direction of the web.

[–] [email protected] 25 points 9 months ago

Have a gander at the people behind Brave Software. They're all cut from the same silicon wafer as everyone else in the Silicon Valley executive biome. And the (lack of) readiness of the information about who is behind Brave is another tell in itself.

[–] [email protected] 17 points 9 months ago

it is not even true that "privacytests.org rate it as the best", if you look close enough, librewolf is best rated, which is an amazing browser BTW.

[–] [email protected] 14 points 9 months ago
[–] [email protected] 11 points 9 months ago

So much with anything privacy comes down to trust. Any piece of software's technical ability to keep you private is of course important but when it comes to a very large (in terms of code and use) piece of software, being able to trust the motivations and intent of the people behind it is also very important.

It's now reached the point that I personally don't feel I can trust the person leading the company, or the intent behind the software(s) the company makes.

Brendan Eich is a homophobe and an antivaxxer. It's hard to trust in the common sense of a man who thinks in these ways.

Brave has been caught inserting affiliate links and ads that track and just recently of selling other people's data. Any one of these things, taken in isolation is bad enough but this is now a pretty much established pattern of very questionable behaviour.

I also forsee a time when the browser is going to have to make some concessions to it's Chromium base. I know they've said the change from Manifest v2 to 3 won't affect ad blocking as their Shield won't be an extension but built in and that they'll also carry on supporting v2 but the issue goes beyond merely adblocking and they've been unclear on exactly how and for how long they'll support v2. As long as they're Chromium based browser, they are dependent on Chromium and the whims of Google developers. It's hard to see a good future for Brave.

[–] [email protected] 11 points 9 months ago

There is a summary linked here also: https://lemmy.ml/post/4077614

[–] [email protected] 7 points 9 months ago* (last edited 9 months ago)

The owner being a homophobe would be reason enough for me even without the crypto/affiliate link scandals

[–] [email protected] 6 points 9 months ago

Librewolf and Mullvad does the same thing Brave does, and doesn't contribute to Google's monopoly on the web by using chromium.

[–] [email protected] 6 points 9 months ago (4 children)

I don't trust browsers that feel the need to advertise themselves

[–] [email protected] 4 points 9 months ago

That's why I use curl and less

load more comments (3 replies)
[–] [email protected] 5 points 9 months ago

Unless someone wants to disagree with me

All the code is opensource and no one has ever raised a privacy alarm in a merged pull request. There's nothing to fear

[–] [email protected] 4 points 9 months ago

The author of the site works for Brave. The results need to be taken with a grain of salt. Is is more private than Chrome? Absolutely. Is it the best browser for privacy? Ehhh...

[–] [email protected] 3 points 9 months ago* (last edited 9 months ago) (3 children)

People don't like the creator of Brave because he's supposedly anti-trans. He donated to some anti-trans political group iirc.

The browser also has some crypto stuff (web advertisment replacement, block chain based decentralized browser sync), and a lot of people hate crypto these days.

Personally I think it's a good browser, the web needs advertising revenue to function and it's solution to replacing web ads with optional browser ads that still pay the websites you visit seems like a decent solution. I respect the push to use a non-chromium browser, but personally I rely too much on browser tab groups to use anything Firefox based.

[–] [email protected] 3 points 9 months ago* (last edited 9 months ago)

I respect the push to use a non-chromium browser, but personally I rely too much on browser tab groups to use anything Firefox based.

Out of interest, are your needs not covered by Simple Tab Groups or Tree Style Tab? Both are monitored by Mozilla as "Recommended Extensions".

load more comments (2 replies)
load more comments
view more: next ›