If you have the Brave Browser installed on your Windows devices, then you may also have Brave VPN services installed on the machine. Brave installs these services without user consent on Windows devices.

Brave Firewall + VPN is an extra service that Brave users may subscribe to for a monthly fee. Launched in mid-2022, it is a cooperation between Brave Software, maker of Brave Browser, and Guardian, the company that operates the VPN and the firewall solution. The firewall and VPN solution is available for $9.99 per month.

  • 9point6@lemmy.world
    link
    fedilink
    arrow-up
    41
    arrow-down
    8
    ·
    1 year ago

    Brave, owned by Brendan Eich who has donated to homophobic charities and whose browser promotes a load of crypto bro shit on the new tab page.

    Unironically, using straight up Google Chrome is better IMO

    • TWeaK@lemm.ee
      link
      fedilink
      English
      arrow-up
      12
      arrow-down
      1
      ·
      1 year ago

      Now we just gotta wait for the CEO to go on a marketing campaign for new users, in an attempt to drown out the story.

    • HurlingDurling@lemm.ee
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      1 year ago

      Why is a server in Washington DC not safe and secure? I’ll give you private against government snooping it’s not, but it can still be safe and secure.

        • HurlingDurling@lemm.ee
          link
          fedilink
          English
          arrow-up
          0
          arrow-down
          1
          ·
          1 year ago

          But it isn’t the entire point tho, I use it when connected to public wifi networks to keep my connection secure. Sure, not letting your local ISP spy on you and report it to the gov is one but not the entire point.

  • TheAnonymouseJoker@lemmy.ml
    link
    fedilink
    arrow-up
    17
    arrow-down
    7
    ·
    1 year ago

    Wait, Brave, a piece of crypto malware, is acting like crypto malware? Oh no! Roses are red, water is wet and sky is blue too, right?

    • chris@lemmy.ml
      link
      fedilink
      English
      arrow-up
      5
      ·
      1 year ago

      I’ve posted a similar question to asklemmy but more over the focus on preference than privacy. In short the search engine Kagi is really good, Brave search was what I had used for a while. I think search engine choice is a case by case kinda thing, each person uses what they like. There are some other engines I forgot from my post which are more privacy centered.

        • chris@lemmy.ml
          link
          fedilink
          English
          arrow-up
          5
          ·
          1 year ago

          Yes it is 10 dollars a month, but you can create an account and try it for free to see if it is for you. It also does not use your data nor push advertisements which explains the cost.

          • 👁️👄👁️@lemm.ee
            link
            fedilink
            English
            arrow-up
            0
            arrow-down
            4
            ·
            edit-2
            1 year ago

            ddg does that for free

            $10/mo is also crazy overpriced for a search engine, they’re really not resource intensive at all

            • SnipingNinja@slrpnk.net
              link
              fedilink
              arrow-up
              5
              ·
              1 year ago

              ddg relies on Bing so it isn’t really comparable, idk about kagi’s costs but they claim 1.2 cent per search and an average of 700 searches per month (as what they are serving and hence pricing for)

    • Kras Mazov@lemmygrad.ml
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      I use Brave Search on Firefox, but I mostly use the shortcuts it provides like !yt and !g. A few months back I mostly used it over google, but the search results more times than not have been worse in comparison for me.

  • hottari@lemmy.ml
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    I don’t use Windows but if you install a program that requires a service on Linux, the service will be written to your system’s services daemon awaiting your activation. I don’t see what the issue with that is.

    • citytree@lemmy.ml
      link
      fedilink
      arrow-up
      0
      arrow-down
      1
      ·
      edit-2
      1 year ago

      What’s to stop the installer on Linux from configuring the service such that the service always runs on boot? e.g. systemctl enable malware.service.

      • Possibly linux@lemmy.zip
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        edit-2
        1 year ago

        Linux doesn’t have “installers” as Linux uses package managers. The only way you can get malware is if you manually add a bad repo.

        So it doesn’t really matter in the long run

      • hottari@lemmy.ml
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        1 year ago

        You still need to manually enable the service. The configuration of the service has zero effect on its activation or lifecycle.

        • calm.like.a.bomb@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          0
          arrow-down
          1
          ·
          1 year ago

          Huh? Any script can create a service, enable it and then start it. What would make you think the brave package (or just the application itself) can’t do this?

          • hottari@lemmy.ml
            link
            fedilink
            arrow-up
            1
            ·
            1 year ago

            Not possible to start or enable a created service without user intervention. You don’t know what you are talking about.

            • Aniki 🌱🌿@lemm.ee
              link
              fedilink
              arrow-up
              0
              ·
              1 year ago

              bruh a unit file can be written to the system or to the user profile

              systemctl --user enable name.service

              And i can most certainly write bash, and do write bash scripts, that write unit files to both user and system profiles.

              Maybe you dont know what your talkign about. just because most install scripts don’t include enabling the unit file for the system, doesn’t mean they can’t.

              • hottari@lemmy.ml
                link
                fedilink
                arrow-up
                0
                ·
                1 year ago

                Bruh you just ran the command to enable the ‘written’ service. Comprehension is a problem in this community.

                • Aniki 🌱🌿@lemm.ee
                  link
                  fedilink
                  arrow-up
                  1
                  ·
                  edit-2
                  1 year ago

                  The fuck are you talking about?

                  https://wiki.archlinux.org/title/Systemd/User#Basic_setup

                  Basic setup

                  All the user units will be placed in ~/.config/systemd/user/. If you want to start units on first login, execute systemctl --user enable unit for any unit you want to be autostarted.

                  Comprehension is a problem in this community.

                  Apparently so is RTFM and understanding how things actually work.

            • Ferk@kbin.social
              link
              fedilink
              arrow-up
              0
              arrow-down
              1
              ·
              1 year ago

              Systemd “enabled” services are literal symlinks… whenever a target runs, it tries to start also all the service files on its “wants” directory.

              You can literally enable any service for next boot by making a symlink in /etc/systemd/system/multi-user.target.wants/ (or whichever other target you want it to run on) as root (and installation scripts are run as root).

              ln -s /usr/lib/systemd/system/whatever.service  /etc/systemd/system/multi-user.target.wants/whatever.service
              
              
              • hottari@lemmy.ml
                link
                fedilink
                arrow-up
                1
                ·
                1 year ago

                This is actually very close (just tested and confirmed it). I somehow stand corrected about requiring manual enablement but this is just using the package manager to do the dirty work for you.

                However the program itself cannot write into those directories without root permissions. You still have to allow your package manager to do this with root permissions as mentioned.

            • calm.like.a.bomb@lemmy.dbzer0.com
              link
              fedilink
              English
              arrow-up
              0
              arrow-down
              1
              ·
              1 year ago

              OK… challenge accepted. Maybe you don’t know about systemd user services.

              Content of mytrojan.sh:

              #!/usr/bin/env bash
              
              echo "Writing the service unit file"
              
              cat > ~/.config/systemd/user/my_test_service.service << EOF
              [Unit]
              Description=Script Daemon For Test User Services
              
              [Service]
              Type=simple
              User=
              #Group=
              ExecStart=/home/user/bin/myscript.sh
              Restart=on-failure
              StandardOutput=file:%h/log_file
              
              [Install]
              WantedBy=default.target
              EOF
              
              echo "Reloading systemd for the user"
              systemctl --user daemon-reload || exit 1
              
              echo "Enabling and starting the service"
              systemctl --user enable --now my_test_service.service
              

              Content of myscript.sh:

              $ cat ~/bin/myscript.sh
              #!/usr/bin/env bash
              
              while true
              do
                  now=$(date)
                  me=$(whoami)
                  echo "User $me at $now"
                  sleep 10
              done
              

              Now run the script (mytrojan.sh) and check service status after that:

              $ ./mytrojan.sh
              Writing the service unit file
              Reloading systemd for the user
              Enabling and starting the service
              $ systemctl --user status my_test_service.service
              ● my_test_service.service - Script Daemon For Test User Services
                   Loaded: loaded (/home/user/.config/systemd/user/my_test_service.service; enabled; vendor preset: ena>
                   Active: active (running) since Thu 2023-10-19 12:15:21 EEST; 6s ago
                 Main PID: 1666383 (myscript.sh)
                    Tasks: 2 (limit: 18757)
                   Memory: 556.0K
                      CPU: 4ms
                   CGroup: /user.slice/user-1000.slice/user@1000.service/app.slice/my_test_service.service
                           ├─1666383 /bin/bash /home/user/bin/myscript.sh
                           └─1666387 sleep 10
              
              Oct 19 12:15:21 tesla systemd[1866318]: Started Script Daemon For Test User Services
              
  • donkeystomple@lemmy.ml
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    1 year ago

    Well I feel better about making the switch to Firefox now, and doing a custom user.js

  • Zerush@lemmy.ml
    link
    fedilink
    arrow-up
    1
    arrow-down
    1
    ·
    1 year ago

    I use Vivaldi, Andisearch and Mojeek. I’m going fine with these. As VPN Proton

  • Aatube@kbin.social
    link
    fedilink
    arrow-up
    3
    arrow-down
    3
    ·
    1 year ago

    u/@Max_P said this at the !technology thread:

    Software installs services to make its features operate, including optional default off ones. More news at 10.

    This is just like any other optional feature of Chromium you don’t use

  • Treczoks@lemm.ee
    link
    fedilink
    arrow-up
    2
    arrow-down
    2
    ·
    1 year ago

    And spyware for free, and I would not be surprised if they included an insecure backdoor at no extra cost.

      • Treczoks@lemm.ee
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        Both shitty, yes, but an unsecure backdoor is opening the door to every hacker on the planet, not just one group.

        • SnipingNinja@slrpnk.net
          link
          fedilink
          arrow-up
          1
          ·
          1 year ago

          I was disagreeing that a backdoor can ever be secure, because by definition it’s a way to bypass security protocols and if one person can bypass them, there’s no guarantee others can’t too.

          • Treczoks@lemm.ee
            link
            fedilink
            arrow-up
            2
            arrow-down
            1
            ·
            1 year ago

            Of course, no backdoor is secure, but among them, there are the just plain bad and the even worse.

  • ser@lemm.ee
    link
    fedilink
    arrow-up
    1
    arrow-down
    4
    ·
    1 year ago

    Check out thorium.rocks It is a fork of Chromium with performance and security improvement. Chris Titus recommends it.

    • PeachMan@lemmy.world
      link
      fedilink
      arrow-up
      3
      ·
      1 year ago

      Even better, ditch chromium altogether. There are many performance and privacy focused Firefox forks.

      • ser@lemm.ee
        link
        fedilink
        arrow-up
        0
        arrow-down
        1
        ·
        1 year ago

        The developer of Thorium has a fork of Firefox called Mercury. Hmmm… Some obviously didn’t check out the website.

    • TheAnonymouseJoker@lemmy.ml
      link
      fedilink
      arrow-up
      1
      arrow-down
      3
      ·
      1 year ago

      Stop using his baby boomer ramblings as a source of authentic information. He is just being a redditor on his Titus Tech Talk channel, giving advice on every topic regardless of his expertise on the subject. He is doing good work with debloat script and general Linux peptalk, but put a full stop there. The stuff about web browsers, antiviruses and a bunch of other stuff is complete drivel.