News for hackers. Stuff that matters.
Re:Brave browser can inject headers in HTTP requests by ameyv on Sunday February 10, 2019 @01:56PM (#19129327)
I just switched from chrome to brave and now I need to seriously rethink this.
Re:Brave browser can inject headers in HTTP requests by Phenix88be on Sunday February 10, 2019 @04:43PM (#19130233)
Firefox is still backdoor free :)
Re:Brave browser can inject headers in HTTP requests by pmlnr on Sunday February 10, 2019 @04:46PM (#19130254)
This is debatable: with the experiments, Firefox has the power to install addons behind the scenes. See the Mr. Robot fiasco: https://news.ycombinator.com/item?id=15956325
Re:Brave browser can inject headers in HTTP requests by jonathankoren on Sunday February 10, 2019 @05:05PM (#19130384)
I hate to tell you this, but every browser has the ability to run experiments.
Re:Brave browser can inject headers in HTTP requests by AnaniasAnanas on Sunday February 10, 2019 @06:51PM (#19130938)
w3m does not have that. In any case, since experiments are no different to backdoors you might as well say that most popular browsers have backdoors.
Re:Brave browser can inject headers in HTTP requests by jonathankoren on Sunday February 10, 2019 @09:11PM (#19131566)
“Backdoor” is a very loaded term. Would you call all self updating software backdoored? I seriously doubt it.
Re:Brave browser can inject headers in HTTP requests by AnaniasAnanas on Sunday February 10, 2019 @11:34PM (#19132086)
Well, yes, unless if such functionality was opt-in or at least asked me before installing the new version.
Re:Brave browser can inject headers in HTTP requests by yjftsjthsd-h on Sunday February 10, 2019 @10:09PM (#19131775)
If an update was used to push advertisements, then it would absolutely qualify as a backdoor.
Re:Brave browser can inject headers in HTTP requests by pmlnr on Sunday February 10, 2019 @05:59PM (#19130681)
read the link; i wasn't referring to website originated experiments.

btw midori is without backdoors, so is dillo, or lynx.

Re:Brave browser can inject headers in HTTP requests by jonathankoren on Sunday February 10, 2019 @06:56PM (#19130972)
I am well aware of the Mr Robot brouhaha.

No one brought up “website oriented” experiments. We’re talking about the browser itself. All modern browsers of them have the ability to download JavaScript and execute it to change functionality. All of them have the ability to toggle behavior remotely. That’s how you experiment, and experiment driven development is how modern software is made.

Finally, you can not be serious mentioning Lynx. It was obsolete in 1996. I know. I was there.

Re:Brave browser can inject headers in HTTP requests by xkgihu7r on Sunday February 10, 2019 @06:02PM (#19130696)
It is not. The Mr. Robot controversy showed that they can remotely install addons, and the Booking controversy showed that they can remotely alter the contents of the "new tab" page.
Re:Brave browser can inject headers in HTTP requests by y4mi on Sunday February 10, 2019 @04:46PM (#19130259)
I used brave on Android some time ago as well. Firefox really wasn't an option back then, as the rendering engine was just to slow for reading webnovels... But adblock is essentially required on mobile because of the energy drain from ads

I ultimately went back to chrome though after I installed blokada. You might want to check that out as well.

You can get it from f-droid if you have that app store already.

https://blokada.org/index.html