News for hackers. Stuff that matters.
Re:The Brave browser is brilliant, but probably not for the ... by songshuu on Saturday March 07, 2020 @11:30AM (#22512385)
I think you wholly misunderstand that the fingerprint is randomized on every restart of the browser.

That is so much noise that it renders fingerprinting as a strategy utterly useless.

Re:The Brave browser is brilliant, but probably not for the ... by Angeo34 on Saturday March 07, 2020 @03:06PM (#22513693)
You are aware being based on Chromium means you cannot fake many vectors? Even Tor browser isn't able to spoof e everything Chromium hardly can spoof 1% of what Tor/Firefox can.

You will maybe have a randomized fingerprint but it doesn't matter if 99% of other fingerprinting vectors are Stoll left open.

Just look at their github. They have fingerprinting bugs that are beyond uniquely identifying (fonts best example) which are open since years. It isn't solvable through Chromium which all of Brave knows yet they market this.

Re:The Brave browser is brilliant, but probably not for the ... by BrendanEich on Sunday March 08, 2020 @12:27AM (#22516490)
Chromium is just C++ and it can be hacked. The claim that something "isn't solvable through Chromium" shows magical thinking.

If a vector can be randomized or otherwise arms-raced vs. the remote adversary via C++, then "Chromium" is not an obstacle for Brave. Consider the case of extensions, where your point would have been valid if you'd written "Chromium extensions".

Fingerprinting can be done many ways, but most are not economic: they cost too much for the too few bits they get from the target browser. The common methods, notably fingerprint2.js, use APIs that we at Brave, along with Apple and others in the W3C Privacy CG, are taking on.

ICYMI, https://brave.com/whats-brave-done-for-my-privacy-lately-epi....

Re:The Brave browser is brilliant, but probably not for the ... by Angeo34 on Monday March 09, 2020 @05:53PM (#22530259)
Again. If it's so easy to modify Chromium code to hide for example fonts and window decoration and css leakers why didn't you do it yet? The bugs are open since at least 3 years.

I mean benefit of doubt is one thing but you claim it can be done while it's hard to read it out with JS (which it isn't it's a ten line script to identify all of those vectors). But the cpp code that requires thousands of lines of edits is easy?

Re:The Brave browser is brilliant, but probably not for the ... by Angeo34 on Monday March 09, 2020 @05:57PM (#22530304)
Please can you then explain why the font fingerprinting bug and window decoration/css leak hasn't been addressed since the last 3/4 years since it has been recognized by your devs as a issue?

That Chinese girl (sorry don't know your name) explicitly said it's too hard years ago but 4 years later you sat it's possible yet the bug is still left open?

Re:The Brave browser is brilliant, but probably not for the ... by r3muxd on Monday March 09, 2020 @02:25PM (#22528096)
Brave is a really tough sell on mobile. It doesn't have mobile extension support like Kiwi and Firefox on Android, or a horizontal tab switcher like Bromite. On top of that, the adblocker is worse than uBO and there's this shady cryptocurrency stuff.
Re:The Brave browser is brilliant, but probably not for the ... by sombremesa on Saturday March 07, 2020 @01:00PM (#22512955)
Most people don't restart their browsers as often as you might think (the modern trend is very much away from desktops). Especially on mobile, where things stick around in the background without your knowledge.
Re:The Brave browser is brilliant, but probably not for the ... by fastball on Saturday March 07, 2020 @01:14PM (#22513025)
You can very easily hook into open/close events on any mobile OS – the concept of actually "restarting" the browser doesn't need to come into it.