r/brave_browser • • 10m ago

Farbling is detectable from the page side, with no stored state

• Upvotes

I maintain glasshuman.org, a non-commercial page that shows people what a site can read from their device, and while working on it,qq I spent a while measuring what Brave actually does. One result seems worth sharing here.

Farbling is designed to be hard for a site to detect, and against the usual approach it is: the noise is seeded per session and per eTLD+1, so a fingerprint looks stable within a visit and a site that just compares two page loads sees nothing. But it can be caught on a first visit without storing anything, because some readings have a correct answer. Fill a canvas with one flat colour and read it back through getImageData, and every pixel must be exactly that colour. Render a constant signal through an OfflineAudioContext, and every sample must be exactly the value you set. Any deviation is added noise. One detail matters: silence is useless for the audio check, since the fudge factor is multiplicative and leaves zero at zero, so it has to be a constant offset.

So a site that wants to know whether you are farbling can find out, which is worth knowing if you assume the protection is invisible. The flip side is that it also lets a site be honest about it, which is what I changed mine to do: when it finds canvas or audio readings being altered, it names them and says the browser is doing its job, instead of handing you a fresh identifier and calling you unique.

Two smaller things from the same measurements, in case they save anyone a wrong conclusion. A raw count of readable values is not a privacy score; Brave exposes more interfaces than Firefox simply by being Chromium-based, so it lands higher on such a count without protecting you any worse. And the battery readings are worth ignoring entirely: level 1, charging true, chargingTime 0, dischargingTime Infinity is what the W3C spec prescribes for "no battery or cannot report", and section 3 explicitly permits a browser to expose fake values there, so no site can tell a real reading from a stand-in.

Happy to be told where I have got Brave wrong.


r/brave_browser • • 1h ago

Broken pinned sites list on Android since last update from GitHub

• Upvotes

Brave 1.98.60, Chromium 156.0.8078.48

Android 17; Build/CP2A.260605.016

Since the last update from GitHub (not nightly, installed via Obtainium) the pinned sites list does not show anything, and won't add new items that were previously there, which suggests it's display issue rather than data loss.​​

​


r/brave_browser • • 2h ago

Top bar turns white when browser isn't in focus?

1 Upvotes
Browser is in focus

Hi, been using brave for ages but recently ive noticed that the top bar turns white and bad when the brower isn't in focus. Is this just a thing or can i turn this off somewhere?

Browser isn't in focus

r/brave_browser • • 15h ago

Is there a open source version of Brave?

0 Upvotes

r/brave_browser • • 1d ago

Based

Post image
225 Upvotes

That's why he's the GOAT


r/brave_browser • • 1d ago

PHP Vulnerabilities and BRAVE

1 Upvotes

what is the update about the safe_usage of Brave browser after the infamous PHP vulnerabilities? what are the best practices to follow and what are websites not to visit or browsers not to use at all at least for few days?


r/brave_browser • • 1d ago

Fullscreen buged

Post image
5 Upvotes

My videos in fullscreen landscape look like in the photo provided. Any fix?


r/brave_browser • • 1d ago

That one same err_connection_refused

Post image
1 Upvotes

all browser is an err_connection_refused


r/brave_browser • • 1d ago

fanflix.co Cookie Policy

2 Upvotes

Can this be blocked? I tried reporting them via the browser and email, recently they stopped responding.

https://fanflix.co/


r/brave_browser • • 1d ago

Back to Brave after some time

15 Upvotes

I just installed Brave after a long time without using it.

What are your favorite features of this browser? Any tips about using it?


r/brave_browser • • 1d ago

Investigating BRAVE recently started CRASHING numerous times a day, some times it wont stay open for more than 2 mins at a time; especially on YouTube but it happens on any site.

1 Upvotes

Brave keeps crashing, it's like it just randomly closes itself and I don't know why, nothing is freezing, it's not due to resource overload it just randomly closes out and then lets me restore my pages similar to when you close out Brave with numerous tabs open. This has never happened before till just recently and is extremely annoying and near unusable. I think it happens more often if when actively clicking on something or moving the mouse over the browser but even when I'm not it still still happen randomly, some times it'll crash back to back to back with just 30 seconds to 5 mins apart, other times it's fine then will crash all of a sudden after 3 hours, it's extremely random and I don't see any patterns to be able to reproduce the crash myself and figure out what's happening.

It honestly started around the same time that I did the most recent update sometime at the end of last month or the beginning of this month. It also happens more often when YouTube is open yet before this last update I could have 5-10 youtube tabs and not experience a single crash and now it crashes with one tab open even when I'm not on YouTube and just on any site.

Someone please help me! It's getting to the point where the browser is becoming unusable for me but it's the only browser that I genuinely enjoy using; except for Opera GX but Malwarebytes was flagging Opera and catching it connecting to known malicious websites and was an overall security risk.

My PC:

OS: Windows 11 Pro
CPU: AMD Ryzen 7 5800XT
RAM: 2x8GB Patriot Viper + 2x16GB Corsair Vengeance for a total of 48GB (2133 MT/s)
GPU: NVIDIA GeForce RTX 4060 (Using the latest Game Driver version)
Motherboard: TUF GAMING B550-PLUS WIFI II

Before anyone says it, I already have GPU Acceleration - DISABLED.

The only extensions I have are NordPass, NordVPN & Malwarebytes. [I was using uBlock (Brave Hosted) but I removed it as it was a newly added extension however I was crashing prior to adding it and still afterwards.]

Is it possible to go back to a older version of the browser?
If it is then I'd like to try that to see if it was the recent update or not.


r/brave_browser • • 1d ago

Can we change the Brave translator provider? Android

6 Upvotes

It's so slow, imprecise, and breaks the interface and text that it drives me crazy. Vivaldi translator is a thousand times better, it never breaks the interface, does not stop translating if I open a new comment/window/page/additional text, etc. Unlike Brave, which constantly switches off. I just hate the Brave translator for Android, it's terrible. The most important thing is that I tested it on iOS as well and for some reason it is a little better on iOS.


r/brave_browser • • 1d ago

Brave Android: third-party autofill (Proton Pass) doesn't work on HTTP sites, but works in other browser (Firefox and Opera)

4 Upvotes

Hi,

Third-party autofill (Proton Pass) no longer works in Brave on Android for HTTP sites. It used to work until recently.

- "Autofill using another service" is enabled in Brave

- Proton Pass is set as the preferred service in Android settings

- Same HTTP page autofills fine in Firefox and Opera

- HTTPS sites autofill fine in Brave

- Example: my router login at http://192.168.0.1 (saved URL matches exactly)

Already tried: Shields off for the page, disabling HTTPS upgrades, restarting Brave, clearing cache, updating Brave and WebView.

Did a recent Brave update block third-party autofill on HTTP pages? Is there a flag or setting to allow it?

Thanks!


r/brave_browser • • 1d ago

Brave Origin(Linux) Where did they move the settings for enabling/disabling features from Brave Origin?

4 Upvotes

I am not seeing it in settings, im looking around settings and I cant find the origin settings to turn on and off the features like AI etc, very confused i used to see a section in settings for Origin but not any more


r/brave_browser • • 1d ago

How to hide this profile icon in Brave?

Post image
3 Upvotes

can someone help me..........


r/brave_browser • • 2d ago

In this video, Proton concludes that Brave is the overall winner of their test, scoring the highest with 23 points

Thumbnail
youtube.com
321 Upvotes

r/brave_browser • • 2d ago

Add multiple tabs to group at once?

2 Upvotes

Is there a way to add multiple tabs to a group at once, rather than adding them one by one?


r/brave_browser • • 2d ago

what's wrong with brave search?

11 Upvotes

Right now It's refusing all my searches stating that:

- If you are accessing this page from Tor, try changing the exit node.
- If you are accessing this page from a popular VPN service, try to switch to a different server or region.

I'm neither accessing the page from tor, nor from a VPN, it's my standard everyday connection, through my standard everyday brave browser, it just stopped serving me answers.

Any clue?


r/brave_browser • • 2d ago

How to disable Tab Groups on Brave Android(stable)??

Thumbnail
gallery
10 Upvotes

I never use Tab Groups, it confuses me completely. There was an update on Play Store months ago which mentioned that there will be a feature to disable tab grouping entirely. However, haven't got the feature after the update. Do you have the option to disable Tab Groups on your Brave Android?


r/brave_browser • • 2d ago

My free new tab extension silently broke in Brave until a Brave user debugged it for me

1 Upvotes

i built stackboard, a free new tab that shows your normal bookmarks as a board (spaces, stacks, one click to stash all your open tabs into bookmarks). tested it mostly in chrome, which was a mistake lol

first brave user who tried it said adding a space did nothing and the whole thing felt laggy. no error, nothing happened. they actually dug in and found it: an older stackboard tab frozen in the background was holding a web lock forever, so every click on the new tab just sat there waiting. they sent me the fix over chat

shipped it in 0.5.2 w/ their name in the commit and the readme. now it waits 3 seconds max and carries on, and a failed write shows an error on screen

i keep a brave 1.97 test setup now. it's all plain bookmarks so brave sync carries them, no account, nothing leaves the browser

tradeoff is you lose brave's own dashboard (background images, the stats) while it's on. anyone here running a custom new tab in brave? what made you switch off the default one


r/brave_browser • • 2d ago

Change default download location on android?

1 Upvotes

Seems like this was an option discussed years ago but is still not a thing? Am I missing something? Thanks!


r/brave_browser • • 2d ago

How to configure brave to keep sessions instead of a fresh start every time?

0 Upvotes

Update, found the culprit: it was the new shred option, it was set to when tabs are closed

Edit: android phone not pc

Yeah i know it is the price you pay for privacy, but it starts getting in your way when you are daily using the app

Like, I don't open github enough to keep it installed on my device, but when i check it I don't wanna login, then exit the app to get my 2fa then back, just to check my inbox

Or google search, asked about this before and it is cuz of brave blocking fingerprinting + my country using CGNAT, i keep getting are you a robot EACH SEARCH, plus i dont mind keeping history of my searches, so i think best approach is to keep logged into google instead of a new session each tab

The alternative approach is keeping one open tab for each thing but that's a hard habit to break cuz i like closing tabs


r/brave_browser • • 2d ago

How to report website asking for cookies?

4 Upvotes

On monday October 19th Ilta-Sanomat, one of the biggest newspapers in Finland, changed their website to a model where you have to pay separately for refusing targeted advertising.

Another big newspaper Iltalehti introduced a similar model last year.

Every time I visit these websites they ask to accept cookies or pay the subscription. Is there a way I could report this to be fixed in Brave? I already deleted their app but I'd still like to visit these websites as those are one of the biggest media in Finland.

https://www.is.fi/

https://www.iltalehti.fi/

Edit. Ilta-Sanomat are trying to justify their model by saying "it's the European way". Apparently this is normal in many European newspaper websites. Even though the EU Data Protection Authority have found the Consent or Pay models illegal in the EU.


r/brave_browser • • 2d ago

Turnstile loop due to Shield filter settings

Post image
3 Upvotes

I’ve been running into an issue lately where Cloudflare anti-bot challenges (like Turnstile and the "Checking your connection" loops) are constantly failing or looping endlessly when using Brave.

Latest version of brave android.

How to whitelist this website?


r/brave_browser • • 3d ago

Fix in upcoming release Leo Keeps Buffering

Thumbnail
2 Upvotes