Brave Browser leaks your Tor / Onion service requests through DNS

https://ramble.pw/f/privacy/2387

by input_sh • 5 years ago

27 14 5 years ago

ramble.pw

underseacables2• 5 years ago

Why would someone use the Brave browser instead of the Tor browser?

dewey• 5 years ago

Different threat model?

underseacables2• 5 years ago

Please explain, I’m not sure I understand. When a person loads Tor, are they not just using the Tor browser? Why open another browser?

anonypla2• 5 years ago

I don't think it's useless. You have to consider the difference between privacy and anonymity but also the situation of other Browsers (Firefox/Chrome/Edge/Safari...).

Brave is mainly about Privacy in which this is a good added measure compared to other Mainstream browsers. It's certainly a bigger issue when it comes to anonymity.

It's still much better than any other (non Tor Browser) private/incognito Window/Tab.

Brave is meant to be used as a daily Browser and as an alternative to Mainstream browsers. It's not meant IMHO to compete against Tor Browser for anonymity. Using Tor Browser for mundane non-sensitive activities seems a bit overkill to me.

There are quite a few ways to use Brave safely over Tor without using Tor Tabs and while keeping both Privacy/Anonymity (without DNS leaks).

This is a matter of threat modeling, performance and usability.

Brave has some benefits over Tor Browser in terms of usability/performance/fingerprinting resistance and acceptance by various online obstacles (such as Captchas).

For example:

Open Tor Browser and go to https://coveryourtracks.eff.org/ and check. You'll see it "fail" the fingerprinting test (nearly unique).

Open a Brave Tor Tab (or even a Private Tab) and go to https://coveryourtracks.eff.org/ and check. You'll see it pass the fingerprinting test (fully randomized).

Open a Private Tab with any other mainstream browser in their default settings and enjoy the results ...

So my take on it? Even for some sensitive activities, I do use Brave Browser within Whonix Workstation rather than Tor Browser (without Tor Tabs). This solves the issue while enjoying an overall better persistent browsing experience and less hurdles with the various services targeting and harassing Tor Browser just because they're using Tor Browser. But of course you could also use Firefox with various extensions in place of Brave. In this case and IMHO, this is a usability/performance choice.

Yehoshaphat• 5 years ago

Apparently ramble.pw is a parler/reddit bastard marriage. I'm probably on a list now.

psychometry• 5 years ago

Yeah, you don't have to look very far down the front page to find a racist meme. Hope this domain is blocklisted from HN.

user-the-name• 5 years ago

The absolute irony-immunity of the rambling brownshirt in there complaining about about "fascists" and "kikes" on other sites.

lapnitnelav• 5 years ago

Better change your name to Bobby Tables now ;-)

anonypla2• 5 years ago

While I do think this is a problem ... One should always remember this Brave Help Article https://support.brave.com/hc/en-us/articles/360018121491-Wha...

In which they, themselves, say (and always have been saying): " If your personal safety depends on remaining anonymous, we highly recommend using Tor Browser instead of Brave Tor windows. "

Also this is a known issue, see https://github.com/brave/brave-core/pull/7909

TehCorwiz• 5 years ago

~This is interesting if it can be verified by someone else.~

But this source is pretty bad. I'd prefer to see a source that doesn't devolve into fascist-racist-conspiracy theories and slurs for Jews within a single page.

Brave Browser leaks your Tor / Onion service requests through DNS

Related Stories