bleepingcomputer.com

starflower, to privacy in Brave to end 'Strict' fingerprinting protection as it breaks websites

Your friendly reminder that the Brave CEO is Mozillas old CEO, who was fired from Mozilla for being unapologetically homophobic.

Rose,

Worse than merely being homophobic, as he financially supported politicians and causes that worked to prevent equal rights.

VerseAndVermin,

Since everyone else is piling on negatively, I appreciated your friendly reminder.

BearOfaTime,

So?

What I care about in this story is the technical issues.

starflower,

O…kay? I don’t really care lmao

AtmaJnana,

Pay no attention to the butthurt shills.

dime,

Please don’t tell me you wear adidas (founded by a Nazi), or drive a Ford (made by an antisemite), or listen to Wagner, (a racist), or drive a Volkswagen, or play Minecraft, or use wix, or eat at Chick-fil-A, or…etc etc

starflower,

I don’t. But “originally made by” and “currently being run by” are, in my opinion, two different things

YeetPics, (edited )
@YeetPics@mander.xyz avatar

technical issues

Well technically the CEO would have an issue with you if you were gay

Lmao

Engywuck, (edited )

He wasn’t fired. He voluntarily left. And thus Mozilla is left with an incompetent CEO whose only aim is to increase her paycheck year after year, despite pathetic market share results for FF. Enjoy that.

That said, nobody cares about your “friendly remainders”. We’re talking about software here, not politics.

And, to stay on topic, yes, it happened to me that Strict FP broke some website, in particular those displaying a frame with a map or similar stuff. So I’ve resorted to use “standard” FP myself.

troglodytis, (edited )

Well, you’re wrong.

AtmaJnana,

nobody cares about your “friendly remainders”. We’re talking about software here, not politics.

Nah. I care. You dont speak for me. I cant tell if you’re a shill for Brave or a MAGAt or both.

Engywuck,

I’m not a shill for Brave. It has its fair share of technical issues but it’s the less worse browser for my use case (better than FF, anyway). Your (or mine) opinion on the CEO has nothing to do with the technical issue discussed in OP’s link.

And no, what MAGA are you talking about? I’m not even 'murican. Take your meds, dude.

LWD,

Do you hate the Brave CEO for doing the same thing as the Mozilla CEO, but with even less restraint?

Or are you just whining in hopes that nobody will question whether you’re being a hypocrite

Engywuck,

Yawn… I’m tired of this shit. You people are really ridiculous. I’m going to just block you. Enjoy your cognitive dissonance and your virtue signaling.

LWD,

What an ironic thing to post

Umbrias,

Technology and ethics and politics are not airgapped magically distinct things. Pretending that they are is a strategic political choice you are actively making.

Engywuck,

Ok. I’m a bad person because I enjoy using a given browser. I get that.

Another one that goes on my ignore list. Bye.

MrFunnyMoustache,

Ok. I’m a bad person because I enjoy using a given browser. I get that.

This is a straw man argument; no one said you’re a bad person for using a certain browser.

nobody cares about your “friendly remainders”. We’re talking about software here, not politics.

This is what they are criticising you about. You could be using Edge or Chrome, it wouldn’t matter here, that wouldn’t make you a bad person. The point is that pretending there is no connection when there is clearly a huge relevance here is massive.

Engywuck,

The point is that pretending there is no connection when there is clearly a huge relevance here is massive.

In the imagination of upvotes-hungry virtue-signaling people, of course.

Umbrias,

If that’s what you feel is the case if you don’t separate politics from technology then that sounds like a personal problem to address.

electro1, (edited )
@electro1@infosec.pub avatar

Thanks for the reminder

WHAT EVERYONE SHOULD HAVE SAID TO AVOID THE SHIT SHOW THAT HAPPENED BELOW

seriously though, thanks

YeetPics, to privacy in Brave to end 'Strict' fingerprinting protection as it breaks websites
@YeetPics@mander.xyz avatar

The scam company brave? The one that scams people? With their scam based crypto rewards that don’t pay out? THAT brave?

LWD,

There’s no reason to hate Brave unless you have a political bias against their CEO.

Besides in 2016, when Brave promised to remove banner ads from websites and replace them with their own, basically trying to extract money directly from websites without the consent of their owners

And when the CEO unilaterally added a fringe, pay-to-win Wikipedia clone into the default search engine list.

And in 2018, Tom Scott and other creators noticed Brave was soliciting donations in their names without their knowledge or consent.

And in 2020, when Brave got caught injecting URLs with affiliate codes when users tried browsing to various websites.

Also in 2020, when they silently started injecting ads into their home page backgrounds, pocketing the revenue. There was a lot of pushback: “the sponsored backgrounds give a bad first impression.” Further requests were ignored (immediately closed)

And in 2022, when Brave floated the idea of further discouraging users from disabling sponsored messages.

And in 2023, when Brave got caught installing a paid VPN service on users’ computers without their consent.

drislands,

But other than that, there’s no reason!

shotgun_crab,

You’re right, no reason at all :)

moreeni,

You can dig as much shit on Mozilla. Every big browser company right now is shitty

Mikina,

This made me wonder - is there any active Best Of community on any instance? This would be a perfect candidate.

YeetPics,
@YeetPics@mander.xyz avatar

I had a small mountain of BAT they locked me out of due to shoddy linking with their banking affiliates and out of date DRM practices locking me out of my account due to too many devices being logged in (each OS update counted as its own device).

I noticed you didn’t have that linked, that’s because not every shitty move a company makes gets news coverage. Sorry I don’t fit into your narrow view on what constitutes a valid reason.

LWD,

If there’s something interesting to add to the list, I’m curious. Brave did partner with a criminal organization currently under a $1.1 billion lawsuit, but I don’t have enough information about your particular case.

Did the software lock you out or did their servers? Was this reported on anywhere?

YeetPics,
@YeetPics@mander.xyz avatar

The banking backend that grifted me is called uphold and at the time that was the ONLY way to move BAT out of their wallet.

The device limit was a known issue for years and I left before they fixed it.

While I was still a user I would try their forum for support. Big shocker, LOTS of other users had the same issue and reports got ignored or muted by the mods there.

the_beber, to selfhosted in Haier hits Home Assistant plugin dev with takedown notice

I hate how cease and desist are essentially blackmail. Even if you did nothing wrong, you can still get fucked over by costs of a potential legal battle.

SnotFlickerman,
@SnotFlickerman@lemmy.blahaj.zone avatar

Honestly its just a symptom of a bigger problem with the justice system entirely.

It has always completely favored those with the most money and lawyers.

possiblylinux127,

That’s the problem of the legal system. You can get acused of a crime falsely but still end up bankrupt and alone.

TWeaK,

It’s a bigger problem in the States than elsewhere. In the US, awarding legal costs is the exception, not the norm, so someone with a lot of money and access to lawyers can basically intimidate a defendent into avoiding court. In the rest of the world, courts are much more likely to award costs to a defendent who has done nothing wrong - if you file a frivilous lawsuit and lose, you’ll probably have to pay the costs of the person you tried to sue.

This guy’s in Germany, so I think he’d be alright if he clearly won. The issue, however, is that courts aren’t really equipped for handling highly technical cases and often get things wrong.

possiblylinux127, to privacy in Brave to end 'Strict' fingerprinting protection as it breaks websites

Honestly you really should be using Firefox.

umbrella,
@umbrella@lemmy.ml avatar

yes, why are people so allergic to it??

possiblylinux127,

The UI is somewhat clunky and it feels half dead.

I really wish Mozilla would rethink there business.

umbrella,
@umbrella@lemmy.ml avatar

whats clunky about it??

a browser is just an address bar and tabs

possiblylinux127,

With tons if spacing between everything

umbrella, (edited )
@umbrella@lemmy.ml avatar

compact mode, in the same place you would change the theme

i use it for this very reason

PumaStoleMyBluff,

Firefox’s resist fingerprinting breaks sites too.

dditty,

I have encountered a handful of sites that it broke as well. I use the strict protection option and manually add exceptions to the few sites it breaks - then I never have any other issues with them

possiblylinux127,

It doesn’t really break things for me personally. However if it does break something just turn it off.

Mikina,

I’ve been having a pretty good experience with Mullvad, however I don’t hear many people talking about it. I wonder why is that, IIRC it’s being developed with Tor Foundation, and is basically a Tor browser for clear web, and that sounds perfect. So far, I didn’t run into any issues, so is there a catch, or are they just not well enough known yet? Or, maybe people are turned away by their optional VPN?

LWD,

Probably because LibreWolf is most of the way there, and the Mullvad branding + proprietary VPN is more than a bit much. I use(d) the VPN alongside it and found the add-on “hints” regarding the correct DNS settings more frustrating than helpful, too.

Mikina, (edited )

I was using LibreWolf before, but I really like the idea of bundling VPN + Browser, and also the way they handle payments - not only is Mullvad VPN kind of cheap, I can just pay with crypto and don’t need any account (kind of - you just generate username that also serves as an password, without any other contact information required).

But what I like the most about it is the idea of making a browser with the goal of having the same fingerprint between users (as much as possible), and offering it with a VPN - becuase that means that most of other users of the VPN will probably also have the same fingerprint from the browser, so you will blend in with them. I wasn’t really sold on the idea of VPN before that and didn’t use one, but this was what convinced me.

But tbh I haven’t done much research into the company, or into the effectivness of their implementation. I’m kind of betting on their cooperation with Tor Browser, which should have most of this stuff already figured out. But it’s possible that other browsers are just better at it, I never checked.

I do however still use LibreWolf for the occasional site that breaks with Mullvad, but it’s not something that happens too often.

I use(d) the VPN alongside it and found the add-on “hints” regarding the correct DNS settings more frustrating than helpful, too.

Hmm, I don’t think I’ve ever noticed anything about DNS. I think I’ve actually never click on the browser vpn extension, though :D Is it the encrypted DNS hint?

EDIT: Found this, apparently it’s doing pretty well privacytests.org

scrubbles, to homeassistant in Haier hits Home Assistant plugin dev with takedown notice
@scrubbles@poptalk.scrubbles.tech avatar

Amazing. Let’s truly take it from their point of view.

The only people who care about this plugin are HomeAssistant users, so a very small subset. Those users then either

A) Already own the product, and thus are not going to cost them anything because they already bought it or B) Home Assistant users who are in the market for their product, and from experience will only buy a product if there’s an HA plugin.

In what way are they losing “millions” to these 2 groups again?

I have literally made decisions on purchases like vehicles on if they have a home assistant plugin or not. For HomeAssitant users it’s one of the largest factors.

dantheclamman,
@dantheclamman@lemmy.world avatar

It is insanely petty. Perhaps they don’t want people reverse engineering their APIs, but all their competitors and threat actors likely do it, just not on a public repo.

utopiah,

I’m in nearly B as I usually only buy things with proper protocols, e.g Zigbee, that might not need a dedicated plugin. So obviously Haier is now a company I won’t buy anything from and will actively not recommend to anything who cares about my opinion on IoT.

henfredemars, to privacy in Have I Been Pwned adds 71 million emails from Naz.API stolen account list

A stern reminder that we should all use a password management tool and use unique, unrelated passwords with every service.

Retiring, to linux in Lazarus hackers now push Linux malware via fake job offers
@Retiring@lemmy.ml avatar

If you run random .pdf.something-files pm‘d to you on LinkedIn you probably shouldn’t use a computer anyway, no matter if it runs Linux or Windows…

MrFunnyMoustache,

The problem is, using a computer is pretty much essential to function in this world, I actually know more people who would run any file sent to them without a second thought because they wouldn’t know better, but they still need to use a computer.

I think a better solution is to give better training to people about computer hygiene at the workplace.

fhein,

I work for a large IT company so we’ve had numerous such training courses, but then they use third party services for time reporting, manager evaluation, cloud services, personal finance advice, etc. so I regularly get emails with links to domains that I’ve never heard about that I’m supposed to trust…

MrFunnyMoustache,

That’s what happens when executives don’t listen to IT…

The company I currently work for host everything at the building they own. The CEO doesn’t understand much about IT, but his attitude is “I trust your integrity and your expertise, so I’ll approve anything you ask me within reason if it will improve security and reliability.”

Quereller,

I work in a big international company. We regularly have phishing (email) awareness training. But they outsource about everything and regularly change the providers. So we often get totally legit emails from just some random companies and are supposed to visit/ login to some previously unknown domains.

OsrsNeedsF2P,

Lazarus’ Operation DreamJob, also known as Nukesped, is an ongoing operation targeting people who work in software or DeFi platforms with fake job offers on LinkedIn or other social media and communication platforms.

Looks like they’re going after desperate job seeking crypto bros. Even if it’s not terribly effective, it’s a spray and pray, so they probably got some people.

brick,

Seems to me like they are targeting people who likely have access to assets that can be easily stolen and hard to track.

AreaKode, (edited ) to homeassistant in Haier hits Home Assistant plugin dev with takedown notice

Oh no. At least there’s no way for everyone in the world to make a backup before it goes dark…

Steve,

It would be a shame if 697 people and counting were to fork the project, it would be a real pain to serve each one of them with takedown notices.

helenslunch, (edited )
@helenslunch@feddit.nl avatar

This is the great thing about FOSS. Someone else will just take the code and reupload it. If they want it removed from GitHub, they can deal with Microsoft. At which point it’ll just be re-uploaded again. There’s nothing illegal about it.

So Haier suffers the Streisand effect and the people who want to simply continue using it.

1stTime4MeInMCU,

Right… they claim hosting it is a violation of their TOS, but I’m not one of their customers. How can I violate their TOS if I don’t even use their product.

Selmafudd, to piracy in Pirate IPTV network in Austria dismantled and $1.74 million seized

God I’m dyslexic af, I read it as Australia and I’m like why would anybody setup a pirated streaming service here and why wasn’t I using it… wasn’t until I read “arrests were made in Vienna, Lower Austria, Salzburg, Vorarlberg, and Tyrol” that I worked it out

theshatterstone54,

I’m not even dyslexic and my mind somehow read that as “Australia”

Sharpiemarker,

Dozens of us!

amju_wolf, to privacy in Haier hits Home Assistant plugin dev with takedown notice
@amju_wolf@pawb.social avatar

Good to know which company should be avoided for buying home appliances. I really hope the notice will be the first thing to show ope when you search their name + HA Integration.

themeatbridge,

All the HVAC control systems are anti-opensource. They pretend like their proprietary controls are trade secrets worth billions in research and development, but ultimately they are all just glorified mercury switches. Honeywell, Johnson, Mitsubishi, Schneider, Trane, Siemens, none of them want to allow third party control without getting their beaks wet with licensing fees. Even their commercial departments have started phasing out support for protocols like BACNet and Modbus.

Temperature sensors are cheap as shit. Low voltage relays are cheap as shit. Even digitally controlled zone dampers shouldn’t cost more than $100 installed. If you can access your ventilation in your attic or basement, you could zone every room in your house for less than it costs to replace a single AC compressor, and run it all on a raspberry pi.

But you need to know what you’re doing, and they will throw every hurdle in your way. No contractors would risk drawing the ire of their suppliers by doing it for you.

BearOfaTime,

Sounds like a market opportunity. Would be super disruptive

sxan,
@sxan@midwest.social avatar

The Honeywell HomeAssistant integration works pretty well, and has been around for a while, but it works through a web API. I’d prefer to have a fully local connection, but I’m not going to replace the entire HVAC control system to get it.

DrWeevilJammer,
@DrWeevilJammer@lemmy.ml avatar

Several Venstar thermostat models feature local API and work great with Home Assistant

NAK, (edited ) to selfhosted in what if your cloud=provider gets hacked ?

The real issue here is backups vs disaster recovery.

Backups can live on the same network. Backups are there for the day to day things that can go wrong. A server disk is corrupted, a user accidentally deletes a file, those kinds of things.

Disaster recovery is what happens when your primary platform is unavailable.

Your cloud provider getting taken down is a disaster recovery situation. The entire thing is unavailable. At this point you’re accepting data loss and starting to spin up in your disaster recovery location.

The fact they were hit by crypto is irrelevant. It could have been an earthquake, flooding, terrorist attack, or anything, but your primary data center was destroyed.

Backups are not meant for that scenario. What you’re looking for is disaster recovery.

kristoff,

Yes. Fair point.

On the other hand, most of the disaster senarios you mention are solved by geographic redundancy: set up your backup // DRS storage in a datacenter far away from the primary service. A scenario where all services,in all datacenters managed by a could-provider are impacted is probably new.

It is something that, considering the current geopolical situation we are now it, -and that I assume will only become worse- that we should better keep in the back of our mind.

GreatBlueHeron,

It should be obvious from the context here, but you don’t just need geographic separation, you need “everything” separation. If you have all your data in the cloud, and you want disaster recovery capability, then you need at least two independent cloud providers.

ZeroHora, to privacy in Brave to end 'Strict' fingerprinting protection as it breaks websites
@ZeroHora@lemmy.ml avatar

Another issue is that Strict mode is used by roughly 0.5% of Brave’s users, with the rest using the default setting, which is the Standard mode.

How are they getting this data? If it’s with telemetry this data doesn’t seem reliable, I doubt that people who change the fingerprint setting don’t disable telemetry.

Umbrias,

Alternatively, lol

AbouBenAdhem, (edited ) to homeassistant in Haier hits Home Assistant plugin dev with takedown notice

TIL General Electric Appliances, Hoover, Fisher & Paykel, Aqua, Hotpoint, Leader, and Candy are all owned by the same company.

reddig33,

Sad, isn’t it? For fun, look up Whirlpool, Albertsons, and Kroger on Wikipedia to see all the brands they own. No wonder prices are high when so much competition has been eliminated.

nexusband, (edited )
@nexusband@lemmy.world avatar

For the Europeans, look up AEG, Bauknecht, Electrolux, Liebherr…sad story as well. And one hell of a case for rampant capitalism running amok…

KyuubiNoKitsune,

BuT ThE FrEe mArKeT!!

nexusband,
@nexusband@lemmy.world avatar

There’s a difference between rampant capitalism running amok and the free market…free always needs rules, or it would be anarchy…

eatfudd,

Muh freedom

JustEnoughDucks,
@JustEnoughDucks@feddit.nl avatar

Please yell me bosch and Siemens are seperate companies…

nexusband,
@nexusband@lemmy.world avatar

Nope, they are not, at least in terms of household appliances. BUT they still produce quality stuff in Germany and Europe. And they actually never have been separate. And HomeConnect is commited to HAOS, iirc they actually provide some code to the plugin.

en.m.wikipedia.org/wiki/BSH_Hausgeräte

APassenger,

Quick nofe: Albertsons and Kroger want to be one company. Soon.

Heir_Of_Isildur,

Noted, thanks

draughtcyclist, to selfhosted in Haier hits Home Assistant plugin dev with takedown notice

I see 803 forks currently, keep up the good work!

DeltaTangoLima,
@DeltaTangoLima@reddrefuge.com avatar

Forked, and mirrored to my Foregjo instance

perishthethought,

Oh, good idea! I’m on it.

scrubbles,
@scrubbles@poptalk.scrubbles.tech avatar

Nooooo I said not to!

BearOfaTime,

Hot damn, there were just a handful at about 5 hours ago when someone else proposed the idea to fork it.

Sing it out, Barbara, let’s get this to the front page of the news!

4grams, (edited ) to privacy in Haier hits Home Assistant plugin dev with takedown notice
@4grams@awful.systems avatar

I’m sure the “millions lost” is their theoretical earnings they are “losing” by not being able to monetize the data they collect, spy on users to determine their habits so that they can introduce features that charge for things that are standard today, loss of ad revenue, etc.

We’ve hit a point where since everything collects as much data as they can to be mined, anything that interrupts that stream is now a felony corruption of business model.

eager_eagle, (edited )
@eager_eagle@lemmy.world avatar

it’s like when they compute losses for pirated content, just assuming every download would be equivalent to a Golden Edition Purchase at the highest price charged in their history, when in reality they’d be lucky to convert 1% of those downloads into sales.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 18878464 bytes) in /var/www/kbin/kbin/vendor/symfony/http-kernel/Profiler/FileProfilerStorage.php on line 171

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 4210688 bytes) in /var/www/kbin/kbin/vendor/symfony/error-handler/Resources/views/logs.html.php on line 40