Skip Navigation

Technology @kbin.social

Girlparts @kbin.social

2y ago

Brave aims to curb practice of websites that port scan visitors

arstechnica.com

Brave aims to curb practice of websites that port scan visitors

Brave will allow users to choose which sites can access local network resources.

Security @programming.dev

neil @programming.dev

2y ago

Brave aims to curb practice of websites that port scan visitors

arstechnica.com /security/2023/06/brave-will-soon-control-which-sites-can-access-your-local-network-resources/

Privacy Guides @lemmy.one

pootriarch @poptalk.scrubbles.tech

2y ago

Brave aims to curb practice of websites that port scan visitors

arstechnica.com /security/2023/06/brave-will-soon-control-which-sites-can-access-your-local-network-resources/

14 comments

For firefox: https://addons.mozilla.org/en-US/firefox/addon/port-authority/
- ublock origin can already do this btw, don't need an additional browser addon, just tick the "block outsider intrustion into lan" blocklist
  
  I love Ublock Origin so much. It does so much to make my browsing experience the best.
  
  Makes sense. +1
  
  Seems like something that should be a default setting.
  
  What a great feature! Where would I find that setting on ubock origin?
Just stop using Brave and switch to Firefox. Chromium is spyware.
- Chromium is open source, you can inspect the source code and build it yourself. It's not spyware by default.
  If you're going to try to get people to switch to Firefox, give them a legit reason.
  Also, Firefox itself has telemetry that some would say is spyware. Not to mention, Mozilla has done some sketchy stuff themselves. Recent one is enforcing blocking of extensions on specific domains without user's intervention and picking out their own preferred extensions. (https://lapcatsoftware.com/articles/2023/7/1.html)
  
  The dumb thing is you could very easily demonstrate the "need" for sites to disable extensions by default by making a proof of concept extension that had normal behavior everywhere else, but was able to identify when it was on a bank site and jack your credentials. It's not a lot of code and there's a reason I'm pretty selective on what I install. It can definitely be done.
  Just giving a vague "security" response makes it seem super sketchy.
I've been using Brave on my Windows install. I think it's OK compared to Firefox, but I can't help but feel like all the UI and terminology is very "crypto" tailored.
Anyway, I think this feature is a good idea. I didn't even realize this was a big problem with modern OSes. Out of curiosity, do port scanning features like this escape application sandboxes? (Like flatpak, docker containers, etc?)

14 comments