From article:

If you have the Brave Browser installed on your Windows devices, then you may also have Brave VPN services installed on the machine. Brave installs these services without user consent on Windows devices.

More reason to ditch the crypto bro browser.

  • funkajunk@lemm.eeEnglish
    4·
    1 year ago

    Not that I’m defending anybody but how is this touching your “network stack” any more than any other application?

    • t3rmit3@beehaw.org
      12·
      1 year ago

      because a VPN is both a new network interface, and it has the ability to change how your traffic routes. Most applications don’t do that.

      • funkajunk@lemm.eeEnglish
        1·
        1 year ago

        I see now that it was adding a wireguard interface, but without seeing the configuration being used, there’s no telling if they are routing anything more than the traffic from the browser.

        As an aside, are you serving applications from your workstation?

        • t3rmit3@beehaw.org
          3·
          1 year ago

          Whether they route only the browser or traffic or not, that is messing with my traffic routing, and that’s dangerous. If they control the VPN exit node (but especially if they control that AND the browser), they can do almost anything they want with/ to your browser traffic.

          Not sure what me serving out applications from my endpoint device has to do with this, but yes, I sometimes do (LAN games, netcat listeners, python servers, etc).

        • abhibeckert@beehaw.org
          2·
          1 year ago

          there’s no telling if they are routing anything more than the traffic from the browser

          Yeah that’s the problem “there’s no telling”. Messing with network settings is opening a can of worms and highly likely to cause problems one day.