9
submitted 1 month ago* (last edited 1 month ago) by renzev@lemmy.world to c/bravebrowser@lemmy.ml

Update

Apparently this is patched out by Brave, but it is enabled by default. See u/Engywuck@lemm.ee 's comment below!


Vanilla chromium gives google's websites special treatment by offering detailed CPU info, among other things. This is implemented through a hidden browser extension. You can prove this by yourself by running chrome.runtime.sendMessage("nkeimhogjdpnpccoofpliimaahmaaome", {method: "cpu.getInfo"}, (response) => {console.log(JSON.stringify(response, null, 2)); }, ); on google.com through the browser console. For me, it gives the following info:

{
  "value": {
    "archName": "x86_64",
    "features": [
      "mmx",
      "sse",
      "sse2",
      "sse3",
      "ssse3",
      "sse4_1",
      "sse4_2",
      "avx"
    ],
    "modelName": "Intel(R) Core(TM) i7-2620M CPU @ 2.70GHz",
    "numOfProcessors": 4,
    "processors": [
      {
        "usage": {
          "idle": 28238205,
          "kernel": 827581,
          "total": 32762960,
          "user": 3697174
        }
      },
      {
        "usage": {
          "idle": 1455131,
          "kernel": 743391,
          "total": 6209241,
          "user": 4010719
        }
      },
      {
        "usage": {
          "idle": 1448653,
          "kernel": 769970,
          "total": 6068506,
          "user": 3849883
        }
      },
      {
        "usage": {
          "idle": 1450274,
          "kernel": 744886,
          "total": 5948597,
          "user": 3753437
        }
      }
    ],
    "temperatures": []
  }
}

Note that this doesn't work on other websites like lemmy.world, only google.

What I am confused about is that I can replicate this behavior in Brave. Why does brave reveal this information to google, and to google only? From what I understand, it can be used for fingerprinting and tracking. Shouldn't this be patched out? Is my testing methodology flawed? Will this be fixed?

Brave version: Version 1.67.123 Chromium: 126.0.6478.126 (Official Build) unknown (64-bit) running on linux via flatpak

top 2 comments
sorted by: hot top controversial new old
[-] Engywuck@lemm.ee 3 points 1 month ago* (last edited 1 month ago)

Deactivate Settings -> Extensions -> Hangouts and it won't work anymore.

By the way, they're already on it, as a PR for the removal of this extension has already been posted: https://github.com/brave/brave-core/pull/24583

[-] renzev@lemmy.world 2 points 1 month ago

Thank you, this did it!

this post was submitted on 10 Jul 2024
9 points (90.9% liked)

Brave Browser

775 readers
1 users here now

Unofficial Brave Community

Release Overview - Stable Versions

Keep in mind that the official changelog website is often behind actual release versions, the website is maintained by marketing people. Also note that not every single change/issue is mentioned in the release notes, because lots of changes are done in the background e.g. filter-list changes etc.


Community Rules

  • Be civil.
  • Do not troll.
  • Stay on topic.
  • No hate allowed.
  • No witch-hunt allowed.
  • Reviews are allowed.
  • People are freely allowed to ask questions and express their concerns on a civil manner. Make sure if its unrelated to the topic to create a separate thread do not hijack existent threads.
  • Accept other people opinions.
  • No fanboyism tolerated, not for nor against Brave Browser or the Dev Team.
  • No bias, take news and given Info - as is - and do not wrongly interpret something more into it.
  • No affiliate or promotion from external marketing people are allowed in here, if you are such a person contact a Mod first.

Useful Resources

Copyright and Credit

  • Logos and design as well as trademarks are respected. Credit for Logos goes to the actual authors and copyright owners.
  • Brave has the rights on their own logos and banners, please DM or send me an eMail if you have a problem regarding copyright and I will happily address all concerns.
  • I do not tolerate username squatting.

founded 2 years ago
MODERATORS