Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Browsers
Brave
Brave Browser release info
Message
<blockquote data-quote="oldschool" data-source="post: 898057" data-attributes="member: 71262"><p><em>In case you make use of Brave Rewards,</em> this info is from: <a href="https://www.reddit.com/r/brave_browser/comments/i375bp/regarding_rewards_support_please_read/" target="_blank">The Brave Developers</a></p><p></p><p>Dear Brave Community,</p><p>As you may have noticed, some Community threads surrounding Ads have become “unlisted” on the forum, and you may have even seen a DM you sent one of us get deleted. We’d like to provide some context around these actions, to clear up any worries.</p><p></p><p><strong>What was the issue?</strong></p><p>Prior to the release of Brave stable version 1.11.101, there was an issue where the brave://rewards-internals Logs page contained <em>too much</em> information, some of which could lead to loss of funds if it fell into the wrong hands. This additional information was noticed thanks to user hihouhou on HackerOne and a fix was released shortly thereafter to remove the sensitive data from the logs. However, this also forced us to think about how these logs and other sensitive information often required to resolve Rewards issues ought to be collected and processed.</p><p></p><p>Up until this point, the process was to essentially assess a user’s support request on Community (or other social platforms) and, if necessary, request that the users send us a private message containing their brave://rewards-internals information, often including their internals Logs. We would then look through those direct messages, match the user to the thread, and pass the information to the appropriate teams for further investigation.</p><p>As our user base has grown, we realized that this does not scale well. It can be hard to stay organized, ensure that everyone’s information is sent securely, while maintaining a reasonable turnaround time for Rewards/Ads issues.</p><p></p><p><strong>What are we doing to improve this process?</strong></p><p>Since fixing the above-mentioned issue with Logs data, the team has been discussing how to best move forward with collecting user information for technical support. We’ve come up with a plan that we think will be effective, but will require some downtime. Our current plan moving forward is to:</p><p></p><p><strong>Stop collecting</strong> <strong>brave://rewards-internals</strong> **log data (specifically) through any medium:**It is for this reason that you may have seen certain threads set to “Unlisted” or a DM you sent to a member of the Support team get deleted. In short, we needed to halt the old process so that users would not continue to send us their information, and to remove any potentially sensitive data we may have had stored anywhere. This policy will continue moving forward.</p><ul> <li data-xf-list-type="ul">Note: This applies to logs data <em>specifically</em>. The Support team may still ask you for your brave://rewards-internals wallet ID/data (General info tab). This is because the information is safe to give (privately)</li> </ul><p>**Implement a single, official place for users to submit Logs data securely:**With all this said, we will still need to collect Logs data in order to resolve a number of Rewards issues, particularly those related to Brave Ads. As such, we are creating an official page for users to upload their Logs data safely and securely. The goal is to eventually have any/all Rewards data submitted there (wallet info, logs or otherwise), and to eliminate the need for Support to sift through individual DMs/threads. We are working hard to get this implemented as soon as possible and will inform everyone once it’s ready.</p><p></p><ul> <li data-xf-list-type="ul">Note: <strong>While we work on implementing an official path for users to upload their data, we are putting a temporary “hold” on resolving support issues that require logs data.</strong> We understand that this is not ideal and that many users will have to wait to get their issues resolved, but we believe that this temporary wait is preferable to requesting/receiving data in a manner that is anything less than 100% secure. We truly appreciate your patience and understanding. We anticipate development time to only be a couple weeks or less.</li> </ul></blockquote><p></p>
[QUOTE="oldschool, post: 898057, member: 71262"] [I]In case you make use of Brave Rewards,[/I] this info is from: [URL='https://www.reddit.com/r/brave_browser/comments/i375bp/regarding_rewards_support_please_read/']The Brave Developers[/URL] Dear Brave Community, As you may have noticed, some Community threads surrounding Ads have become “unlisted” on the forum, and you may have even seen a DM you sent one of us get deleted. We’d like to provide some context around these actions, to clear up any worries. [B]What was the issue?[/B] Prior to the release of Brave stable version 1.11.101, there was an issue where the brave://rewards-internals Logs page contained [I]too much[/I] information, some of which could lead to loss of funds if it fell into the wrong hands. This additional information was noticed thanks to user hihouhou on HackerOne and a fix was released shortly thereafter to remove the sensitive data from the logs. However, this also forced us to think about how these logs and other sensitive information often required to resolve Rewards issues ought to be collected and processed. Up until this point, the process was to essentially assess a user’s support request on Community (or other social platforms) and, if necessary, request that the users send us a private message containing their brave://rewards-internals information, often including their internals Logs. We would then look through those direct messages, match the user to the thread, and pass the information to the appropriate teams for further investigation. As our user base has grown, we realized that this does not scale well. It can be hard to stay organized, ensure that everyone’s information is sent securely, while maintaining a reasonable turnaround time for Rewards/Ads issues. [B]What are we doing to improve this process?[/B] Since fixing the above-mentioned issue with Logs data, the team has been discussing how to best move forward with collecting user information for technical support. We’ve come up with a plan that we think will be effective, but will require some downtime. Our current plan moving forward is to: [B]Stop collecting[/B] [B]brave://rewards-internals[/B] **log data (specifically) through any medium:**It is for this reason that you may have seen certain threads set to “Unlisted” or a DM you sent to a member of the Support team get deleted. In short, we needed to halt the old process so that users would not continue to send us their information, and to remove any potentially sensitive data we may have had stored anywhere. This policy will continue moving forward. [LIST] [*]Note: This applies to logs data [I]specifically[/I]. The Support team may still ask you for your brave://rewards-internals wallet ID/data (General info tab). This is because the information is safe to give (privately) [/LIST] **Implement a single, official place for users to submit Logs data securely:**With all this said, we will still need to collect Logs data in order to resolve a number of Rewards issues, particularly those related to Brave Ads. As such, we are creating an official page for users to upload their Logs data safely and securely. The goal is to eventually have any/all Rewards data submitted there (wallet info, logs or otherwise), and to eliminate the need for Support to sift through individual DMs/threads. We are working hard to get this implemented as soon as possible and will inform everyone once it’s ready. [LIST] [*]Note: [B]While we work on implementing an official path for users to upload their data, we are putting a temporary “hold” on resolving support issues that require logs data.[/B] We understand that this is not ideal and that many users will have to wait to get their issues resolved, but we believe that this temporary wait is preferable to requesting/receiving data in a manner that is anything less than 100% secure. We truly appreciate your patience and understanding. We anticipate development time to only be a couple weeks or less. [/LIST] [/QUOTE]
Insert quotes…
Verification
Post reply
Top
