Hot Take Brave is beginning to suck.

Brave
48 Replies 2,114 Views
The level?
It’s the sandbox protection that’s extended to areas not covered by default.

It doesn’t make anything worse.
In fact, it improves security.

On the contrary, my sandbox settings actually improve resistance to browser vulnerabilities that can be exploited remotely.
So, ultimately, they improve resistance to malware capable of exploiting certain sandbox escapes.
Can you name the attack that your improved sandbox could prevent, while my default couldn't? Any real-world scenario and not something produced in the lab? I'd genuinely like to know the difference. 🙂

Changing the sandbox settings also has its effects on performance. For me personally, it isn't worth trading performance over improved sandbox due to how exceptionally rare these attacks are. I think it's more likely for me to win a lottery that to stumble upon malicious website that has ability to escape browser sandbox.

I want to remind you that the purpose of sandbox in the web browser isn't protection from malware rather to isolate tabs so websites can't access your OS or other tabs.
It's impossible for you to do that, even if you use 400,000 rules in your filters list,especially on websites in your language,as I explained in my previous post.

Have a nice day.
I'm not sure I understand, what isn't possible? Just add Italian filter list to Brave and your regional websites are covered too. Brave along with its ad blocker is way more optimized on Android than Firefox and uBlock Origin.

I tried both and battery lasts far longer with Brave than with Firefox + uBlock Origin combo. That's why I can't replace it with anything else, because better solution still doesn't exist. It's strange to me that you use Firefox on Android, when Chromium browsers are superior in every single way on the platform.

You too have a nice day!
 
Can you name the attack that your improved sandbox could prevent, while my default couldn't? Any real-world scenario and not something produced in the lab? I'd genuinely like to know the difference. 🙂

Changing the sandbox settings also has its effects on performance. For me personally, it isn't worth trading performance over improved sandbox due to how exceptionally rare these attacks are. I think it's more likely for me to win a lottery that to stumble upon malicious website that has ability to escape browser sandbox.

I want to remind you that the purpose of sandbox in the web browser isn't protection from malware rather to isolate tabs so websites can't access your OS or other tabs.

I'm not sure I understand, what isn't possible? Just add Italian filter list to Brave and your regional websites are covered too. Brave along with its ad blocker is way more optimized on Android than Firefox and uBlock Origin.

I tried both and battery lasts far longer with Brave than with Firefox + uBlock Origin combo. That's why I can't replace it with anything else, because better solution still doesn't exist. It's strange to me that you use Firefox on Android, when Chromium browsers are superior in every single way on the platform.

You too have a nice day!

It wouldn't do any good.
I suggest you take a screenshot of your Brave://sandbox and have the AI analyze it, focusing especially on the "features" and "AppContainer".
Or you could study the topic.

Moving on to the other topic is just as pointless.:unsure:
I'll leave it at that, without further comment.
 
It wouldn't do any good.
I suggest you take a screenshot of your Brave://sandbox and have the AI analyze it, focusing especially on the features and AppContainer.
Or you could study the topic.
Look... all my point is, there's literally no need to adjust any of the sandboxing settings. If malicious website can escape sandbox, it will escape it doesn't matter which sandbox settings you used. Malicious websites like that are basically non-existent in the wild and only limited to lab environment. There are higher chances of you winning the lottery than to stumble upon a website like this.

Not every hacking attack costs the same or is worth always doing; there's a reason why Pegasus spyware isn't widespread—attacks like this are highly sophisticated and VERY expensive to be wasted on an unimportant individuals like you or me.

And It's really bad to rely exclusively on AI for security advice and could be potentially dangerous. I firmly believe that the security settings developer set are more than enough protecting us from any threats. As a developers, they know what they are doing. Any tinkering with the settings you're not familiar with (again, asking AI doesn't make you professional security researcher) could even make you more vulnerable than you really are with default settings.

Imagine being sick, going to doctor which prescribes you medication. You come home, and ask AI how to heal faster, and the AI says drink 80% alcohol along with the pill doctor prescribed you, because "alcohol kills viruses and bacteria". Doctor certainly knows what he's doing and why he prescribed you medication that he did. AI has no idea what helps, what not nor does it know your illness history. AI only has what random stranger wrote somewhere, and trust me when I say it, professional security researches don't hang out on Reddit or other forums in browser-related topics to give advice what user should do and what not.
 
Last edited:
I'm grateful I like & use Libre Wolf 99,99% of the time & no problems on many sites, in 33 years I have not had any known malware, my speedometer scores with Wolf 22.8 no VPN but with uBlock.

SO.jpg
 
Last edited:
Yandex is a unbeatable; even uBOL fails to block Yandex weather ads with RU filters enabled.
A recent re-evaluation for Yandex weather resilent ads

AG with only default ad filter list successfully blocks, even without RU list
uBOL with default ad filter lists fails, but manages to block after selecting RU list
Ghostery with default filter lists fails, even after selecting RU list; the same applies ot Brave shields
 
KEEP EXPLORING

Similar threads

Another perspective. Your next conversation.

Community
Security tip
Protect the phone's sign-in role. If your phone holds passkeys or authentication tools, plan how to recover accounts before replacing or resetting it. Check each service's recovery process while you still have access.
Back
Top