The Brave web browser is hijacking links, and inserting affiliate codes
https://davidgerard.co.uk/blockchain/2020/06/06/the-brave-we...
The Brave web browser is hijacking links, and inserting affiliate codes
https://davidgerard.co.uk/blockchain/2020/06/06/the-brave-we...
What happened was a bug in a keyword and domain autocomplete tier we added. Reminder for those not aware: all browsers add reference codes identifying the browser make (not the user) to keyword queries when you type words into the address bar. This is industry standard. See https://twitter.com/BrendanEich/status/1273327455105773568?s....
The bug in Brave was a flag set wrong for two domain names, which are not keywords: binance.us and binance.com. These should not have default-completed when typed into the address bar with a Binance affiliate code, they should have been suggested completions the user would have had to pick by arrow down and <return> or mouse equivalent. We fixed the defaulting bug and turned off the entire suggested completions feature. As noted by someone else in a comment nearby, we instructed Binance not to pay us for any referred new users who traded (Binance does not pay on the referral, they pay only after if the user trades, sharing a fixed proportion of trading fees).
So this was not "link hijacking" in any case. I'm sorry for the blunder, and we added a process step around any changes to address bar to audit harder.
This may be the change I needed to know about to try Brave at some point.
Are there any plans to get into any Linux distro's repositories? Brave wasn't in Ubuntu's last time I checked, although that was a little while ago.
E: Formatting doesn't like asterisks.
One slight gotcha, if you view the link from Tor it offers an .onion site for the apt repos string, but I wanted the regular repos as I don't use OS-level Tor but happened to be using tor-browser.