{"id":8977,"date":"2020-06-09T00:23:13","date_gmt":"2020-06-08T21:23:13","guid":{"rendered":"https:\/\/forklog.media\/?p=8977"},"modified":"2020-06-09T05:23:36","modified_gmt":"2020-06-09T02:23:36","slug":"private-browser-brave-called-out-for-binance-affiliate-links-in-autocomplete-community-trust-compromised","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/private-browser-brave-called-out-for-binance-affiliate-links-in-autocomplete-community-trust-compromised\/","title":{"rendered":"Private Browser Brave Called out for Binance Affiliate Links in Autocomplete, Community Trust Compromised"},"content":{"rendered":"<p>Brave, a popular privacy-focused browser, has faced a backlash from the community after users noticed affiliate links popping up in the autocomplete form in the browser\u2019s address bar. In a <a href=\"https:\/\/twitter.com\/BrendanEich\/status\/1269313200127795201\">discussion<\/a> on Twitter, Brave CEO Brendan Eich called the links in autocomplete a mistake and promised not to let such a thing happen again.<\/p>\n<p><!--more--><\/p>\n<p>The recent autocomplete issue was highlighted in a post by a cryptocurrency podcast host Yannick Eckl (@cryptonator1337) on June 6th. When he tried to type in the URL binance.us, the autocomplete in the browser suggested an affiliate link with Brave\u2019s identifier added.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"zxx\" dir=\"ltr\"><a href=\"https:\/\/t.co\/GT9NFnE4uf\">pic.twitter.com\/GT9NFnE4uf<\/a><\/p>\n<p>&mdash; CR1337 (@cryptonator1337) <a href=\"https:\/\/twitter.com\/cryptonator1337\/status\/1269260767913795584?ref_src=twsrc%5Etfw\">June 6, 2020<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Brave CEO Brendan Eich responded by calling the incident a mistake and <a href=\"https:\/\/twitter.com\/BrendanEich\/status\/1269377159115636736\">assured<\/a> that all links on the pages and URLs typed in are served as is, no hijacking.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">1\/ We made a mistake, we&#39;re correcting: Brave default autocompletes verbatim &quot;<a href=\"https:\/\/t.co\/hJd0ePInEw\">https:\/\/t.co\/hJd0ePInEw<\/a>&quot; in address bar to add an affiliate code. We are a Binance affiliate, we refer users via the opt-in trading widget on the new tab page, but autocomplete should not add any code.<\/p>\n<p>&mdash; BrendanEich (@BrendanEich) <a href=\"https:\/\/twitter.com\/BrendanEich\/status\/1269313200127795201?ref_src=twsrc%5Etfw\">June 6, 2020<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Brave is <a href=\"https:\/\/brave.com\/binance\/\">known<\/a> to be Binance\u2019s partner. The browser offers a Binance widget integrating simple trading features into the user experience. The affiliate links included in the autocomplete suggestions haven\u2019t been clearly presented or discussed with the community, which is why some felt like the developers tried to sneak the addition in.<\/p>\n<p>Since Brave is heralded as being focused on privacy and putting users in control of ads they see, the community started questioning the credibility of the developers.<\/p>\n<p>https:\/\/twitter.com\/JuliusCrypto\/status\/1269334946474102784<\/p>\n<p>Importantly, Brave\u2019s open-source code on GitHub included affiliate links to other websites as well. The Block\u2019s researcher Larry Chermak tweeted about the same thing going out with Ledger, Trezor, and Coinbase. He mentioned that the links were originally discovered by <a href=\"https:\/\/twitter.com\/DimitarDinev7\">Dimitar Dinev<\/a> of JRR Group.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Looks like it\u2019s not a very isolated mistake. Brave also does this for Ledger, Trezor and Coinbase if you look in their Github <a href=\"https:\/\/t.co\/8PpnlS5jAu\">https:\/\/t.co\/8PpnlS5jAu<\/a> <a href=\"https:\/\/t.co\/JGQ7d23fer\">https:\/\/t.co\/JGQ7d23fer<\/a> <a href=\"https:\/\/t.co\/keorBZiDJL\">pic.twitter.com\/keorBZiDJL<\/a><\/p>\n<p>&mdash; Larry Cermak (@lawmaster) <a href=\"https:\/\/twitter.com\/lawmaster\/status\/1269321803815673856?ref_src=twsrc%5Etfw\">June 6, 2020<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Aside from adding an affiliate tag to <i>binance.com, binance.us, coinbase.com, ledger.com, and trezor.io<\/i>, the browser tagged search queries for <i>bitcoin, btc, ethereum, eth, litecoin, ltc or bnb.\u00a0<\/i><\/p>\n<p>It also turned out that Brave users have been <a href=\"https:\/\/news.ycombinator.com\/item?id=23442027\">noticing<\/a> affiliate links in the browser as far back as 2018. In March 2020, there\u2019s also been a <a href=\"https:\/\/archive.vn\/cAGpe\">debate<\/a> about Brave\u2019s promotion of eToro exchange<\/p>\n<blockquote><p><b><i>\u201cThis ignores the legally required disclosures for affiliate links\u2014the disclosures that Brave also ignored for the eToro links in March. In the US, the FTC has required full disclosure of affiliate marketing since 2009\u2014you have to put it right there on the page. Similar rules apply in the UK and the EU,\u201d <\/i><\/b><i>author and cryptocurrency critic David Gerard <\/i><a href=\"https:\/\/davidgerard.co.uk\/blockchain\/2020\/06\/06\/the-brave-web-browser-is-hijacking-links-and-inserting-affiliate-codes\/\"><i>wrote<\/i><\/a><i>.<\/i><i>\u00a0\u00a0<\/i><\/p><\/blockquote>\n<p>Brave\u2019s Brendan Eich <a href=\"https:\/\/twitter.com\/BrendanEich\/status\/1269404443818119168\">said<\/a> that there\u2019s a way to toggle the affiliate links in autocomplete in the browser settings and announced that the feature will be turned off by default in the following releases.<\/p>\n<p>Notably, despite the generally negative response from the community, some users expressed their support to the project, emphasizing that Brave is still a privacy-focused browser that has advantages over products of Google and Facebook.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Remember Google and Facebook tracks us across services. <br \/>Instead few people get paranoid when nothing bad has happened. It is just an ad in autocomplete when we are about to go that url.<\/p>\n<p>&mdash; Agnel Vishal (@agnelvishal) <a href=\"https:\/\/twitter.com\/agnelvishal\/status\/1269655292280627204?ref_src=twsrc%5Etfw\">June 7, 2020<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>As of the press time, the latest version of the Brave browser available for download still came with affiliate links in autocomplete turned on.<\/p>\n<p><b>Follow us on <\/b><a href=\"https:\/\/twitter.com\/forklogmedia\"><b>Twitter<\/b><\/a><b> and <\/b><a href=\"https:\/\/www.facebook.com\/forklogmedia\"><b>Facebook<\/b><\/a><b> and join our <\/b><a href=\"https:\/\/t.me\/forklogmedia\"><b>Telegram channel<\/b><\/a><b> to know what\u2019s up with crypto and why it\u2019s important.<\/b><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Brave, a popular privacy-focused browser, has faced a backlash from the community after users noticed affiliate links popping up in the autocomplete form in the browser\u2019s address bar. In a discussion on Twitter, Brave CEO Brendan Eich called the links in autocomplete a mistake and promised not to let such a thing happen again.<\/p>\n","protected":false},"author":6,"featured_media":8979,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"","cryptorium_level":"","_short_excerpt_text":"","creation_source":"human_written","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[516,511,573],"class_list":["post-8977","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-advertising","tag-brave","tag-privacy"],"aioseo_notices":[],"amp_enabled":true,"views":"675","promo_type":"1","layout_type":"","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/8977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=8977"}],"version-history":[{"count":2,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/8977\/revisions"}],"predecessor-version":[{"id":8981,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/8977\/revisions\/8981"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/8979"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=8977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=8977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=8977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}