HackerNews中文版

所以，Brave 浏览器现在在桌面端默认启用了投屏功能——而且是在更新后悄无声息地进行的，没有明确的通知或征得同意？这是什么新花样？一个以隐私为先的浏览器不应该默认开启网络发现功能，就好像它是一个无关紧要的设置一样。如果 Brave 团队的运营目标是扩大浏览器的攻击面（比他们已经拥有的还要多），那么他们已经有了一个良好的开端。强迫用户手动选择退出媒体路由器来保护他们的系统和数据，这直接违背了“默认隐私”的原则。这正是许多用户离开 Chrome 浏览器想要避免的行为。媒体路由器不仅仅是一个无害的便捷开关。在后台，它依赖于自动设备发现协议，例如本地网络上的 SSDP 和 UPnP。这意味着浏览器正在积极参与多播发现流量，并探测那些宣传投屏端点的设备。默认启用此行为会改变浏览器的网络足迹，并引入原本不存在的额外代码路径和交互。任何执行自动设备发现的功能都应被视为一项对安全敏感的功能。SSDP 在配置不当的环境中被滥用已有很长的历史，扩大浏览器对该生态系统的参与会增加潜在的攻击面。至少，它会放大可观察到的网络活动，并暴露可以由本地网络上的设备触发的额外逻辑。在用户不知情或没有解释的情况下悄悄地开启这项功能，这与负责任的安全设计背道而驰。用户没有被警告，没有被询问，也没有被告知该功能的作用或它使用的协议。这根本不像“默认隐私”的样子。如果 Brave 希望其隐私声明保持可信，那么这种情况需要改变。显然，当涉及到便捷功能时，Brave 的隐私品牌是可以商量的。在后台悄悄启用网络发现功能，这正是 Brave 声称要反对的那种做法。

查看原文

So, Brave now enables Casting by default on desktop — and does so silently, without explicit notification or consent after an update? What fresh hell is this?A browser that markets itself as privacy‑first should not be turning on a network discovery feature by default as if it were a trivial setting. If the Brave team’s operational goal is to expand the browser’s attack surface (more than they already have) they’ve made a strong start. Forcing users to manually opt out of Media Router to protect their systems and data directly contradicts the principle of “privacy by default.” This is exactly the kind of behavior many users left Chrome to avoid.Media Router is not a harmless convenience toggle. Under the hood, it relies on automatic device discovery protocols such as SSDP and UPnP on the local network. That means the browser is actively participating in multicast discovery traffic and probing for devices that advertise casting endpoints. Enabling this behavior by default alters the browser’s network footprint and introduces additional code paths and interactions that would otherwise not exist.Any feature that performs automated device discovery should be treated as a security‑sensitive capability. SSDP has a long history of being abused in poorly configured environments, and expanding the browser’s participation in that ecosystem increases the potential attack surface. At a minimum, it amplifies observable network activity and exposes extra logic that can be triggered by devices on the local network.Quietly turning this on without user knowledge or explanation is the opposite of responsible security design. Users were not warned, not asked, and not given any transparency about what the feature does or which protocols it uses. That is not what “privacy by default” looks like.If Brave wants its privacy claims to remain credible, this needs to change. Apparently Brave’s privacy branding is negotiable when convenience features are involved. Quietly enabling network discovery features in the background is exactly the sort of practice Brave claims to stand against.

默认启用媒体路由器会损害Brave的隐私声明。