Brave (based on Chrome, minus Google tracking) includes optional Tor in private tabs, anti-tracking and ad blocking. By making Tor accessible to all users of Brave, it makes Tor users slightly less of an anomaly. Brave has also added capacity to the Tor network.
Sorry what? Tor inside a non Firefox(resistFP)/Tor browser?
I really hope this is just a very foolish mistake since what they are doing by this is defragementing Tor browser(s) and making it easier for adversaries to identify a target.
There probably aren't even as many Brave users total as there are Tor Browser users making someone who uses Tor inside Brave instantly worldwide unique.
Also appearently Brave is a Chromium based browser. Then why is it on a list called "privacytools"? Last time I checked Webkit/Blink based browsers have no possiblity of counteracting fingerprinting or zombie cookies in any way shape or form.
Looking at Apache logs while debugging I was pretty disappointed to discover that Brave leaks artifacts like specific phone model in the useragent string.
Brave users of Tor tabs have a different fingerprint than users of the normal Tor browser. Having a larger anonymity set may be preferable for some people's threat model.
If you are among "did not download Tor browser" but are among "produces Tor web traffic without downloading Tor browser" you are easier to identify than if you were among "Downloaded Tor browser and produces Tor (web) traffic".
This would make you either more suspicious or your adversary (justifiedly) think you are an idiot.
Setting aside all the privacy risks associated by using a Webkit/Blink based Browser, using Tor inside Brave is like someone with a mask screaming "HERE I AM". Even though they have a mask on everybody sees you and hears you and your mask looks different to everybody elses so what's the point of the mask after all?
The mask only works if everyone is wearing the exact same mask. Which is the exact opposite of what Brave is doing.
