Will brave debloating by changing registry values create a new attack surface?

Questions
1

Here is my script:

Windows Registry Editor Version 5.00
; Clean Brave Debloat Policy
; AI, Rewards, Telemetry, and Feature Controls Only

[HKEY_LOCAL_MACHINE\\Software\\Policies\\BraveSoftware\\Brave]
; === AI / Chat ===
“BraveAIChatEnabled”=dword:00000000

; === Rewards / Wallet / VPN ===
“BraveRewardsDisabled”=dword:00000001
“BraveWalletDisabled”=dword:00000001
“BraveVPNDisabled”=dword:00000001

; === Network / Privacy / Telemetry ===
“TorDisabled”=dword:00000001
“BraveP3AEnabled”=dword:00000000
“BraveStatsPingEnabled”=dword:00000000
“BraveWebDiscoveryEnabled”=dword:00000000

; === Brave Features ===
“BraveNewsDisabled”=dword:00000001
“BraveTalkDisabled”=dword:00000001
“BraveSpeedreaderEnabled”=dword:00000000
“BraveWaybackMachineEnabled”=dword:00000000
“BravePlaylistEnabled”=dword:00000000

; === Sync, Autofill, Passwords, Translate ===
“SyncDisabled”=dword:00000000
“PasswordManagerEnabled”=dword:00000000
“AutofillAddressEnabled”=dword:00000000
“AutofillCreditCardEnabled”=dword:00000000
“TranslateEnabled”=dword:00000000
2 Likes
2

Looks pretty good. Your browser attack surface will be reduced and your OPSEC will improve, but you have other problems to contend with:

  1. Maintaining this script over time against new Brave release versions.
  2. Windows.

There is an official Brave Help page called Group Policy that explains your options in detail for various operating systems:

  • https://support.brave.app/hc/en-us/articles/360039248271-Group-Policy

You can use this resource to further refine your workflow and optimize your configuration (files).

4 Likes
3

In addition to what @FranklyFlawless said, you could take a look at celenity/Titanium: Policies to harden the privacy & security of Chromium-based web browsers. - Codeberg.org

5 Likes
4

Honestly, most of those simply remove bloat and can be configured within the browser to the same effect. You certainly won’t be increasing your attack surface though.

For more thorough browser policies I recommend:

7 Likes