Brave browser creates Video capture process without user prompt

[ItsPerryXD]

Despite setting policy in Brave through registry. It still creates a process for video capture. Flag is set to ensure video capture is not ran in browser process. This process remains until restarting the browser. (closing and reopening)

The video capture process is not something that can be reproduced repeatedly meaning this is someone deliberately doing it at random times.

There is a issue with video capture and the audio service as if someone is capable of coding access despite policies and flags set.

[Mattches]

@ItsPerryXD,
This is a utility inherited from the Chromium engine Brave runs on. All other Chromium browsers will show the same utility. Allow me some time to confirm what exactly the utility is/does.

[Mattches]

Yeah so from what I can find, this process typically is spawned when some browser function related to webcam usage. Looks like this could be anything from video conferencing to image capture — it looks like there are even reports of this occurring for [Chrome] users simply using Gmail/Gchat.

That said, all utilities/processes like this go through a security review before making it into Brave — anything that would send telemetry or data anywhere is stripped and removed (or proxied) before an update is pushed. So while it may looks suspicious, there’s really nothing going on here.

Hope this helps.

[ItsPerryXD]

There is something going on as the process is spawning without user prompt and running despite having a policy set to stop it.

I don’t use any form of video conferencing or image capture through brave. All capture service policies / flags are set to disable / turn off those features.

[ItsPerryXD]

Google has changed the wording on “VideoCaptureAllowed” policy.
It requires disabling and setting “VideoCaptureAllowedUrls” to “” (blank).

Otherwise google or anyone that invokes the video capture command was capable to viewing anything the browser showed.