How to Disable JIT

Browser Support Mobile Support
, ,
1

How can I disable JIT in Brave?

I’m trying to figure out how to disable JIT (Just-In-Time compilation) in Brave:

  • On Windows, similar to how Microsoft Edge has Enhanced Security Mode, which disables JIT on Windows.
  • On Android, like how Cromite allows JIT to be disabled directly in its settings.

I know Brave has an option to disable the V8 optimizer in `site settings, but that doesn’t fully turn off all 3 tiers of JIT,

Is there any way to completely disable JIT in Brave on either platform mainly for security?

2

See this issue:

3

Oh, Thank for your comment!

Btw any updates for disabling All three 3 tiers on Android like how Cromite does it?

4

Last time I checked it broke WASM which is used on Brave Search for example and so it wasn’t really a practical option for Brave users. I don’t know whether this has changed though (WASM shouldn’t need the JIT to work).

5

Could your team pls create a ui for it so that we can do it site to site basis? It’d make it easier and more practical.
Thank you!

6

Creating three tiers:

  1. Allow JIT
  2. Balanced (The current implementation)
  3. Disable JIT (Completely)

Feels more practical and better. Pls do consider!
Thank you!

7

I actually tested the Brave Search on Cromite with JIT disabled and on Microsoft Edge with Enhanced Security mode(Which disables JIT)
And Brave search is fully functional

8

The part of Brave Search that requires WASM if I recall correctly is the CAPTCHA. So if you don’t run into a CAPTCHA, you should be fine, but if a CAPTCHA is shown, it may not be possible to get past it without WASM.

9

I’ve been trying to trigger the Brave CAPTCHA since yesterday on Cromite on Android and Edge on Windows, but I couldn’t.

Any ideas on how to trigger it for testing?

10

@wallfruit

For testing an encounter with hCAPTCHA, try the Cloudflare community forum:

‘https://community.cloudflare.com/t/cloudflare-captcha-on-every-website/606078’

11

I often get the CAPTCHA if I search repeatedly for things like "inurl:gclid" (with the quotes), swapping gclid for other URL parts to search for.

(Brave Search uses its own CAPTCHA implementation. Following Cloudflare instructions is not going to help.)

12

Hello there,
I just wanted to ask, are there any possibilities that your team would implement the three-tier JIT implementation which I asked for? Having a UI to manage sites with access to the different levels of V8 optimizer would help maintain a balance b/w security and performance in a better and easier way, just as you pointed out on the GitHub page. I hope you do consider.