Why some jar are "dangerous" and others are not?

I’ve turned off every option that could be related to safe browsing and for some reason when I download this file: https://legacy.curseforge.com/minecraft/bukkit-plugins/dynmap/download/4585831 brave will say it’s dangerous and ask me if I want to keep it or delete it. It’s a jar file, and this does NOT happen for most other jar files like this one: https://www.spigotmc.org/resources/viabackwards.27448/download?version=499649

What is going on? Is Brave checking my downloads or the domains I download from against some list? I don’t like this.

Version 1.52.126 Chromium: 114.0.5735.133 (Official Build) (64-bit)

When you disable Safe Browsing, both should be marked as ‘dangerous’.
Sometimes other files are an exception to the ‘always mark them as dangerous, because we can’t verify them’ since they have a signature and all that.

Eventually this is not going to be a problem, because Brave released a flag to avoid this danger message in Nightly yesterday:

Override download danger level

Disables download warnings for files which are considered dangerous when Safe Browsing is disabled. Use at your own risks. Not recommended. – Mac, Windows, Linux

#brave-override-download-danger-level

But I tested and both JAR and they were marked as dangerous.

It’s strange that it marks both for you. I tried again and the second one is not marked for me, nor most of the jar files I download. And those were all new files that I had never downloaded before, new filenames, new content, so I’m not sure why it’s flaky like that for me.

It’s nice that a flag to block this message has been added though personally I actually like the message, I just didn’t like the possible implications of having it show only for some files, because to me it seemed like it was using some kind of reputation service.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.