diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9eb73ef3..c8192568 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,7 @@
+# 90.0.4430.101
+* disable RTCGetCurrentBrowsingContextMedia by default
+* disable FLoC by default
+
 # 90.0.4430.92
 * restore horizontal tab switcher feature (fixes https://github.com/bromite/bromite/issues/1077)
 * fix a couple of bugs in proxy saving UI (thanks to @uazo, fixes https://github.com/bromite/bromite/issues/1072)
diff --git a/README.md b/README.md
index 5b59aacf..2bc10bac 100644
--- a/README.md
+++ b/README.md
@@ -60,6 +60,8 @@ ETH donations address: `0xf47ff39223d828f99fec5ab53bd068c5c0522042`
 * ignore enterprise policies that disallow secure DNS
 * ask permission to play protected media
 * disable the DIAL repeating discovery
+* disable RTCGetCurrentBrowsingContextMedia by default
+* disable FLoC by default
 
 ## Features not related to privacy
 * import/export bookmarks
diff --git a/build/RELEASE b/build/RELEASE
index 08c6a3d8..9358c2b9 100644
--- a/build/RELEASE
+++ b/build/RELEASE
@@ -1 +1 @@
-90.0.4430.92
+90.0.4430.101
diff --git a/build/bromite_patches_list.txt b/build/bromite_patches_list.txt
index 8f8f976f..3e93a5e3 100644
--- a/build/bromite_patches_list.txt
+++ b/build/bromite_patches_list.txt
@@ -148,4 +148,6 @@ Remove-offline-measurement-background-task.patch
 User-agent-customization.patch
 Add-AllowUserCertificates-flag.patch
 Add-IsCleartextPermitted-flag.patch
+Disable-RTCGetCurrentBrowsingContextMedia-by-default.patch
+Disable-FLoC-by-default.patch
 Automated-domain-substitution.patch
diff --git a/build/patches/Disable-FLoC-by-default.patch b/build/patches/Disable-FLoC-by-default.patch
new file mode 100644
index 00000000..dadfa7ca
--- /dev/null
+++ b/build/patches/Disable-FLoC-by-default.patch
@@ -0,0 +1,25 @@
+From: csagan5 <32685696+csagan5@users.noreply.github.com>
+Date: Thu, 29 Apr 2021 20:28:16 +0200
+Subject: Disable FLoC by default
+
+This is redundant since the privacy sandbox is already disabled by default,
+but added as an extra measure
+---
+ components/federated_learning/features/features.cc | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/components/federated_learning/features/features.cc b/components/federated_learning/features/features.cc
+--- a/components/federated_learning/features/features.cc
++++ b/components/federated_learning/features/features.cc
+@@ -24,7 +24,7 @@ const base::Feature kFlocIdSortingLshBasedComputation{
+ // required.
+ // TODO(yaoxia): merge other floc features into this one.
+ const base::Feature kFederatedLearningOfCohorts{
+-    "FederatedLearningOfCohorts", base::FEATURE_ENABLED_BY_DEFAULT};
++    "FederatedLearningOfCohorts", base::FEATURE_DISABLED_BY_DEFAULT};
+ constexpr base::FeatureParam<base::TimeDelta> kFlocIdScheduledUpdateInterval{
+     &kFederatedLearningOfCohorts, "update_interval",
+     base::TimeDelta::FromDays(7)};
+-- 
+2.17.1
+
diff --git a/build/patches/Disable-RTCGetCurrentBrowsingContextMedia-by-default.patch b/build/patches/Disable-RTCGetCurrentBrowsingContextMedia-by-default.patch
new file mode 100644
index 00000000..fc62c318
--- /dev/null
+++ b/build/patches/Disable-RTCGetCurrentBrowsingContextMedia-by-default.patch
@@ -0,0 +1,23 @@
+From: csagan5 <32685696+csagan5@users.noreply.github.com>
+Date: Thu, 29 Apr 2021 20:26:31 +0200
+Subject: Disable RTCGetCurrentBrowsingContextMedia by default
+
+---
+ third_party/blink/common/features.cc | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/third_party/blink/common/features.cc b/third_party/blink/common/features.cc
+--- a/third_party/blink/common/features.cc
++++ b/third_party/blink/common/features.cc
+@@ -203,7 +203,7 @@ const base::Feature kRawClipboard{"RawClipboard",
+ // Kill switch for getCurrentBrowsingContextMedia(), which allows capturing of
+ // web content from the tab from which it is called. (crbug.com/1136940)
+ const base::Feature kRTCGetCurrentBrowsingContextMedia{
+-    "RTCGetCurrentBrowsingContextMedia", base::FEATURE_ENABLED_BY_DEFAULT};
++    "RTCGetCurrentBrowsingContextMedia", base::FEATURE_DISABLED_BY_DEFAULT};
+ 
+ // Changes the default RTCPeerConnection constructor behavior to use Unified
+ // Plan as the SDP semantics. When the feature is enabled, Unified Plan is used
+-- 
+2.17.1
+