Guess I'm never copying and pasting anything sensitive on my phone ever again. Still don't understand why clipboard-sniffing isn't behind a permissions flag.
> Still don't understand why clipboard-sniffing isn't behind a permissions flag. Screw permissions flags. Clipboard-sniffing is never justified. Moving data out of the clipboard should only ever happen by direct user request via the OS interaction layer.
LinkedIn is copying the contents of my clipboard on every keystroke
81–90 of 380 posts
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#82Earlier quoted context omitted.
The screen capture is from an iPad Pro. It's not clear how it was getting the Macbook clipboard; via AirDrop maybe? Really that just makes it even more concerning. Edit: Apparently it's Just A Thing: https://support.apple.com/guide/mac-help/copy-and-paste-betw... But you can turn it off by turning off "Handoff", which luckily I already had. Nowhere is it mentioned in the settings UI that this extends to your clipboar…
Handoff really is awesome though. You start browsing a website on your phone, unlock your Mac and boom you can switch to the big screen. Copy a phone number from a website on your Mac, pull out your phone and paste it into the phone app. Once you’re used to it, it seems so obvious
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#83LinkedIn is a subsidiary of Microsoft. I know the title of this post is an excerpt from a tweet, not a headline, but I think it's generally appropriate to call out the parent company in cases like this. For instance: "Microsoft's LinkedIn app is copying the contents of my clipboard on every keystroke."
-- Richard Stallman, probably
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#84We have allowed empires to be built on scummy business practices that are fundamentally user hostile. We are under no obligation to maintain them.
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#85Ever copy and paste sensitive data on your laptop? Clear that clipboard before using your iPhone. Apple's Universal Clipboard may share your clipboard across devices.
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#86Earlier quoted context omitted.
Handoff really is awesome though. You start browsing a website on your phone, unlock your Mac and boom you can switch to the big screen. Copy a phone number from a website on your Mac, pull out your phone and paste it into the phone app. Once you’re used to it, it seems so obvious
That's great when my threat model is "there's a firm boundary between my devices and everything third-party". Now that that's been punctured, it's a nightmare.
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#87Illegal and immoral. How can anyone trust these people with personal data and access to your devices? We have allowed empires to be built on scummy business practices that are fundamentally user hostile. We are under no obligation to maintain them.
This shit is on literally every platform, it's inescapable, and at this point necessary to participate in society.
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#88Earlier quoted context omitted.
> Still don't understand why clipboard-sniffing isn't behind a permissions flag. Screw permissions flags. Clipboard-sniffing is never justified. Moving data out of the clipboard should only ever happen by direct user request via the OS interaction layer.
This is so obviously, blindingly true that I am amazed it’s even possible for apps to do this.
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#89That kind of stuff is not beyond them.
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#90Every day I read about another outrage being committed by another garbage app that I do not have and would never install on my phone. Why do people need a LinkedIn app? Even if you think that you need LinkedIn, can’t you access your please-spam-me account through your browser? Isn’t it obvious that every closed-source mystery program that you install increases your attack surface? You wouldn't click on an email attac…
Perhaps not relevant to LinkedIn specifically, but in general people install these apps because they eventually get fed up with the purposefully crippled mobile website badgering them about it. Ever tried to use Yelp or Reddit's mobile websites? Impossible.