Could they be doing this as a way to detect scrapers? I think Linkedin has always been a hot target for smart sales tools to scrape for information.
LinkedIn is copying the contents of my clipboard on every keystroke
211–220 of 380 posts
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#212Guess I'm never copying and pasting anything sensitive on my phone ever again. Still don't understand why clipboard-sniffing isn't behind a permissions flag.
Well, once upon a time you trusted the code running on your device. In Chrome on Android, the flag you want is under Settings | Site Settings | Clipboard | Ask before allowing sites to read text and images from the clipboard , and I think it's on by default.
Funny how you are promoting Chrome and Android when I've known for a fact that Google Maps has done this since forever because when you open the app immediately if and only if it's an address it suggests whatever is on your clipboard as a destination. This means 1) there's code running somewhere grabbing the clipboard and deciding if it's an address (might ping home) 2) it has to copy the clipboard all the time to do that.
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#213This is apparently coming from an open-sourced component called Hakawai.
Somebody had to scramble to remove the clipboard code ASAP: https://github.com/linkedin/Hakawai/commit/fa7e8497040f5c36e...
Edit: Don't do mobile, but seems like it was a hack to distinguish between text that was pasted and text added by autocorrect
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#214After LinkedIn took the contents of my Contacts and uploaded it. I swore I would never install it to another mobile device again.
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#215Earlier quoted context omitted.
How, precisely, do you propose this would work with raw keyboard modes? Or graphical context menus? The discussion around this is so strange and weirdly nontechnical to me.
This is far from my area of expertise, so let me know if I'm incorrect anywhere. Here is how I imagine thing are: Currently: application queries clipboard state and gets back some structured data. (quick googling confirmed this). Proposed: application gets a message when CTRL-V is clicked along with the same data that currently gets returned when clipboard is queried.
Again, how exactly do you propose that "get a message when CTRL-V is clicked" would work with:
- raw keyboard modes (in which an application gets input straight off the keyboard because it wants to do its own keyboard processing)
- graphical context menus (user clicks on a paste button within the app, or even uses a voice or other control - how does the application communicate to the OS "my user wants to paste"? Or does your back-of-the-napkin fix require users to only use devices with keyboards and only use the keyboard?)
Amongst other technical considerations. It's almost as if pretty much every major OS/windowing system has ways of programmatically accessing the shared clipboard for a reason.
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#216You have to imagine the Apple engineers who implemented this new clipboard notification knew this shitstorm was coming.
Now if only they would finally Sherlock Little Snitch for iOS; the amount of spyware embedded in almost every single app in the App Store is astounding. I make a point of knowing about this stuff and even I was flabbergasted the first few times I ran my iPhone via a proxy. Apple claims that you consented you this when you agreed to the App Store TOS.
There are so-so approximations of it, like the guardian vpn/firewall: https://guardianapp.com/
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#217Earlier quoted context omitted.
Android also had permissions from the beginning.
It only declared and didn't let you individually toggle permissions until version 6.0. You just had to take-or-leave the app as-is. I don't know whether or not it declared them from the very beginning.
I remember giant take-it-or-leave-it permission warnings for apps back on 2.1 when I had my Nexus One. Updates that changed permissions would just give you the whole list again with no hint as to what had changed, it was awesome in its user-hostility.
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#218An explanation from LinkedIn:
https://twitter.com/eberger45/status/1278843576638570496
------ Hi @DonCubed . Appreciate you raising this. We've traced this to a code path that only does an equality check between the clipboard contents and the currently typed content in a text box. We don't store or transmit the clipboard contents.
----------
An example of this is in a library we have open sourced, and you can find the fix here [https://github.com/linkedin/Hakawai/ (https://github.com/linkedin/Hakawai/pull/161/files/3881de368...). We will follow up once the fix is live in our app.
-----------
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#219This is apparently coming from an open-sourced component called Hakawai. Somebody had to scramble to remove the clipboard code ASAP: https://github.com/linkedin/Hakawai/commit/fa7e8497040f5c36e... Edit: Don't do mobile, but seems like it was a hack to distinguish between text that was pasted and text added by autocorrect
As I understand, it is closed-source code causing the problem described. Erran Berger linked to that Hakawai commit as an example of a different, open-source project under the LinkedIn umbrella that has the same problem.
Re: LinkedIn is copying the contents of my clipboard on every keystroke
#220LinkedIn has a history of acting like a cretin: multiple data breaches, dark patterns where they don't fix their buggy mobile site and just put up a disclaimer "problems with the mobile site - download our app" (just so that they can harvest a wider range of data). I managed many marketing campaigns on Linkedin over the years and spent thousands each month on the platform as a corporate user. If you think that paying…
I finally gave up - I deleted my existing LinkedIn account and replaced it with one that says “I do not use LinkedIn and will not accept your invites or read any message you send to me. If you’d like to learn more about me or get in touch, please see my personal website at (me).com” I’ve been off social media for years, but for some reason I still maintained a LinkedIn site which never actually delivered any value.