Live data from Hacker News

LinkedIn is copying the contents of my clipboard on every keystroke

twitter.com

231–240 of 380 posts

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#231
post #5

Guess I'm never copying and pasting anything sensitive on my phone ever again. Still don't understand why clipboard-sniffing isn't behind a permissions flag.

Not a fan of any of the big tech companies, but Apple needs to be applauded for this feature. Can't wait to see how many such behavior is exposed by iOS 14

Why should they be applauded if they knew about the problem? notifying you about it is not enough... they need to let you act on it.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#232

LinkedIn has a history of acting like a cretin: multiple data breaches, dark patterns where they don't fix their buggy mobile site and just put up a disclaimer "problems with the mobile site - download our app" (just so that they can harvest a wider range of data). I managed many marketing campaigns on Linkedin over the years and spent thousands each month on the platform as a corporate user. If you think that paying…

I mean I've definitely been contacted by FAANG companies out of no where and got interviews through that.

I was contacted by Google and interviewed based on my profile page on the crufty, tag soup website of my employer at the time. shrug

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#233

Earlier quoted context omitted.

I'm curious - have you ever actually looked into how clipboards work across various OSes? Because programmatic clipboard access is the norm pretty much across the board.

It doesn't have to be though. Especially on a platform that only has one UI toolkit, controlled by the vendor.

Ah, so _now_ we're asking Apple to disallow any UI development whatsoever outside of using the components in the UIKit and AppKit SDKs (and screw you if you want to develop any sort of interface that's not supported or intended to be supported out of the box by the above)? Very interesting indeed.

I understand the outrage over programs abusing the resources they have access to, but frankly this is just approaching hysteria. This is the equivalent of reading an article about an app snooping at documents you didn't open for sensitive data and jumping to the conclusion that operating systems should not support programmatic access to the filesystem.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#235

LinkedIn has a history of acting like a cretin: multiple data breaches, dark patterns where they don't fix their buggy mobile site and just put up a disclaimer "problems with the mobile site - download our app" (just so that they can harvest a wider range of data). I managed many marketing campaigns on Linkedin over the years and spent thousands each month on the platform as a corporate user. If you think that paying…

When I added phone number for OTP(2FA) couple of years back(No TOTP support then) it got automatically added to my profile and guess what? When mobile number is added to the LinkedIn profile it is made visible to all your contacts. I didn't know it was the case until some random person started messaging me on WhatsApp and told me he saw my number on LinkedIn.

Now, they have support for TOTP apps which we can use without giving LinkedIn our phone number and they claim 'Mobile phone numbers added here won't be displayed on your LinkedIn profile.'; But I'm not willing to test it, not entering my phone number in LinkedIn ever.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#237

Earlier quoted context omitted.

The clipboard is controlled by the OS. When you 'paste' the OS sends the contents to the app. There is no need for an app to have access to the clipboard.

I'm curious - have you ever actually looked into how clipboards work across various OSes? Because programmatic clipboard access is the norm pretty much across the board.

Except on the most popular application platform available of today: the web. Imagine if every website could read your system clipboard at will.

I'm honestly amazed and horrified to learn that smartphone apps on the 2 OSs have this capability. This capability, used legitimately, can only bring a very, very slight UX improvement.

At this point, we know smartphone apps exploit any avenue they have to extract data from their users, regardless of the perceived ethicality of their vendor. The smartphone vendors more than any others know this. If there's an entity to direct the blame towards it's Apple and Google for allowing this, when fixing it on their part would be so trivial.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#238

LinkedIn has a history of acting like a cretin: multiple data breaches, dark patterns where they don't fix their buggy mobile site and just put up a disclaimer "problems with the mobile site - download our app" (just so that they can harvest a wider range of data). I managed many marketing campaigns on Linkedin over the years and spent thousands each month on the platform as a corporate user. If you think that paying…

If you build good relationships with people in the real world this can actually help you on LinkedIn.

I have had many job discussions/offers come through my LinkedIn mailbox from competitor companies.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#239

Earlier quoted context omitted.

It doesn't have to be though. Especially on a platform that only has one UI toolkit, controlled by the vendor.

Ah, so _now_ we're asking Apple to disallow any UI development whatsoever outside of using the components in the UIKit and AppKit SDKs (and screw you if you want to develop any sort of interface that's not supported or intended to be supported out of the box by the above)? Very interesting indeed. I understand the outrage over programs abusing the resources they have access to, but frankly this is just approaching hy…

I'll give a similar reply as I did to your other comment: the most popular platform for interacting with low-trust applications, the web, sanely does not allow apps to access your whole filesystem. It would have never thrived as it did if users had to limit themselves to a small selection of vendors they can thrust with their whole system.

There's a huge difference in usage between apps on desktop OSs, which are often of less commercial nature, open-source, and more carefully vetted by centralized gatekeepers, and the mobile app ecosystem, where any random fast food chain will entice you to install their app to make an online order. The smartphone app ecosystem has to be low trust, like the web.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#240
post #237

Earlier quoted context omitted.

I'm curious - have you ever actually looked into how clipboards work across various OSes? Because programmatic clipboard access is the norm pretty much across the board.

Except on the most popular application platform available of today: the web. Imagine if every website could read your system clipboard at will. I'm honestly amazed and horrified to learn that smartphone apps on the 2 OSs have this capability. This capability, used legitimately, can only bring a very, very slight UX improvement. At this point, we know smartphone apps exploit any avenue they have to extract data from t…

> Except on the most popular application platform available of today: the web.

The web is not an operating system, for goodness' sake. A browser is itself an application no different from a terminal emulator + shell (which also is capable of running arbitrary other applications within its context).

> I'm honestly amazed and horrified to learn that smartphone apps on the 2 OSes have this capability.

Prepare to be even more "amazed" and "horrified": I am willing to bet that whatever desktop OS/distro you use does the same damn thing (providing apps with programmatic access to the clipboard or clipboards).

If you don't want other applications to access some data, for heaven's sake don't put it in what is literally a shared buffer between applications.

Post reply on HN