Live data from Hacker News

LinkedIn is copying the contents of my clipboard on every keystroke

twitter.com

301–310 of 380 posts

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#301

LinkedIn has a history of acting like a cretin: multiple data breaches, dark patterns where they don't fix their buggy mobile site and just put up a disclaimer "problems with the mobile site - download our app" (just so that they can harvest a wider range of data). I managed many marketing campaigns on Linkedin over the years and spent thousands each month on the platform as a corporate user. If you think that paying…

We were trying to recruit via LinkedIn for our startup but soon realized what a shitty business model LinkedIn has. We had to pay around ~5,00EUR for each and every click on "Apply" to our job posting, which doesn't mean they even filled out the form. And now, where LinkedIn is full of Indian scammers (not meant in a racist way, but it is definitely perceived that way) we had costs for a "Local Area" limited job post…

To be fair most of the requests I've had have been from Chinese nationals trying to spearphish me.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#302
post #294
post #289

Earlier quoted context omitted.

> full of Indian scammers (not meant in a racist way, but it is definitely perceived that way) (I'm not Indian but) the non-racist way to say that is 'full of scammers', since the scammers' nationality has nothing to do with your distaste for their behaviour.

No, that's still not quite right. While it removes considerations of race from the comment, it also removes context since it makes it sound as if the scamming is equally distributed globally when everyone knows it isn't.

A) If you're going to throw out blanket statements about "Indian scammers" then you need to do a little better than "everyone knows".

B) Removing the context ("Indian") from OPs post does absolutely nothing to diminish your understanding of the problem (too many scammers dirtying the pool).

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#303

An explanation from LinkedIn: https://twitter.com/eberger45/status/1278843576638570496 ------ Hi @DonCubed . Appreciate you raising this. We've traced this to a code path that only does an equality check between the clipboard contents and the currently typed content in a text box. We don't store or transmit the clipboard contents. ---------- An example of this is in a library we have open sourced, and you can find th…

This should be higher, above all of the mobs teething for vengeance. It’s an innocuous comparison of text input to the pasteboard to prevent unwanted autocorrect insertions.[0] Probably the same code used by TikTok too. the code and and comments are here: [0] https://github.com/linkedin/Hakawai/pull/162/commits/c3f8958...

Seeing the mob mentality surrounding this is honestly scary. All the top voted comments have pretty much decided that this is used for nefarious purposes, with absolutely zero evidence. Same goes for TikTok and the DDG favicon saga from yesterday. Whatever happened to Occam’s (edit: Meant Hanlon's) razor?

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#304

Earlier quoted context omitted.

This should be higher, above all of the mobs teething for vengeance. It’s an innocuous comparison of text input to the pasteboard to prevent unwanted autocorrect insertions.[0] Probably the same code used by TikTok too. the code and and comments are here: [0] https://github.com/linkedin/Hakawai/pull/162/commits/c3f8958...

Seeing the mob mentality surrounding this is honestly scary. All the top voted comments have pretty much decided that this is used for nefarious purposes, with absolutely zero evidence. Same goes for TikTok and the DDG favicon saga from yesterday. Whatever happened to Occam’s (edit: Meant Hanlon's) razor?

Eh. It’s like I already punched you in the face 9 times. The 10th time I’m making a punching motion, you’re probably going to duck away. Even if I wasn’t going to punch you, but instead giving you an ice cream.

If you’re a shitty company (TikTok, LinkedIn) people are going to assume you’re acting shitty when it looks like you’re acting shitty.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#305
post #277
post #267

Earlier quoted context omitted.

Very cool trick! Wonder if Europe has this as well. For email I use JGM.io (my own domain). If I see that address being used elsewhere I know who's being a bad boy

Gmail let's you add tags to your email like firstnamelastname+linkedin@gmail.com. This is really useful for such purposes.

That is true, but is also blocked by many sites. No such thing can happen to a custom domain.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#307

LinkedIn has a history of acting like a cretin: multiple data breaches, dark patterns where they don't fix their buggy mobile site and just put up a disclaimer "problems with the mobile site - download our app" (just so that they can harvest a wider range of data). I managed many marketing campaigns on Linkedin over the years and spent thousands each month on the platform as a corporate user. If you think that paying…

I got my current job that I am happy with through LinkedIn.

I might dislike the platform but it helps me keep contact with my past coworkers and keeps valuable offers come to me for basically no cost.

This is likely why LinkedIn thinks they can be shitty to their users, because their users are motivated to stay.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#308
post #297
post #296

Earlier quoted context omitted.

If all your scammers are from one geographical location halfway across the world, it is fine to refer to it and you shouldn't be shamed for naming it. Lest we police ourselves into ignorance.

And if all the immigrants you don't like are from the same place?

That’s completely different, because it’s based on your personal opinion/attitude towards certain people. On the other hand, calling scammers who they are is not subjective (unless you’re falsely accusing someone).

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#309

An explanation from LinkedIn: https://twitter.com/eberger45/status/1278843576638570496 ------ Hi @DonCubed . Appreciate you raising this. We've traced this to a code path that only does an equality check between the clipboard contents and the currently typed content in a text box. We don't store or transmit the clipboard contents. ---------- An example of this is in a library we have open sourced, and you can find th…

Many other apps are doing this as well. At this point, I think anyone that uses this technique should be very transparent about this and explain it to users or just remove this feature. Otherwise, it's too late when a tweetstorm is out.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#310
post #247

Earlier quoted context omitted.

> what, exactly, constitutes "direct user request" that both... > 1) does not break common programming techniques (e.g. an application rolling its own GUI, or implementing its own modes/keybindings) A callback method that you can define to do anything you want in your program when the OS hands you the result of a user initiated paste operation because your program had focus. If you want custom keybindings to initiate…

> A callback method that you can define to do anything you want in your program when the OS hands you the result of a user initiated paste operation because your program had focus. If you want custom keybindings to initiate the paste operation, you can register that desire with the OS. Wonderful! Now how does this brilliant little solution account for applications that don't centre their operations on the keyboard? H…

Although I understand your point on the shared buffer, I don't see how else I can share information between two arbitrary apps not explicitly designed for it. Perhaps I should be able to use settings to require an os confirmation dialog, at least for info not copied into the clipboard by the same app, much as users can use noscript. As for Linux, if they don't want to deal with the clipboard, then users need to understand (and should have already) that a buffet style open source ecosystem does come with some risks and rewards that make it a different security paradigm from a centralized os with a lot of basic tools/apps made by the os provider.

Do you have some idea of a better, more secure way to share information between two apps the user alone has decided should be in communication?

Post reply on HN