How LinkedIn detects browser extensions • Hacker News Board

Re: How LinkedIn detects browser extensions

#11

Post by gkoberger » Tue, Jan 08, 2019, 6:37 AM UTC

mirimir wrote: post #2

OK, but why does LinkedIn scan extensions?

To flag accounts that are scraping data or "revealing" email addresses.

Negative view: they're blocking people from circumventing their paid features

Positive view: they're protecting their other users from getting spammed

Re: How LinkedIn detects browser extensions

#12

Post by darkpuma » Tue, Jan 08, 2019, 6:38 AM UTC

mirimir wrote: post #2

OK, but why does LinkedIn scan extensions?

They have zero scruples. This is a company infamous for spamming people.

Re: How LinkedIn detects browser extensions

#13

Post by TeMPOraL » Tue, Jan 08, 2019, 6:43 AM UTC

t0astbread wrote: post #9

tgtweak wrote: post #3

Earlier quoted context omitted.

And, do they need to do it or are they just data mining?

If they don't need it, isn't it illegal to collect that data under the GDPR?

I don't see the repo actually saying they're collecting this data, i.e. sending it back to their servers. It may just be a "reverse adblocker" - a list of signatures of extensions that the website's JS will try to interfere with on the user end.

Re: How LinkedIn detects browser extensions

#14

Post by meitham » Tue, Jan 08, 2019, 6:44 AM UTC

Is this issue unique to Chrome? Does it happen with Firefox?

Re: How LinkedIn detects browser extensions

#15

Post by mweibel » Tue, Jan 08, 2019, 6:46 AM UTC

meitham wrote: post #14

Is this issue unique to Chrome? Does it happen with Firefox?

I do have the same localStorage item in my Firefox. The shown way of decoding the content works too.

Re: How LinkedIn detects browser extensions

#16

Post by [deleted] » Tue, Jan 08, 2019, 6:46 AM UTC

gkoberger wrote: post #6

The repo says "A look at how LinkedIn spies on its users" I'm not convinced this is LinkedIn spying on users... rather, it's them protecting its users from the spammy people using these extensions. There's not a single extensions on that list that doesn't result in someone getting an unsolicited email.

[deleted]

Re: How LinkedIn detects browser extensions

#17

Post by gkoberger » Tue, Jan 08, 2019, 6:48 AM UTC

gkoberger wrote: post #6

The repo says "A look at how LinkedIn spies on its users" I'm not convinced this is LinkedIn spying on users... rather, it's them protecting its users from the spammy people using these extensions. There's not a single extensions on that list that doesn't result in someone getting an unsolicited email.

Here's the full list; they're all spammy recruiting/sales extensions (nothing legit like uBlock or LastPass):

    daxtra
    SalesloftProspector
    SalesLoftCadence
    discoverly
    Ecquire
    Ebstabullhorn
    EbstaSalesforce
    ProspectHive
    talentbin
    Entelo
    Nimble
    amazinghiring
    colabo extension
    StepWells(colabo)
    found.ly
    datananas
    Linkedin-Hubspot Connector
    dux-soup(fixed)
    data Scraper
    aevy
    Lusha
    Lead Generator
    Candidate.ai
    Email Hunter
    Prospectify
    iMacros
    Prophet
    Leadiq
    HirEtuaL
    Contact Out
    Prospect.io
    saleslift.io
    Skrapp
    Slik
    CleverStaff
    Linked Helper
    Get Email
    Sourcehub
    Salestools
    SellHack
    Sourcebreaker
    turboHiring
    LinMailPro
    LinMailNavigator
    Leonard for Linkedin
    LinkeLead
    Loxo Social import
    Jlenty
    Social2Sugar
    Emply
    Linkedroid
    eLink Pro
    LinkMatch for zoho CrM
    LinkMatch for zoho recruit
    inkMatch for CatS
    LinkMatch for PCrecruiter
    LinkMatch for Pipedrive
    LinkMatch for Greenhouse
    Snapaddy Grabber
    ramper
    Linklead.io
    alore.io
    Hr-Skyen
    SeekOut
    Leadkedin
    icebreaker
    Spider for Linkedin
    recruiterNerd
    Crelate
    EyeMail
    Sales Lead Multiplier
    Email Finder
    Linkedin assistant Lily
    auto Connect tools Lily
    adapt Prospector
    Leadconnect
    Linkedbot
    People.camp
    instant data Scraper
    LinkMe tool
    adorito
    gay2sms
    Lusha (FireFox Extension)
    LinkedPro
    LeadGibbon
    Socialbff

And here's the code you can run yourself: https://pastebin.com/Ux684VtL

Re: How LinkedIn detects browser extensions

#18

Post by acct1771 » Tue, Jan 08, 2019, 6:51 AM UTC

gkoberger wrote: post #6

The repo says "A look at how LinkedIn spies on its users" I'm not convinced this is LinkedIn spying on users... rather, it's them protecting its users from the spammy people using these extensions. There's not a single extensions on that list that doesn't result in someone getting an unsolicited email.

> result in someone getting an unsolicited email.

That's pretty ballsy to bring up in a defense of LinkedIn.

Re: How LinkedIn detects browser extensions

#19

Post by kodablah » Tue, Jan 08, 2019, 6:53 AM UTC

gkoberger wrote: post #6

The repo says "A look at how LinkedIn spies on its users" I'm not convinced this is LinkedIn spying on users... rather, it's them protecting its users from the spammy people using these extensions. There's not a single extensions on that list that doesn't result in someone getting an unsolicited email.

Can you link to where they say that? I would figure someone doing something so helpful for users would at least document it. There's no reason to be surreptitious when doing such a favor. One wonders if they'll start offering a LinkedIn AntiVirus download with such an altruistic approach towards protecting users from what they have installed.

Re: How LinkedIn detects browser extensions

#20

Post by gkoberger » Tue, Jan 08, 2019, 6:59 AM UTC

kodablah wrote: post #19

gkoberger wrote: post #6

The repo says "A look at how LinkedIn spies on its users" I'm not convinced this is LinkedIn spying on users... rather, it's them protecting its users from the spammy people using these extensions. There's not a single extensions on that list that doesn't result in someone getting an unsolicited email.

Can you link to where they say that? I would figure someone doing something so helpful for users would at least document it. There's no reason to be surreptitious when doing such a favor. One wonders if they'll start offering a LinkedIn AntiVirus download with such an altruistic approach towards protecting users from what they have installed.

I think you're misunderstanding. LinkedIn isn't protecting the people with the extensions installed; they're protecting users FROM the people with the extensions.