Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LinkedIn is scanning browser extensions

404privacy.com

Post reply on HN
Print view View original

151–160 of 226 posts

Re: LinkedIn is scanning browser extensions

#151

Post by not2b »

echelon wrote: post #29

Can someone here please create a LinkedIn replacement for developers that 1. Doesn't have the spam 2. That doesn't look like it's from 2008 3. That only developers / engineers / tech folks can join 4. Doesn't try to log into your email to steal your contact list 5. That doesn't track you or your extensions / browser fingerprint 6. That doesn't have a bunch of fake "linkedinmaxxing" garbage content 7. that doesn't hav…

If by some miracle someone managed to create this, and a critical mass of people somehow discovered it and used it, at some point they'd burn out, sell it, and it would turn into the same shit that we see everywhere else.

Re: LinkedIn is scanning browser extensions

#152

Post by traderj0e »

angoragoats wrote: post #149
traderj0e wrote: post #145

Earlier quoted context omitted.

But that application goes to a recruiter. Guess if you mean the site shouldn't have recruiters doing the cold-calling, idk maybe, but then the game is in getting the recruiters to read your application. This is different from having connections.

I think OP was referring to applying direct with the company doing the hiring. This is how I landed my first several jobs in tech, no recruiters involved.

Gotcha. Ok the companies themselves reached out on LinkedIn to me. It wasn't those third-party recruiters like "I recruit for Tesla, Apple, Sigma, IBM..." I ignored those emails. But it was still a recruiter within the company, not a technical manager or IC.

Re: LinkedIn is scanning browser extensions

#153

Post by seattle_spring »

echelon wrote: post #29

Can someone here please create a LinkedIn replacement for developers that 1. Doesn't have the spam 2. That doesn't look like it's from 2008 3. That only developers / engineers / tech folks can join 4. Doesn't try to log into your email to steal your contact list 5. That doesn't track you or your extensions / browser fingerprint 6. That doesn't have a bunch of fake "linkedinmaxxing" garbage content 7. that doesn't hav…

> 3. That only developers / engineers / tech folks can join

Is at odds with

> 6. That doesn't have a bunch of fake "linkedinmaxxing" garbage content

Almost all of the shit-tier AI-generated AI evangelism has been from "tech folks" connections. It's all the exact same content.

Re: LinkedIn is scanning browser extensions

#154

Post by wizardforhire »

not2b wrote: post #151
echelon wrote: post #29

Can someone here please create a LinkedIn replacement for developers that 1. Doesn't have the spam 2. That doesn't look like it's from 2008 3. That only developers / engineers / tech folks can join 4. Doesn't try to log into your email to steal your contact list 5. That doesn't track you or your extensions / browser fingerprint 6. That doesn't have a bunch of fake "linkedinmaxxing" garbage content 7. that doesn't hav…

If by some miracle someone managed to create this, and a critical mass of people somehow discovered it and used it, at some point they'd burn out, sell it, and it would turn into the same shit that we see everywhere else.

Not if you organize it as a non-profit with stated purpose that explicitly address exactly that… and is run as a public service for the public good.

Re: LinkedIn is scanning browser extensions

#155

Post by angoragoats »

flomo wrote: post #116
stingraycharles wrote: post #83

Earlier quoted context omitted.

This is how I interpreted the original question and indeed it makes no sense, JavaScript from a website should not be allowed to interact with extensions like this.

It's actually the extension injecting itself into the webpage, often to interact with it. (I imagine much of this is just looking for global ExtensionName objects.)

Actually, the article is clear about what is happening technically, and it’s both. Chrome does, in fact, allow the page to make requests for resources stored in the extension bundle, and this is one of the two fingerprinting methods that the article describes.

Re: LinkedIn is scanning browser extensions

#156

Post by sds357 »

conductr wrote: post #74
reg_dunlop wrote: post #56

Earlier quoted context omitted.

It's odd, yeah? We have the ability to vibe these things over a weekend, yet getting to the critical mass/tipping point of adoption is something else. Whatever happened to: if you build it, they will come?

Works for baseball fields, not websites

in movies, not RL

Re: LinkedIn is scanning browser extensions

#157

Post by somat »

zeafoamrun wrote: post #43
echelon wrote: post #29

Can someone here please create a LinkedIn replacement for developers that 1. Doesn't have the spam 2. That doesn't look like it's from 2008 3. That only developers / engineers / tech folks can join 4. Doesn't try to log into your email to steal your contact list 5. That doesn't track you or your extensions / browser fingerprint 6. That doesn't have a bunch of fake "linkedinmaxxing" garbage content 7. that doesn't hav…

Seriously. We need some kind of federated replacement. Who is building this?

It's called "The Web"

Re: LinkedIn is scanning browser extensions

#158

Post by thayne »

pyrophane wrote: post #117

Here's the most relevant section I could find from the original source: "Chrome extensions can expose internal files to web pages through the web_accessible_resources field in their manifest.json. When an extension is installed and has exposed a resource, a fetch() request to chrome-extension://{id}/{file} will succeed. When the extension is not installed, Chrome blocks the request and the promise rejects. LinkedIn t…

It seems like it shouldn't let code originating from the site (as opposed to from the extension) to access that.

Re: LinkedIn is scanning browser extensions

#160

Post by pnw »

AndroTux wrote: post #58
ro_bit wrote: post #20

Why is my Chrome telling random websites which extensions I have installed?

Brave explicitly blocks this

Last time this was discussed the consensus was Brave does not block it. Brave's fingerprinting protection does not include extensions.

https://news.ycombinator.com/item?id=46904361

Post reply on HN