Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LinkedIn is copying the contents of my clipboard on every keystroke

twitter.com

Post reply on HN
Print view View original

241–250 of 380 posts

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#241

Post by wanderer2323 »

DyslexicAtheist wrote: post #119

LinkedIn has a history of acting like a cretin: multiple data breaches, dark patterns where they don't fix their buggy mobile site and just put up a disclaimer "problems with the mobile site - download our app" (just so that they can harvest a wider range of data). I managed many marketing campaigns on Linkedin over the years and spent thousands each month on the platform as a corporate user. If you think that paying…

what a one-sided POV. I kept "in touch" with multiple recruiters who "discovered" me via the Linkedin and when the time came I leveraged these connections to land multiple interview loop invites.

It also is a great place to add the colleagues when they or you depart with the same idea to "keep in touch".

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#242

Post by filleduchaos »

leppr wrote: post #239
filleduchaos wrote: post #233

Earlier quoted context omitted.

Ah, so _now_ we're asking Apple to disallow any UI development whatsoever outside of using the components in the UIKit and AppKit SDKs (and screw you if you want to develop any sort of interface that's not supported or intended to be supported out of the box by the above)? Very interesting indeed. I understand the outrage over programs abusing the resources they have access to, but frankly this is just approaching hy…

I'll give a similar reply as I did to your other comment: the most popular platform for interacting with low-trust applications, the web, sanely does not allow apps to access your whole filesystem. It would have never thrived as it did if users had to limit themselves to a small selection of vendors they can thrust with their whole system. There's a huge difference in usage between apps on desktop OSs, which are ofte…

> the most popular platform for interacting with low-trust applications, the web, sanely does not allow apps to access your whole filesystem.

Yes, obviously, arbitrary code that is executed from over the network at a time you can't fully control and programs that you install and run on the device that you own have different levels of trust. Are you seriously making the argument that code from https://facebook.com running within your browser cannot access your filesystem then that means every single executable on your machine should be incapable of doing that as well? Wasn't this the same site that complained to high heavens about the constant permission prompts in macOS Catalina?

> which are often of less commercial nature, open-source, and more carefully vetted by centralized gatekeepers

I'm sorry, this is just blatantly false (as literally decades of malware on the desktop can attest).

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#243

Post by est »

This is precisely how Chinese authorities track down activists using apps without Location data, it was disclosured few weeks ago.

They patiently read user's clipboard data and wait for a picture taken and copied to clipboard, then extract its EXIF geoloc tags and send the coordinates to the police.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#244

Post by dungdang »

EGreg wrote: post #222
vosper wrote: post #204

Earlier quoted context omitted.

The acquisition was 4 years ago, almost to the day: you're right, it's time to blame the real owner.

Skype used to rock before they were acquired

yeah, definitely used to rock when it killed your laptop battery in an hour while running in the background routing other people's calls through you.

skype rocked after ms acquired it, fixed these types of problems by providing infrastructure, and it rocked for a decade. it stopped rocking only when they replaced it with the app-looking cut down app, and years later killed the desktop mode program.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#245

Post by ohnope »

est wrote: post #243

This is precisely how Chinese authorities track down activists using apps without Location data, it was disclosured few weeks ago. They patiently read user's clipboard data and wait for a picture taken and copied to clipboard, then extract its EXIF geoloc tags and send the coordinates to the police.

Mind linking to a news source for this? Curious to read more about it.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#247

Post by ebg13 »

filleduchaos wrote: post #193
ebg13 wrote: post #61

Earlier quoted context omitted.

> Still don't understand why clipboard-sniffing isn't behind a permissions flag. Screw permissions flags. Clipboard-sniffing is never justified. Moving data out of the clipboard should only ever happen by direct user request via the OS interaction layer.

And what, exactly, constitutes "direct user request" that both 1) does not break common programming techniques (e.g. an application rolling its own GUI, or implementing its own modes/keybindings) and 2) is not trivially spoofable by the enterprising developer? I understand the outrage over apps abusing their access to the clipboard but what I don't understand is the people acting as though the OSes they use on the da…

> what, exactly, constitutes "direct user request" that both...

> 1) does not break common programming techniques (e.g. an application rolling its own GUI, or implementing its own modes/keybindings)

A callback method that you can define to do anything you want in your program when the OS hands you the result of a user initiated paste operation because your program had focus. If you want custom keybindings to initiate the paste operation, you can register that desire with the OS. Want something perpetually backgrounded that exists exclusively to steal your secrets? Make _that_ a special permission if you must. Or just don't allow it.

> * 2) is not trivially spoofable by the enterprising developer?*

Ignoring the _minor_ contradiction of mixing "trivially" and "enterprising", rolling your own GUI and defining keybindings doesn't mean that you control access to the interface. The operating system mediating the hardware does that.

Could someone root your system and blahblahblah? Sure. But let's stop making "steal my secrets" part of the fucking standard system API and start working toward a brighter tomorrow.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#248

Post by amenghra »

meshaneian wrote: post #203
Moto7451 wrote: post #157

Earlier quoted context omitted.

I’m not a fan of giving phone numbers out either. When I have to I give one to sites I hold suspect I use a number from the safe fictitious range allowed for use on TV and in movies. It’s like example.org but for phone numbers https://en.wikipedia.org/wiki/555_(telephone_number)

Truly disposable burner emails are the best, though many larger corps block the more popular ones or require an email at specific providers. https://www.mailinator.com/

Buy a domain name and point the MX record to mailinator.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#250

Post by blinding-streak »

DyslexicAtheist wrote: post #119

LinkedIn has a history of acting like a cretin: multiple data breaches, dark patterns where they don't fix their buggy mobile site and just put up a disclaimer "problems with the mobile site - download our app" (just so that they can harvest a wider range of data). I managed many marketing campaigns on Linkedin over the years and spent thousands each month on the platform as a corporate user. If you think that paying…

Sunlight is the best disinfectant.

The more people see this user-hostile practice in action, the faster we'll be rid of it.

Post reply on HN