Live data from Hacker News

LinkedIn is copying the contents of my clipboard on every keystroke

twitter.com

341–350 of 380 posts

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#342
post #145

Earlier quoted context omitted.

Now if only they would finally Sherlock Little Snitch for iOS; the amount of spyware embedded in almost every single app in the App Store is astounding. I make a point of knowing about this stuff and even I was flabbergasted the first few times I ran my iPhone via a proxy. Apple claims that you consented you this when you agreed to the App Store TOS.

Can you share how you did this? I would like to try it.

For a free alternative I’ve got a blog post[0] detailing how to do it with the excellent mitmproxy utility. There’s also Burpsuite community edition which is pretty decent

0: https://hugotunius.se/2019/01/23/going-spelunking-with-mitmp...

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#344
I'm glad iOS14 is showing this but IMO it's the wrong solution. I know this is easier said than done but basically the OS should make it impossible for an app to read the clipboard unless the user chooses "PASTE". I have no idea how that would work on iOS. It can work pretty well in the browser. I'm not saying the browser is doing this well, but it is possible for the browser to be made so only a browser level paste gives the current page/iframe the contents of the clipboard so you know the user specifically wanted whatever is in the clipboard passed to that page/app.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#345
post #310

Earlier quoted context omitted.

> A callback method that you can define to do anything you want in your program when the OS hands you the result of a user initiated paste operation because your program had focus. If you want custom keybindings to initiate the paste operation, you can register that desire with the OS. Wonderful! Now how does this brilliant little solution account for applications that don't centre their operations on the keyboard? H…

Although I understand your point on the shared buffer, I don't see how else I can share information between two arbitrary apps not explicitly designed for it. Perhaps I should be able to use settings to require an os confirmation dialog, at least for info not copied into the clipboard by the same app, much as users can use noscript. As for Linux, if they don't want to deal with the clipboard, then users need to under…

Between two or more known apps, a solution already exists - don't put in the system-wide shared buffer, put it in a buffer whose access is restricted to apps that you know. For example, on iOS you've been able to create team-local (only accessible from apps with the same team ID) and app-local (created with a unique identifier so only your app knows & can interact with it) clipboards since...a very long time, definitely pre-iOS 8 because that's when I encountered the API the first time.

To some extent, a solution does exist for arbitrary (iOS and Android) apps, which lets you explicitly pick what application you want to receive some data - the sharesheet. It's criminally underused in my opinion.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#346
post #318

Earlier quoted context omitted.

This should be higher, above all of the mobs teething for vengeance. It’s an innocuous comparison of text input to the pasteboard to prevent unwanted autocorrect insertions.[0] Probably the same code used by TikTok too. the code and and comments are here: [0] https://github.com/linkedin/Hakawai/pull/162/commits/c3f8958...

LinkedIn (Microsoft) is a company that previously used man-in-the-middle techniques to move people's private emails to its servers.[1] People no longer give them the benefit of that doubt because of the reputational damage these previous violations have caused. They should stop making "innocent" mistakes with other people's privacy and deal with this more professionally at the highest levels. If they don't people wil…

Do not forget the hiQ Labs case where they have alleged CFAA violations against someone scraping public data.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#347

Earlier quoted context omitted.

Same experience here. Wanted to expand my business and posted a LinkedIn job ad. After a week I had spent 200€ and received a bunch of people outside of Stockholm, which I specified as the location. I also received a few job applications from school teachers, car salesmen and county clerks - for a senior dev position.

> I also received a few job applications from school teachers, car salesmen and county clerks - for a senior dev position. That's not a LinkedIn problem, it's a "I've posted an attractive job ad" problem.

If LinkedIn charges per application regardless of job fit, it's LinkedIn problem.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#348
Even after all explanations and presented use-cases, I fail to understand how full reading access to a users clipboard by random third-party apps was ever considered a good idea - from apps in the background nonetheless! Only in a world were I, the device manufacturer, write all apps exclusively, maybe.

The moment I draft such a feature my head turns red from all the alarm-bells going off. I sincerely fail to follow the though process here.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#349
post #264

Earlier quoted context omitted.

> Srsly, somebody needs to fix this I've lost count of the number of devs I've spoken to, over multiple decades, who are convinced recruitment is ripe for disruption. I'm sure everyone else has the same experience. And yet, recruitment's still here, more or less unchanged. At this point I'm pretty sure recruitment has always been terrible, and will always be terrible. There's some perverse incentive buried deep in th…

> And yet, recruitment's still here, more or less unchanged. At this point I'm pretty sure recruitment has always been terrible, and will always be terrible. There's some perverse incentive buried deep in the process that can't be shaken out. Or something. It probably won’t be solved by tech folk as it’s a squishy people problem that’s hard to quantify (case in point: threads on HN bemoaning robotic HR processes att…

> it’s a squishy people problem that’s hard to quantify

And where incentives to game the process are just too high for everyone involved. Ref standard practices like CV inflation, lying about what the role will really be, hiding salary rates from both sides, manipulating entitlements, etc etc.

These problems are as old as humanity and I don't think you can really fix them with code.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#350
post #288

Earlier quoted context omitted.

Same problems with the private home rental market. If someone can figure out how to match good tenants with good landlords in a way that is hard to scam and respects privacy, they would make a lot of money.

This assumes there is a lot of good players, tenants and landlords and they are just waiting for a good app which will let them find each other finally. From my experience, this market is conflict driven, there is no such thing as good landlord and good tenant.

There's plenty of good tenants.
Post reply on HN