Live data from Hacker News

LinkedIn is copying the contents of my clipboard on every keystroke

twitter.com

51–60 of 380 posts

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#51
post #47

Every day I read about another outrage being committed by another garbage app that I do not have and would never install on my phone. Why do people need a LinkedIn app? Even if you think that you need LinkedIn, can’t you access your please-spam-me account through your browser? Isn’t it obvious that every closed-source mystery program that you install increases your attack surface? You wouldn't click on an email attac…

Perhaps not relevant to LinkedIn specifically, but in general people install these apps because they eventually get fed up with the purposefully crippled mobile website badgering them about it. Ever tried to use Yelp or Reddit's mobile websites? Impossible.

If only there was a app for always on desktop mode.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#52
post #47

Every day I read about another outrage being committed by another garbage app that I do not have and would never install on my phone. Why do people need a LinkedIn app? Even if you think that you need LinkedIn, can’t you access your please-spam-me account through your browser? Isn’t it obvious that every closed-source mystery program that you install increases your attack surface? You wouldn't click on an email attac…

Perhaps not relevant to LinkedIn specifically, but in general people install these apps because they eventually get fed up with the purposefully crippled mobile website badgering them about it. Ever tried to use Yelp or Reddit's mobile websites? Impossible.

I'm a little surprised that iOS content blockers haven't seemed to address nagware.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#53

If you're a multi-billion dollar company with a "government relations" team, it is better to ask for forgiveness than permission. If you're a random internet weirdo who uses a public interface in an unexpected way, you face decades in prison. [1] [1] https://www.wsj.com/articles/SB10001424052748704312104575299...

I'm not going to create an account with the WSJ just to read that article, but from the opening paragraph I don't see how it support your claim. It appears to be talking about something AT&T did?

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#54
post #47

Every day I read about another outrage being committed by another garbage app that I do not have and would never install on my phone. Why do people need a LinkedIn app? Even if you think that you need LinkedIn, can’t you access your please-spam-me account through your browser? Isn’t it obvious that every closed-source mystery program that you install increases your attack surface? You wouldn't click on an email attac…

Perhaps not relevant to LinkedIn specifically, but in general people install these apps because they eventually get fed up with the purposefully crippled mobile website badgering them about it. Ever tried to use Yelp or Reddit's mobile websites? Impossible.

Actually, no, I never have. But if I wanted to wallow in these sewers for some reason, and the mobile sites were unusable, I would use my laptop, or just manage to find some way to survive without them. Installing their apps is out of the question.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#55
post #47

Every day I read about another outrage being committed by another garbage app that I do not have and would never install on my phone. Why do people need a LinkedIn app? Even if you think that you need LinkedIn, can’t you access your please-spam-me account through your browser? Isn’t it obvious that every closed-source mystery program that you install increases your attack surface? You wouldn't click on an email attac…

Perhaps not relevant to LinkedIn specifically, but in general people install these apps because they eventually get fed up with the purposefully crippled mobile website badgering them about it. Ever tried to use Yelp or Reddit's mobile websites? Impossible.

>Ever tried to use Yelp or Reddit's mobile websites? Impossible

The other day I tried to view a subreddit in Safari. It was literally impossible, it was claimed to be only available in the app.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#56

Every day I read about another outrage being committed by another garbage app that I do not have and would never install on my phone. Why do people need a LinkedIn app? Even if you think that you need LinkedIn, can’t you access your please-spam-me account through your browser? Isn’t it obvious that every closed-source mystery program that you install increases your attack surface? You wouldn't click on an email attac…

[deleted]

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#57

Every day I read about another outrage being committed by another garbage app that I do not have and would never install on my phone. Why do people need a LinkedIn app? Even if you think that you need LinkedIn, can’t you access your please-spam-me account through your browser? Isn’t it obvious that every closed-source mystery program that you install increases your attack surface? You wouldn't click on an email attac…

What I don't understand is why the browsers and OSs aren't preventing this. This is a massive security hole.

An app doesn't need access to the clipboard unless I'm actively pasting to it while it's in focus.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#58

If you're a multi-billion dollar company with a "government relations" team, it is better to ask for forgiveness than permission. If you're a random internet weirdo who uses a public interface in an unexpected way, you face decades in prison. [1] [1] https://www.wsj.com/articles/SB10001424052748704312104575299...

[deleted]

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#59
LinkedIn is a subsidiary of Microsoft. I know the title of this post is an excerpt from a tweet, not a headline, but I think it's generally appropriate to call out the parent company in cases like this. For instance: "Microsoft's LinkedIn app is copying the contents of my clipboard on every keystroke."

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#60
post #5

Guess I'm never copying and pasting anything sensitive on my phone ever again. Still don't understand why clipboard-sniffing isn't behind a permissions flag.

Well, once upon a time you trusted the code running on your device. In Chrome on Android, the flag you want is under Settings | Site Settings | Clipboard | Ask before allowing sites to read text and images from the clipboard , and I think it's on by default.

Does that setting affect other Android native apps' clipboard access? It wouldn't seem so.
Post reply on HN