Live data from Hacker News

LinkedIn is searching your browser extensions

browsergate.eu

561–570 of 836 posts

Re: LinkedIn is searching your browser extensions

#561

Fwiw... I now run personal and professional browser profiles from two different jails / cgroups. It's a pain in the arse to set up, and I have to verify my config still works after every update, but I get a good feeling knowing my personal chocolate is not mixing in with my professional peanut butter. I set up the cgroups hack so I could route traffic from a dev profile into a VPS vpn, and may not be that useful for…

I... I searched for this extension.

Re: LinkedIn is searching your browser extensions

#562
post #559

Yep, LinkedIn is cancer. 2020 - LinkedIn Sued For Spying on Clipboard Data After iOS 14 Exposes Its App: https://wccftech.com/linkedin-sued-for-spying-on-clipboard-d... 2013 - LinkedIn MITM attacks your iPhone to read your mail: https://www.troyhunt.com/disassembling-privacy-implications-... 2012/2016 - Data breach of 164.6 million accounts: https://haveibeenpwned.com/breach/LinkedIn According to haveibeenpwned.com,…

I'm shocked, shocked to find that a Microsoft product will actively do a bunch of horrible invasive stuff while simultaneously not caring about security of this private data.

Re: LinkedIn is searching your browser extensions

#563

Earlier quoted context omitted.

>the average person's response is "nah, that would take at least a couple of minutes of my time, As a data point I, a technical person who tweaks his computer a lot, was against adblocking for moral reasons (as a part of perceived social contract, where internet is free because of ads). Only later I changed mi mind on this because I became more privacy aware.

You mean the internet you pay to access and which was around before the ads were even on it? That internet? I'm not trying to be mean I'm just trying to historically parse your sentence/belief. Because for me this is a simplified analogy of what happened on the internet: a) we opened a club house called the internet in the early 1990s, just after the time of BBSs b) a few years later a new guy called commercial busin…

not sure why you're talking about "commercial business" being the one inserting ads everywhere when even niche community run forums from the 2000s also had ads to help pay for their server costs. At the end of the day all this costs money. Whether its paid by ads or direct subscriptions. IMO the problem is more about concentration and centralization of the internet into a handful of sites than advertising.

Re: LinkedIn is searching your browser extensions

#565
post #14

The headline seems pretty misleading. Here’s what seems to actually be going on: > Every time you open LinkedIn in a Chrome-based browser, LinkedIn’s JavaScript executes a silent scan of your installed browser extensions. The scan probes for thousands of specific extensions by ID, collects the results, encrypts them, and transmits them to LinkedIn’s servers. This does seem invasive. It also seems like what I’d expect…

> this is why I run ad blockers. It's pretty wild that we live in a world where the actual FBI has recommended we use ad blockers to protect ourselves, and if everyone actually listened, much of the Internet (and economy) as we know it would disappear. The FBI is like "you should protect yourself from the way that the third largest company in the world does business", and the average person's response is "nah, that w…

> the average person's response is ... I'll just go ahead and continue to suffer with invasive ads

The real reason is that the average person neither suffers with ads nor finds ads invasive, despite what a vocal online minority would have you believe. We just ignore them and get on with life. ::shrug::

Re: LinkedIn is searching your browser extensions

#566

Earlier quoted context omitted.

I mean yeah, you pay for the internet. But many sites are free to use only due to ads. Such as news and magazine sites, many of which are actively dying due to a lack of revenue. I personally wish these sites could all switch to paid models, because I also don’t like ads. But absent that, I’d like to support the sites I use so that they don’t go out of business.

I have expensive online subscriptions to New York Times, Wall Street Journal, and Washington Post. Nevertheless they are FILLED with ads/popups/videos that run automatically/dark patterns. Just saying: there's no refuge.

here's an idea: don't use those sites.

Re: LinkedIn is searching your browser extensions

#567
post #14

The headline seems pretty misleading. Here’s what seems to actually be going on: > Every time you open LinkedIn in a Chrome-based browser, LinkedIn’s JavaScript executes a silent scan of your installed browser extensions. The scan probes for thousands of specific extensions by ID, collects the results, encrypts them, and transmits them to LinkedIn’s servers. This does seem invasive. It also seems like what I’d expect…

How is probing your browser for installed extensions not "scanning your computer"? Calling the title misleading because they didn't breach the browser sandbox is wrong when this is clearly a scenario most people didn't think was possible. Chrome added extensionId randomization with the change to V3, so it's clearly not an intended scenario. > vs. something inherently sinister (e.g. “they’re checking to see if you’re…

It 100% implies that it's looking for locally installed binaries.

Re: LinkedIn is searching your browser extensions

#568
post #442

Earlier quoted context omitted.

if they do a better job at showing me an ad that might be relevant to me, how is that disgusting? if I have to see an ad at all I at least want them to give it their best shot

I cant believe that people still have the attitude that the trillions of dollars being invested in all this technology and tracking is just to give them a more relevant ad . Do people really not remember scandals like Cambridge Analytica, and realise that these ads combined with social media feeds can be used to literally control and manipulate peoples decisions and behavoir? Theres a reason Facebook and Youtube just…

is the manipulation of decisions and behavior not just a way of saying sales and marketing? I agree that it def can be used for bad things, but so can most tools/systems

Re: LinkedIn is searching your browser extensions

#569

Fwiw... I now run personal and professional browser profiles from two different jails / cgroups. It's a pain in the arse to set up, and I have to verify my config still works after every update, but I get a good feeling knowing my personal chocolate is not mixing in with my professional peanut butter. I set up the cgroups hack so I could route traffic from a dev profile into a VPS vpn, and may not be that useful for…

> I now run personal and professional browser profiles from two different jails / cgroups. It's a pain in the arse to set up, and I have to verify my config still works after every update

You may be interested in Qubes OS. My daily driver. Can't recommend it enough.

Re: LinkedIn is searching your browser extensions

#570
Amazing work, but it’s not surprising, I think anyone in cybersec space knows that LinkedIn is the number one source of information when it comes to track or ID someone, and I don’t mean just OSINT given the real data you have, but also three letters agencies love it, it’s a gold mine, wasn’t the silkroad owner was busted because of the same personal email used on LinkedIn? So yeah, delete it, never use it, it’s full of corporate cringy nonsense anyway
Post reply on HN