Live data from Hacker News

LinkedIn is copying the contents of my clipboard on every keystroke

twitter.com

61–70 of 380 posts

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#61
post #5

Guess I'm never copying and pasting anything sensitive on my phone ever again. Still don't understand why clipboard-sniffing isn't behind a permissions flag.

> Still don't understand why clipboard-sniffing isn't behind a permissions flag.

Screw permissions flags. Clipboard-sniffing is never justified. Moving data out of the clipboard should only ever happen by direct user request via the OS interaction layer.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#62
post #5

Guess I'm never copying and pasting anything sensitive on my phone ever again. Still don't understand why clipboard-sniffing isn't behind a permissions flag.

Well, once upon a time you trusted the code running on your device. In Chrome on Android, the flag you want is under Settings | Site Settings | Clipboard | Ask before allowing sites to read text and images from the clipboard , and I think it's on by default.

This would be a great feature for Firefox too! Doesn't look like there's interest though https://bugzilla.mozilla.org/show_bug.cgi?id=1013165

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#63

Every day I read about another outrage being committed by another garbage app that I do not have and would never install on my phone. Why do people need a LinkedIn app? Even if you think that you need LinkedIn, can’t you access your please-spam-me account through your browser? Isn’t it obvious that every closed-source mystery program that you install increases your attack surface? You wouldn't click on an email attac…

Think it's just the app? Hope you don't have your clipboard events enabled in your browser Edit for those interested: tl;dr: "asynchronous clipboard API" [0] Overtly, it's used by shit news sites like WSJ, nytimes, and bloomberg to inject their shit into your clipboard when you copy-paste. A common thing I've noticed is selecting text, copying the text, and then pasting somewhere and seeing a link to the original art…

To read the clipboard, website needs explicit permission to do so, no way to go unnoticed.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#64
post #47

Earlier quoted context omitted.

Perhaps not relevant to LinkedIn specifically, but in general people install these apps because they eventually get fed up with the purposefully crippled mobile website badgering them about it. Ever tried to use Yelp or Reddit's mobile websites? Impossible.

If only there was a app for always on desktop mode.

You can just turn the toggle on in Firefox on Android and it stays on in that tab until you turn it off (or close the tab)

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#65
post #47

Earlier quoted context omitted.

Perhaps not relevant to LinkedIn specifically, but in general people install these apps because they eventually get fed up with the purposefully crippled mobile website badgering them about it. Ever tried to use Yelp or Reddit's mobile websites? Impossible.

>Ever tried to use Yelp or Reddit's mobile websites? Impossible The other day I tried to view a subreddit in Safari. It was literally impossible, it was claimed to be only available in the app.

If you don't mind seeing the desktop interface, prepend "old" to the domain on any reddit page (i.e. change the domain to old.reddit.com) to bring up the legacy interface. Loads quick and works fine on mobile if you don't mind zooming.

That said, it's ridiculous that this is necessary.

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#67
post #8
post #7

Earlier quoted context omitted.

I think it's not your phone though in this case, it's the MacBook Pro where the copying is happening

The screen capture is from an iPad Pro. It's not clear how it was getting the Macbook clipboard; via AirDrop maybe? Really that just makes it even more concerning. Edit: Apparently it's Just A Thing: https://support.apple.com/guide/mac-help/copy-and-paste-betw... But you can turn it off by turning off "Handoff", which luckily I already had. Nowhere is it mentioned in the settings UI that this extends to your clipboar…

Handoff really is awesome though. You start browsing a website on your phone, unlock your Mac and boom you can switch to the big screen. Copy a phone number from a website on your Mac, pull out your phone and paste it into the phone app. Once you’re used to it, it seems so obvious

Re: LinkedIn is copying the contents of my clipboard on every keystroke

#70

Every day I read about another outrage being committed by another garbage app that I do not have and would never install on my phone. Why do people need a LinkedIn app? Even if you think that you need LinkedIn, can’t you access your please-spam-me account through your browser? Isn’t it obvious that every closed-source mystery program that you install increases your attack surface? You wouldn't click on an email attac…

Think it's just the app? Hope you don't have your clipboard events enabled in your browser Edit for those interested: tl;dr: "asynchronous clipboard API" [0] Overtly, it's used by shit news sites like WSJ, nytimes, and bloomberg to inject their shit into your clipboard when you copy-paste. A common thing I've noticed is selecting text, copying the text, and then pasting somewhere and seeing a link to the original art…

I read something recently that gave the impression browsers didn't allow this and they could only modify the clipboard?

I'm not saying this is true, rather asking if I got the wrong impression.

Post reply on HN