Live data from Hacker News

LinkedIn checks for 2953 browser extensions

github.com

91–100 of 263 posts

Re: LinkedIn checks for 2953 browser extensions

#91

Chrome is the new IE6. Google set themselves up to be the next Microsoft and is "ad friendly" in all the creepy ways because that's what Google IS an ad company. All they've contributed to security is diminishing the capability of adblockers and letting malware to do bad things to you as consumers.

> Google set themselves up to be the next Microsoft

Google became a monopoly. All monopolies do this.

Re: LinkedIn checks for 2953 browser extensions

#92
post #81

Earlier quoted context omitted.

Maybe, but how long are the extension ids? And if they are random, how long to scan a trillion random alphanumeric ids, to find matches? I presume the extension knows when it wants to access resources of its own. But random javascript, doesn't.

The extension IDs are UUIDs/GUIDs, so 128 bits of entropy. No site is going to be able to successfully scan that full range.

ChatGPT told me it can be done though.

It won't disclose how, as it says it has had several users report it. And that it expects 50% of the bounty, and will use it for GPU upgrades.

Re: LinkedIn checks for 2953 browser extensions

#93
post #87
post #46

Earlier quoted context omitted.

It's not true. The person you're responding to has a habit of posting implausible-but-plausibly-plausible nonsense, and it's not how this works at all.

I made the mistake of trying to skim the code hastily before I had to leave to run an errand, and yes it turns out I was wrong, but please refrain from the personal comments, and no, I don't have any such "habit."

Wrong again. (PS: The fact that you have now replied—which automatically disables comment deletion—is the only thing that prevented my removing it just now. So great job.)

Re: LinkedIn checks for 2953 browser extensions

#97

I suggest everyone take a look at the list of extensions and their names for some very important context: https://github.com/mdp/linkedin-extension-fingerprinting/blo... I didn't find popular extensions like uBlock or other ad blockers. The list is full of scammy looking data collection and AI tools, though. Some random names from scrolling through the list: - LinkedGPT: ChatGPT for LinkedIn - Apollo Scraper - Extrac…

LinkedIn itself provides tools for scummy recruiters to mass spam, so this is just them protecting their business.

Also, not all of them are data collection tools. There are ad blockers listed (Hide LinkedIn Ads, SBlock - Super Ad Blocker) and just general extensions (Ground News - Bias Checker, Jigit Studio - Screen Recorder, RealEyes.ai — Detect Deepfakes Across Online Platforms, Airtable Clipper).

Re: LinkedIn checks for 2953 browser extensions

#98

Setup a quick CDP connection. Have Claude Code attach and inject JS into Page.addScriptToEvaluateOnNewDocument. Loads before the page. Typical early hooks: • fetch wrapper • XMLHttpRequest.prototype.open/send wrapper • WebSocket constructor wrapper • history.pushState/replaceState wrapper • EventTarget.addEventListener wrapper (optional, heavy) • MutationObserver for DOM diffs • Error + unhandledrejection capture

This is irrelevant to the article and discussions here. Weird copypasta bullet points too.

Re: LinkedIn checks for 2953 browser extensions

#100
post #93
post #87

Earlier quoted context omitted.

I made the mistake of trying to skim the code hastily before I had to leave to run an errand, and yes it turns out I was wrong, but please refrain from the personal comments, and no, I don't have any such "habit."

Wrong again. (PS: The fact that you have now replied—which automatically disables comment deletion—is the only thing that prevented my removing it just now. So great job.)

> The fact that you have now replied—which automatically disables comment deletion—is the only thing that prevented my removing it just now. So great job.

How was I supposed to know that you intended to delete it?

In any case, you may still have time to edit your comment, as I did with my erroneous root-level comment, since I can't delete that either, for the same reason.

Post reply on HN