Live data from Hacker News

LinkedIn accesses Gmail contacts via ‘auto-authorization’

thestack.com

1–10 of 49 posts

Re: LinkedIn accesses Gmail contacts via ‘auto-authorization’

#4
There is also another option. Suppose, for a moment, that I've sent my friend an email and he/she has allowed LinkedIn access to their Google Contacts, even though I have not...there is no reason LinkedIn wouldn't still show me them as a contact to add, since they know the connection. They just know it from the other side.

Re: LinkedIn accesses Gmail contacts via ‘auto-authorization’

#6
I vouch for this claim that LinkedIn/Facebook seem to give recommendations to add someone as friend even when there is no chance that they could figure it out using data they have. I don't understand why browsers can't sandbox each tab such that there is no way to share cookies or cache. This is a serious breach of privacy if they are reading friend relationships based on your gmail open in other tabs.

Re: LinkedIn accesses Gmail contacts via ‘auto-authorization’

#7
post #4

There is also another option. Suppose, for a moment, that I've sent my friend an email and he/she has allowed LinkedIn access to their Google Contacts, even though I have not...there is no reason LinkedIn wouldn't still show me them as a contact to add, since they know the connection. They just know it from the other side.

Agreed - this is the assumption I have been working on and experienced too

Re: LinkedIn accesses Gmail contacts via ‘auto-authorization’

#8
post #2

How exactly does this work at a technical level?

I recall there was a followup to the article that confirmed that he had granted access to his gmail (or someone in his network etc). What the article describes should not be technically possible.

Re: LinkedIn accesses Gmail contacts via ‘auto-authorization’

#9
post #4

There is also another option. Suppose, for a moment, that I've sent my friend an email and he/she has allowed LinkedIn access to their Google Contacts, even though I have not...there is no reason LinkedIn wouldn't still show me them as a contact to add, since they know the connection. They just know it from the other side.

Agreed - this is the assumption I have been working on and experienced too

The article noted that this was also happening for email contacts who were not on Linked In.

Re: LinkedIn accesses Gmail contacts via ‘auto-authorization’

#10
This is hilarious - relevant snippet from support conversation from article:

"if you had at any time your LinkedIn account open and accessed any of your emails through the same browser…In order from preventing this from happening again, you will want to be careful to not open up your personal email address in the same browser when you have your LinkedIn account open.’"

Post reply on HN