Every time you open LinkedIn in a Chrome-based browser, LinkedIn’s JavaScript executes a silent scan of your installed browser extensions. The scan probes for thousands of specific extensions by ID, collects the results, encrypts them, and transmits them to LinkedIn’s servers.
A bit gross, but also just kind of how browser extensions that interact with Web sites work.
Been saying for as long as I found out Chrome can program USB shit that it needs to be put out of its misery. Web browsers do not need that level of control... The amount of sensor data they take in is also incredibly alarming.
It's a fucking web browser. It has one job: browse the web. There is 0 reason for it to be sending websites GPS locations, phone orientation, battery percentage, hardware information, screen brightness, etc etc etc
Recommenting since this is being posted fucking everywhere with the same sensational headline that makes it look like linkedin is jumping out of the browser to scan your actual filesystems - here's an exerpt from the site linked:
The Attack: How it works
Every time you open LinkedIn in a Chrome-based browser, LinkedIn’s JavaScript executes a silent scan of your installed browser extensions. The scan probes for thousands of specific extensions by ID, collects the results, encrypts them, and transmits them to LinkedIn’s servers. The entire process happens in the background. There is no consent dialog, no notification, no mention of it in LinkedIn’s privacy policy.
It's enumerating the browser extensions you have installed.
Yea they makes a lot more sense, I was wondering how in the world were they able to get access to your file system from the browser. Turns out, they aren't.
13 Comments
treadful@lemmy.zip · 57 pts · 157d
A bit gross, but also just kind of how browser extensions that interact with Web sites work.
0ndead@infosec.pub · 28 pts · 157d
Yeah this is just browser fingerprinting, and most sites do it now
Mubelotix@jlai.lu · -1 pts · 155d
Well that's illegal for everyone
brax@sh.itjust.works · 3 pts · 145d
Been saying for as long as I found out Chrome can program USB shit that it needs to be put out of its misery. Web browsers do not need that level of control... The amount of sensor data they take in is also incredibly alarming.
It's a fucking web browser. It has one job: browse the web. There is 0 reason for it to be sending websites GPS locations, phone orientation, battery percentage, hardware information, screen brightness, etc etc etc
mlfh@lemmy.sdf.org · 44 pts · 157d
Recommenting since this is being posted fucking everywhere with the same sensational headline that makes it look like linkedin is jumping out of the browser to scan your actual filesystems - here's an exerpt from the site linked:
It's enumerating the browser extensions you have installed.
pycorax@sh.itjust.works · 11 pts · 157d
Yea they makes a lot more sense, I was wondering how in the world were they able to get access to your file system from the browser. Turns out, they aren't.
brax@sh.itjust.works · 1 pts · 145d
That we know of lol
one_old_coder@piefed.social · 15 pts · 157d
#1 lunatics. Thanks for the link.
brap@lemmy.world · 11 pts · 157d
It’s absolutely fucking not because why on earth would I go that that place?
ddplf@szmer.info · 5 pts · 157d
Aren't you ever interested in how the people you know fare, hoping to see they are doing worse than you?
A number of human people do that, you know. Succumb.
brap@lemmy.world · 4 pts · 157d
Perhaps I miss the point, as no, I don’t.
I guess it’s feeding off people’s morbid curiosity?
RoquetteQueen@sh.itjust.works · 1 pts · 155d
No, not really. I may wonder how someone is doing but I don't care enough to look.
Munkisquisher@lemmy.nz · 3 pts · 157d
I have to use it for work when I'm hiring, usually after 3-5min I can't stomach it any longer and close the tab in disgust