LinkedIn is using hidden JS to scan your browser for over 6,000 specific extension IDs via a known Chromium vulnerability. By inventorying your local software, they can infer highly sensitive "Special Category" data like health status, religion, and political advocacy without consent.
I’ve joined the dots on why Chromium-based "Shields" fail here and how to harden your home lab/network to stop the leak.
5 Comments
fiat_lux@lemmy.world · 22 pts · 142d
No technical breakdown provided in link. To find that I had to go to a link inside the post, which has much better information on every possible level.
Main link: https://browsergate.eu/
Technical section: https://browsergate.eu/how-it-works/
aichan@piefed.blahaj.zone · 13 pts · 142d
Ugh, ew, Brave browser ew
johncandy1812@lemmy.ca · 8 pts · 142d
Not sure how widespread this was but early on Linkedin used to spam your contacts with a message saying you were trying to add them on Linkedin.
I remember receiving tons of them and having to set Linkedin as spam.
Linkedin, for me, at least has always been sketchy. Like the Zynga of Social Media. Scam your way till you get lucky.
phonics@lemmy.world · 6 pts · 142d
Facebook often sends spam saying your friend xyz just mentioned you in their post. Which is always a lie.
PokerChips@programming.dev · 5 pts · 142d
Microslop up to it's usual dirty tricks.