John Regehr1d ago

fuck the browsers for making this even possible. do I have to go and disable all .js???

https://browsergate.eu/

LinkedIn Is Illegally Searching Your Computer

Microsoft is running one of the largest corporate espionage operations in modern history. Every time any of LinkedIn’s one billion users visits linkedin.com, hidden code searches their computer for installed software, collects the results, and transmits them to LinkedIn’s servers and to third-party companies including an American-Israeli cybersecurity firm. The user is never asked. Never told. LinkedIn’s privacy policy does not mention it. Because LinkedIn knows each user’s real name, employer, and job title, it is not searching anonymous visitors. It is searching identified people at identified companies. Millions of companies. Every day. All over the world.

BrowserGate
Show threadFélix
@regehr there are privacy implications regardless, but I think “searching your computer” is kind of strong phrasing for “probing for evidence of Chrome extensions”
Apr 2 at 8:35pmWeb
Show threadJosh Simmons1d ago

@fay59 @regehr yeah it seems like a classic bug too, revealing the existence of a file by returning an error code on attempting to access it. (Bonus points because the text is written with an llm, which feels somewhat ironical on the privacy front)

Edit: err I misread, chrome fetch actually lets you access extension resources? Seems... Interesting. Maybe they need it for adblocker detection :')