PhD Candidate in the CoreSec group at #TUGraz, focusing on side-channel security. Apart from that, I also post #Linux and #privacy related stuff.
Opinions posted here are my own and do not necessarily reflect those of my employer.
| Website | https://stefangast.eu |
since that browsergate site about LinkedIn seems to be gaining traction I figure I should mention:
edit: and as someone else noted in the replies, looking through the list of extensions of scans for... they're pretty much all "AI"/scraper/automation plugins. so, should LinkedIn be doing this, or even able to do this in Chrome? no! but also, it does seem like the stuff they're scanning for is all extensions that shouldn't exist to begin with tbh
edit 2: please see this follow-up post which proves this is just a shitty campaign by people who made an addon called "Teamfluence" that got blocked by LinkedIn
Apparently #LinkedIn runs a silent browser scan on every #Chrome user who visits the site.
6.222 extensions.
~405 million users affected.
No consent, no disclosure, no mention in their privacy policy.
Read the full technical breakdown, legal analysis and searchable database of every scanned extension: https://browsergate.eu/
Microsoft is running one of the largest corporate espionage operations in modern history. Every time any of LinkedIn’s one billion users visits linkedin.com, hidden code searches their computer for installed software, collects the results, and transmits them to LinkedIn’s servers and to third-party companies including an American-Israeli cybersecurity firm. The user is never asked. Never told. LinkedIn’s privacy policy does not mention it. Because LinkedIn knows each user’s real name, employer, and job title, it is not searching anonymous visitors. It is searching identified people at identified companies. Millions of companies. Every day. All over the world.
More closed-door discussions with the Trump administration won’t strengthen cooperation, they will undermine trust, transparency, and in the worst case even the EU’s ability to enforce its own rules.
Together with other civil society organisations, we call on the @EUCommission to halt this “dialogue” and focus on stronger, faster, and more transparent enforcement of Europe’s digital laws.
Read our statement ⤵️
https://edri.org/our-work/europes-digital-laws-are-not-bargaining-chips/
In reaction to the recent plan to “open a formal dialogue” with the US government on EU tech rules, EDRi and other civil society organisations urge the Commission to halt this plan that risks giving Big Tech a back door to weaken the EU digital rulebook and its enforcement.
Donald Trump poltert bei jeder Gelegenheit gegen die EU und ihre Digitalregeln. Künftig soll ein neues Gremium der US-Regierung offenbar Mitsprache einräumen, berichtet das Handelsblatt. Im Gegenzug soll es Zollerleichterungen geben.
RE: https://infosec.exchange/@mttaggart/116320350237766467
It's so funny that no one even wants to own the word "ad" anymore. They're "tips." For your own good. Gotcha.
RE: https://mastodon.social/@danluu/116317069604398190
ads in pull request descriptions wasn't on my bingo card but it makes perfect sense
RE: https://social.heise.de/@heiseonlineenglish/116301661509651336
Not a shocker: RAM and storage are already being diverted to servers to feed the AI beast. Why target the consumer market with CPUs when the availability and pricing of other components is going to be in question?
This is going to be great for Apple, lousy for small vendors like System76, and Framework. Not sure about Dell, HP, etc. It will also be awful, of course, for all of us who care about general-purpose computing.
Hold on to your old hardware, etc. I have a feeling it’s going to be needed again.
Myk
ISEC @ TU Graz
elle
Christian Laugesen
EDRi
netzpolitik.org
Greg K-H
Zak 
Eloy. @ EH23
Joe Brockmeier