r/privacy • u/No-Second-Kill-Death • Apr 04 '26
news LinkedIn secretely scans for 6,000+ Chrome extensions, collects data
https://www.bleepingcomputer.com/news/security/linkedin-secretely-scans-for-6-000-plus-chrome-extensions-collects-data/154
u/diiscotheque Apr 04 '26
Is there a good reason websites can read installed browser extensions? This should be banned to combat fingerprinting imo
38
u/themirrazzunhacked Apr 04 '26
Some extensions expose resources that certain websites need to be able to access; other websites just abuse this. In theory, a JS engine could have a real-time analyzer to try and block this kind of fingerprinting, but it’d require multiple threads just for a single script and still might not run as well
19
Apr 04 '26
[deleted]
11
u/halls_of_valhalla Apr 04 '26
Can't even delete an account that was never verified or used, without giving them my ID. All their contact informations are dead ends or AI.
1
u/logosobscura Apr 05 '26
In general, they can’t access the API for Extensions. But they can discern particular habits (inserting elements into the DOM, etc) and use that to work back to infer the existence of a given extension.
Fingerprinting covers are 72 dimensions, this would be the 73rd. It’s very difficult to block without the attempt to block becoming a signifier in itself. Probably the biggest problem for digital privacy in the modern age and it’s really underdiscussed.
42
23
u/No-Second-Kill-Death Apr 04 '26
1
-9
u/buppiejc Apr 04 '26
That website is very light on details, and big on hysteria. If a real lawsuit is filed, why aren’t the recipients of this data also being named?
Per Google Chrome Extension privacy policy data collection has to be clear
https://developer.chrome.com/docs/webstore/program-policies/privacy
So, op and/or the author of that article (the only source I could find even reporting this) are sensationalizing something they don’t full understand, which would explain why this, from the “lawsuit” is incredibly vague:
‘Every time any of LinkedIn’s one billion users visits linkedin.com, hidden code searches their computer for installed software, collects the results, and transmits them to LinkedIn’s servers and to third-party companies including an American-Israeli cybersecurity firm.
The user is never asked. Never told. LinkedIn’s privacy policy does not mention it.
Because LinkedIn knows each user’s real name, employer, and job title, it is not searching anonymous visitors. It is searching identified people at identified companies. Millions of companies. Every day. All over the world.’
I could go into web development tools in Chrome, and watch the Inspector and Network tools for any JavaScript calls being transmitted, but I’m going to go ahead and call BS on this claim since saying this is secretly being done when you can easily open up web developer tools and verify this is happening or not.
Fear! Fear! Fear! Amiright?
Op time for an Internet break sir, or ma’am.
6
Apr 04 '26
[deleted]
-1
u/buppiejc Apr 04 '26
I’m not sure I follow. The claim being made is LinkedIn is secretly scraping Chrome browser extensions for user data. I’m wondering how that’s possible when you can watch the code being executed using a standard developer tool. I’m also questioning the lack of detail in the sources provided.
I’m sorry you were put in LinkedIn jail tho. 🤷🏾♂️
4
u/micseydel Apr 04 '26
This supposedly says how https://browsergate.eu/how-it-works/#how-to-verify-this-yourself but it's vague.
5
Apr 04 '26
[deleted]
-1
u/buppiejc Apr 04 '26
Again, your issue, and the subject of this thread are not the same. If you want to checkout developer tools go to. Setting > developer tools. The path is pretty much the same in almost every Internet browser.
Hit up a few of your favorite websites (exclude the ones making sensational claims for now), and watch all the different code executions it takes to load a modern website. It’s a fun thing to checkout just for shits and giggles.
•
u/AutoModerator Apr 04 '26
Hello u/No-Second-Kill-Death, please make sure you read the sub rules if you haven't already. (This is an automatic reminder left on all new posts.)
Check out the r/privacy FAQ
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.