LinkedIn Secretly Scans Your Browser Extensions When You Visit Site
LinkedIn runs hidden code that scans your browser for installed extensions every time you visit the site. The professional networking platform then sends this data to third parties without telling users or asking permission.
Security researchers at Browsergate.eu discovered that LinkedIn automatically scans users' browsers for installed extensions during every visit. The scanning happens through JavaScript code that runs silently in the background.
The process works by sending requests to specific browser extension locations. If an extension is installed, the request succeeds. If not installed, the browser blocks the request. This lets LinkedIn build a list of what extensions each user has.
LinkedIn then transmits this extension data to third-party companies without user knowledge or consent. Browser extensions can reveal sensitive information about someone's job, interests, security tools, and online behavior.
The practice affects users of Chrome-based browsers when they visit LinkedIn. Users on Reddit and tech forums expressed concern about the unauthorized scanning, with some calling it an invasion of privacy.
This type of browser fingerprinting helps companies track users across websites and build detailed profiles for advertising. Many users install extensions specifically for privacy protection, making the secret scanning particularly concerning.
Your browser extensions can reveal private information about your habits, work tools, and interests. Companies shouldn't secretly collect this data, and you have a right to know when websites are scanning your computer.
Watch for LinkedIn's response to the allegations and potential regulatory action from privacy authorities.
Was this article helpful?
0 people found this helpful