LinkedIn scans for 6,278 extensions and encrypts the results into every request

LinkedIn is actively scanning users' browsers for 6,278+ extensions and linking this detailed software inventory to verified professional identities without disclosure or consent, enabling inferences about job searching, personal beliefs, and organizational security posture. This practice represents a significant privacy and security risk that extends beyond LinkedIn through data-sharing ecosystems, potentially exposing employees' digital footprints to reveal competitive intelligence about their employers. Technology leaders should recognize this as a systemic fingerprinting problem that affects organizational security, employee privacy, and compliance obligations, while setting precedent for how platforms monetize behavioral data at scale.

Hacker News3 min read
Read full article
LinkedIn scans for 6,278 extensions and encrypts the results into every request
LinkedIn is actively scanning users' browsers for 6,278+ extensions and linking this detailed software inventory to verified professional identities without disclosure or consent, enabling inferences about job searching, personal beliefs, and organizational security posture. This practice represents a significant privacy and security risk that extends beyond LinkedIn through data-sharing ecosystems, potentially exposing employees' digital footprints to reveal competitive intelligence about their employers. Technology leaders should recognize this as a systemic fingerprinting problem that affects organizational security, employee privacy, and compliance obligations, while setting precedent for how platforms monetize behavioral data at scale.