this post was submitted on 03 Apr 2026
33 points (100.0% liked)

Privacy

9464 readers
525 users here now

A community for Lemmy users interested in privacy

Rules:

  1. Be civil
  2. No spam posting
  3. Keep posts on-topic
  4. No trolling

founded 2 years ago
MODERATORS
iopq@lemmy.world
33
BrowserGate: Technical breakdown of LinkedIn’s covert browser extension fingerprinting (the.unknown-universe.co.uk)
submitted 4 days ago* (last edited 4 days ago) by TheIPW@lemmy.ml to c/privacy@lemmy.world
11 comments fedilink hide all child comments
 

LinkedIn is using hidden JS to scan your browser for over 6,000 specific extension IDs via a known Chromium vulnerability. By inventorying your local software, they can infer highly sensitive "Special Category" data like health status, religion, and political advocacy without consent.

I’ve joined the dots on why Chromium-based "Shields" fail here and how to harden your home lab/network to stop the leak.

you are viewing a single comment's thread
view the rest of the comments
[–] onlinepersona@programming.dev 1 points 4 days ago (2 children)

So Firefox and its forks are safe?

[–] TheIPW@lemmy.ml 4 points 4 days ago

Mostly, yes. Firefox doesn't use the specific Chromium internal resource API that LinkedIn is exploiting for this. However, since the script relies on hidden GET requests, I still recommend Multi-Account Containers to isolate LinkedIn entirely, plus a custom uBlock Origin filter just to be sure.

[–] zer0squar3d@lemmy.dbzer0.com 1 points 4 days ago

Or if you change your useragent to anything other than chrome/chromium related as it only runs on detected chromium browsers.