LinkedIn Accused of Secret Browser Scanning

🔑 Enhanced Key Takeaways

• •The 'BrowserGate' campaign specifically alleges that LinkedIn utilizes a technique known as 'browser fingerprinting' to create persistent identifiers that track users even after they log out or clear cookies.
• •Security researchers have identified that the specific JavaScript library used by LinkedIn for this scanning is linked to a third-party fraud detection vendor, raising questions about data sharing agreements and the scope of third-party access to user browser environments.
• •The German data protection authorities (BfDI) have initiated a formal inquiry into whether LinkedIn's browser scanning practices constitute 'processing of special categories of personal data' under Article 9 of the GDPR, which requires explicit, granular consent.

🛠️ Technical Deep Dive

• •The scanning mechanism reportedly utilizes the 'navigator.plugins' and 'navigator.mimeTypes' JavaScript APIs to enumerate installed browser extensions and software versions.
• •Data is transmitted via asynchronous XHR (XMLHttpRequest) requests to LinkedIn's telemetry endpoints, often obfuscated within base64-encoded payloads to evade basic network traffic inspection.
• •The implementation involves a 'fingerprinting script' that executes upon page load, generating a unique hash based on the combination of installed extensions, screen resolution, and hardware concurrency, which is then cross-referenced with the user's session ID.

🔮 Future ImplicationsAI analysis grounded in cited sources

⏳ Timeline