3 ms·

Further downhill than secretly installing an IMAP proxy on your phone and hijacking all your email to go through it in a way that destroyed all TLS security to

• KaiserPro 4y ago
  wait what?
  • robin_reala 4y ago
    I hadn’t heard of this either, but incredibly it turns out to be true: https://engineering.linkedin.com/mobile/linkedin-intro-doing-impossible-ios https://engineering.linkedin.com/mobile/linkedin-intro-doing...
    • chipsa 4y ago
      Though, I was thinking that same sort of technology might come in handy for people that wanted to have encrypted email, without having to use a special encrypted email app: proxy through an app that did the encryption and decryption, but didn't store anything.
  • stefanfisk 4y ago
    https://jordan-wright.com/blog/2013/10/26/phishing-with-linkedins-intro/ https://jordan-wright.com/blog/2013/10/26/phishing-with-link...
  • heleninboodler 4y ago
    Yeah [1], and that's not even mentioning that the motivation behind those questionable "engineering" decisions was to be able to read and modify all your emails, helpfully injecting linkedin content into them. [1] https://threatpost.com/linkedin-intro-app-equivalent-to-man-in-the-middle-attack-experts/102683/ https://threatpost.com/linkedin-intro-app-equivalent-to-man-...
• deleted 4y ago
  [deleted]
• skeeks 4y ago
  That is a separate, standalone app, not the regular LinkedIn app
  • heleninboodler 4y ago
    This doesn't excuse the fact that the company did this.
• greatartiste 4y ago
  No I must admit that is even lower than I thought they were capable of , yet somehow doesn't surprise me.