4 ms·

I'm fairly certain that LinkedIn has little or no regard for user privacy and security. Why do I say this? Even as early as 2007, I noticed that LinkedIn disp

by elangoc 14y ago

I'm fairly certain that LinkedIn has little or no regard for user privacy and security. Why do I say this? Even as early as 2007, I noticed that LinkedIn displayed 3 rotating links to people I might be 'interested' in connecting with. And among names of people I knew well, one or two names repeatedly popped up that were vaguely familiar, but they were neither friends nor friends of friends (as far as I knew). Then it dawned on me -- one of those vaguely familiar names is a person living halfway around the world whom I've never met except for the email inquiry he made to a mailing list and his followup to my response. The only way LinkedIn (or any real person) could think that we had any sort of affinity is if they read that singular email thread in my email. Yes, my email+password combo for LinkedIn was my email+password combo for my email. So LinkedIn was snooping in my email, for which they would needed to have saved my password in plaintext (or equivalent) somewhere. If I needed further proof, after my changing my email addr that I used to login to LinkedIn, I stopped getting those invasive people suggestions. I then googled (again, back in 2007) about LinkedIn and snooping in people's email accounts, and an interview with the CEO had a brief mention of it, where the CEO flatly denied any sort of privacy breach. I think we need to supersede the commentary of LinkedIn's incompetent handling of security and privacy (which they spectacularly proved already) with the idea that not only do they not give a flip, but they want to keep it that way for their own maximum benefit.

hackinthebochs 14y ago
It seems more likely that the person on the other end of the conversation simply did the "import gmail contacts" option, and during this process they noticed the correspondence between you and him. Then when you changed your email for linkedin that connection was broken.
- tedunangst 14y ago
  Exactly. All of these "there's no way anyone could have known that" stories ignore the fact that there is another person who could have known and provided that info.
  - elangoc 14y ago
    That's a good point. I'll keep that in mind. I'm still hesitant to feel like it explains everything -- in 2007, LinkedIn still didn't seem that ubiquitous (after all, FB was then just opening itself up to non-college students, and LinkedIn's target demog. was still the pre-internet generation). So there weren't a whole lot of people I knew on the site to begin with, and there wasn't anybody I knew in common on LinkedIn connecting me to at least 2 of the vaguely familiar people I knew. And those 2 people started getting suggested to me by the site at the same time -- it seems too coincidental that these people (and others) provided their email contacts to LinkedIn at exactly the same time. One good takeaway is, despite it taking me 5 more years to learn my lesson, and the really hard way :-(, I'm now using KeePass and creating difficult, unique passwords for each site, and using git to sync across computers. That helps.
- elangoc 14y ago
  Although that might seem like a likely explanation, LinkedIn wasn't putting the "import email contacts" widget in your face like they do, now. Of the two people I vividly remember as only vaguely familiar suggested people, neither was in my Gmail address book. I had a 2-sent-emails thread with one person, and no direct emails with the other. In 2007, Gmail might have already been auto-collecting contact info of people you email directly, but that can't explain the 2nd person.
jen_h 14y ago
I don't think they were logging into email surreptitiously without you first doing a "Find My Friends" thing--that's clearly illegal. However, my guess is that they did at least the following (which is still creepy, IMHO): - Used phone contacts from the mobile app to use as suggestions. I noticed a serious uptake on weird connection suggestions after I first installed the app a few years back. Checking it out on a proxy, I noticed that it wasn't using SSL, either, so I uninstalled that puppy quick. I assume they've fixed this between then and now. - The "Find My Friends" from the Web and Mobile works both ways - so if someone you've emailed in the past chooses to do this, you start seeing them in your suggestions list. If I remember correctly, their original method for doing this was an actual login to email (which may be what happened to you; I don't know if there's any way to get them to clear out those suggestions once you've done it. I contacted Support about this awhile back & couldn't get an answer). What seemed weird to me about this is that all my wedding vendors popped up at the same time as suggestions...like they all got on LinkedIn at once or something. - If you look at someone's profile or they look at yours--even anonymously, you're linked somehow for suggestions. I've seen people I haven't talked to or emailed in 15 years and three email accounts ago recommended, as well as their spouses(!). Serious privacy issues here if you spend a few minutes thinking about the possibilities. ;) A quick tip--would bet many HN folks already know this, but I've talked to bunches of people who don't: Unless you explicitly set the "Select what others see when you view their profile," option (and keep checking it occasionally - just found mine was reset somehow), anyone whose profile you've viewed can see that you've viewed it. I love this feature (from the who's-viewed-me side, at least), but it's still creepy and something to be aware of if you're LinkedIn stalking someone... Also, it does look like they finally added a "Security" checkbox in Settings to always browse using https - would highly recommend setting that one if you haven't already.

by elangoc 14y ago

hackinthebochs 14y ago

It seems more likely that the person on the other end of the conversation simply did the "import gmail contacts" option, and during this process they noticed the correspondence between you and him. Then when you changed your email for linkedin that connection was broken.

tedunangst 14y ago
Exactly. All of these "there's no way anyone could have known that" stories ignore the fact that there is another person who could have known and provided that info.
- elangoc 14y ago
  That's a good point. I'll keep that in mind. I'm still hesitant to feel like it explains everything -- in 2007, LinkedIn still didn't seem that ubiquitous (after all, FB was then just opening itself up to non-college students, and LinkedIn's target demog. was still the pre-internet generation). So there weren't a whole lot of people I knew on the site to begin with, and there wasn't anybody I knew in common on LinkedIn connecting me to at least 2 of the vaguely familiar people I knew. And those 2 people started getting suggested to me by the site at the same time -- it seems too coincidental that these people (and others) provided their email contacts to LinkedIn at exactly the same time. One good takeaway is, despite it taking me 5 more years to learn my lesson, and the really hard way :-(, I'm now using KeePass and creating difficult, unique passwords for each site, and using git to sync across computers. That helps.
elangoc 14y ago
Although that might seem like a likely explanation, LinkedIn wasn't putting the "import email contacts" widget in your face like they do, now. Of the two people I vividly remember as only vaguely familiar suggested people, neither was in my Gmail address book. I had a 2-sent-emails thread with one person, and no direct emails with the other. In 2007, Gmail might have already been auto-collecting contact info of people you email directly, but that can't explain the 2nd person.

jen_h 14y ago

I don't think they were logging into email surreptitiously without you first doing a "Find My Friends" thing--that's clearly illegal. However, my guess is that they did at least the following (which is still creepy, IMHO): - Used phone contacts from the mobile app to use as suggestions. I noticed a serious uptake on weird connection suggestions after I first installed the app a few years back. Checking it out on a proxy, I noticed that it wasn't using SSL, either, so I uninstalled that puppy quick. I assume they've fixed this between then and now. - The "Find My Friends" from the Web and Mobile works both ways - so if someone you've emailed in the past chooses to do this, you start seeing them in your suggestions list. If I remember correctly, their original method for doing this was an actual login to email (which may be what happened to you; I don't know if there's any way to get them to clear out those suggestions once you've done it. I contacted Support about this awhile back & couldn't get an answer). What seemed weird to me about this is that all my wedding vendors popped up at the same time as suggestions...like they all got on LinkedIn at once or something. - If you look at someone's profile or they look at yours--even anonymously, you're linked somehow for suggestions. I've seen people I haven't talked to or emailed in 15 years and three email accounts ago recommended, as well as their spouses(!). Serious privacy issues here if you spend a few minutes thinking about the possibilities. ;) A quick tip--would bet many HN folks already know this, but I've talked to bunches of people who don't: Unless you explicitly set the "Select what others see when you view their profile," option (and keep checking it occasionally - just found mine was reset somehow), anyone whose profile you've viewed can see that you've viewed it. I love this feature (from the who's-viewed-me side, at least), but it's still creepy and something to be aware of if you're LinkedIn stalking someone... Also, it does look like they finally added a "Security" checkbox in Settings to always browse using https - would highly recommend setting that one if you haven't already.