Hacker News Reader

Comment by DanBlake | Hacker News Reader

If you know about browser security, you know that was is being described is just not possible. Likely that the author had authorized some google importer or something, but simply visiting 2 different websites in 2 tabs would not allow this. Just imagine the insanity if it was possible for another site to read from another tab.

View on HN

I want to agree with you but I've seen a similar situation with Yahoo mail for someone else, and I confirmed first-hand they had not imported their contacts. So I don't even know what to believe anymore. It makes no sense for this to be possible, but neither does the story everyone is recounting.

I've seen this happen too. I'm actually under the impression that LinkedIn will log in to your email account if they can. They keep asking me to "confirm" an email address by giving them the password. Sorry, not gonna happen. I believe (without hard proof) that if Alice send Bob an email talking about Cindy, all three will be suggested as people they may know even if none of them have explicitly indicated such to LikedIn. Facebook apparently does some similar things, but LinkedIn is creepy in this regard. And remember, it could be that they didn't rifle through your email, but someone whose contacts include you. Oh, and I'm sure their "app" requires access to your phone contacts for the same reasons.

I'm actually under the impression that LinkedIn will log in to your email account if they can.

That seems the most likely scenario to me to explain the article. Maybe they try to log-in with your email and linkedin password on the chance that you used the same password for both services?

Then again, on gmail, this should trigger a "login on new device" warning and shouldn't be possible at all if two-factor-auth is active.

Only if linkedin tab is opened from gmail via target="_blank". But surely gmail has protection against it.

still shouldn't work, since they are on different domains

Reply on news.ycombinator.com