Hacker News Reader

I have a suspicion this app is harvesting all your LinkedIn contacts, uploading them to the app.sellhack.com server, and then as a "reward" for you giving up all that info, you can pull other contacts back out of sellhack.com.

If so, this is basically a Chrome virus.

View on HN

Yup, that's exactly what it's doing. It's grabbing mailto's, email addresses, twitter handles, etc off pages you see -- from you & your connections -- and sending them back to its server.

https://gist.github.com/anonymous/b15b1e3f6cfb8497e8f0#file-...

By using this extension you are compromising your friends' privacy!

This brings up an interesting point of social engineering compromising LinkedIn.

LinkedIn should immediately put a Captcha on their contact info display to stop this JS attack!

fuuu....

I tried it and it didn't work. I just uninstalled it.

THANKS YAHOO!

Yes it does work. Click Hack In and then Inspect Element of the Hack In DIV's. You can see the e-mail address easily.

Reply on news.ycombinator.com