Hacker News Reader

It's a cluster-fudge alright. The reporter should have, er, reported on what they did and what results they saw.

And it left the really big question open: how does this "app" pull the email address? If it's sitting there in the source of the page somehow, this is just a pretty wrapper around a critical LinkedIn bug. If it's doing something else . . . well, I would be really interested in knowing what else it was doing.

View on HN

No, not on the page. The extension appears to be making a request to "app.sellhack.com" to look up the LinkedIn member.

EDIT: And it's stealing your friends' contact details! Don't install it! https://news.ycombinator.com/item?id=7505728

it's easy to know what it is doing, it isn't using any LinkedIn exploits, it's scraping the name, url and company from the LinkedIn page then constantly running every possible combination against Rapportive and checking to see if it gets any returns and then compares the linkedin url of each return to the linkedin url it got from scraping. Rapportive is ironically a LinkedIn owned company so basically he is just dogfooding LinkedIn to exploit them

Identical to something like this but with with a few added steps

http://www.emailfinder.io

Reply on news.ycombinator.com