Hacker News Reader

Comment by philrapo | Hacker News Reader

Hi have noticed this repeatedly as well. Under the "People you may know" section, I see names of people with whom I've emailed only 1 time, often many years ago. These are people with whom I have no relationship, and the only record of them in my life is a gmail email. This leads me to believe that LinkedIn is somehow accessing this data without my permission.

View on HN

Actually, that makes perfect sense, with no need for exotic cross-tab scripting attacks.

That person may be in your address book, which you've never shared with LinkedIn, but you are in their address book, which they clearly have shared.

Plausible for some, not others. I've seen LinkedIn suggest I connect to "people" that aren't people at all, but role addresses. E.g., reception@[my oral surgeon]. Others are email addresses that are ancient, 15 years old at least, or for domains that no longer exist.

No idea how they've gotten access to that, but I've never knowingly authorized a connection to my address books.

This is the behavior I have observed too. There are addresses that could not plausibly be gotten by any means other than unauthorized scraping of my mail or contacts.

The only other mechanism I can think of is that maybe they're getting them via Android or iPhone apps (not necessarily linkedin's app) with less-than-upfront disclosure of what the app's doing. Either way, it's slimy behavior.

Wouldn't it be possible for LinkedIn to infer that you might have a relationship with a person based on that person's relationships with other people LI knows that you know (or even overlap of companies, city/industry pairs, etc.)?

Reply on news.ycombinator.com