Pages

Monday, April 13, 2026

LinkedIn secretly scans for 6,000+ Chrome extensions, collects data

If you continue catching the vase when it falls, everyone will continue thinking the shelf is sturdy.


Russian government hackers broke into thousands of home routers to steal passwords TechCrunch. Help me. Fancy Bear was debunked LONG ago regarding having any actual Russians involved, let alone the government. So propaganda inflation


LinkedIn secretly scans for 6,000+ Chrome extensions, collects data

Follow up to What is BrowserGate? See alsoBleeping Computer: “A new report dubbed “BrowserGate” warns that Microsoft’s LinkedIn is using hidden JavaScript scripts on its website to scan visitors’ browsers for installed extensions and collect device data. BleepingComputer has independently confirmed part of these claims through our own testing, during which we observed a JavaScript file with a randomized filename being loaded by LinkedIn’s website. This script checked for 6,236 browser extensions by attempting to access file resources associated with a specific extension ID, a known technique for detecting whether extensions are installed. This fingerprinting script was previously reported in 2025, but it was only detecting approximately 2,000 extensions at that time. A different GitHub repository from two months ago shows 3,000 extensions being detected, demonstrating that the number of detected extensions continues to grow….LinkedIn’s site uses a fingerprinting script that detects over 6,000 extensions running in a Chromium browser, along with other data about a visitor’s system.

This is not the first time that companies have used aggressive fingerprinting scripts to detect programs running on a visitor’s device. In 2021, eBay was found to use JavaScript to perform automated port scans on visitors’ devices to determine whether they were running various remote support software. While eBay never confirmed why they were using these scripts, it was widely believed that they were used to block fraud on compromised devices. It was later discovered that numerous other companieswere using the same fingerprinting script, including Citibank, TD Bank, Ameriprise, Chick-fil-A, Lendup, BeachBody, Equifax IQ connect, TIAA-CREF, Sky, GumTree, and WePay…”