LinkedIn accused of covert browser extension scanning in ‘BrowserGate’ report

Coverage from Bleeping Computer indicates that Microsoft's LinkedIn platform is under scrutiny for allegedly using hidden JavaScript scripts to scan visitors' browsers for installed extensions and collect device data, as detailed in a report by Fairlinked e.V.

The "BrowserGate" report claims LinkedIn injects JavaScript that identifies thousands of browser extensions, linking this information to user profiles. This data, including details about employers and job roles, is reportedly used to identify companies using competing sales tools, effectively mapping out competitor customer lists. BleepingComputer confirmed that LinkedIn loads a script that checks for over 6,000 browser extensions using a known detection technique. The script also gathers extensive browser and device information such as CPU core count, memory, screen resolution, and battery status.

LinkedIn denies misusing the data, stating the scans are to protect the platform and users from extensions violating their terms of service, and claims the report originates from an individual whose account was restricted for scraping.

Source: Bleeping Computer