LinkedIn says its extra intense clipboard snooping in iOS is a bug
LinkedIn's iOS app has taken the ongoing issue of snooping at users' clipboards to whole, new level. The company has already said it's a mistake that will be fixed.
The issue of iOS apps monitoring copy-paste data has been a subject of concern since March, when a pair of software developers published their research. Tommy Mysk and Talal Haj Bakry discovered that a large number of existing apps (at the time) checked out users' clipboard data every time those apps were opened.
This is alarming when you really sit down and think back on all the times you've copy-pasted sensitive data, such as a sign-in credentials from your password locker or a credit card number that you don't feel like typing in again. If you haven't done that, great. But plenty of people have. And you probably don't want strangers peeping at your clipboard data regardless.
You May Also Like
The snooping issue reared up again in recent weeks with the beta release of iOS 14. Apple's next major operating system update for iPhone includes a new feature that lets people look at how their data is being accessed, something that's been described as the privacy equivalent of "nutrition labels."
As people started playing with the beta, some discovered that a number of major apps, like TikTok, are still doing some form of clipboard snooping. On Thursday, one Twitter user, Don Morton, demonstrated how LinkedIn's snooping is among the most invasive examples, with the app copying what's in the clipboard with every keystroke.
This Tweet is currently unavailable. It might be loading or has been removed.
Morton also discovered that Reddit's app is doing the same thing. (A fix is in the making for that as well.)
This Tweet is currently unavailable. It might be loading or has been removed.
Morton went and wrote at greater length about the real issue with this snooping in a Substack post. While these companies ought to fix their apps, he wrote, the bigger issue is that such data is accessible to developers in the first place.
"I could easily see 'phishing apps' starting to pop up (if they are not already) with the sole intention to scrape as much clipboard data as possible. To me, this is just as bad or even more worrying than the companies that have already been called out for it. For the most part, the companies that have been getting called out have motive to be 'good'. I’m just starting to think about companies or apps that have no intention of being good," Morton wrote.
The Substack post also includes a list of major apps that are still doing the snooping (and any company response, when there is one). He also recommends checking to see if your password manager has a feature that wipes clipboard data after a short amount of time.
LinkedIn exec Erran Berger responded to Morton's tweet with a technical explanation of what's happening here, adding that "we don't store or transmit the clipboard contents." A company spokesperson later confirmed to ZDNet that the issue is a bug, and work is already underway on a fix.
UPDATE: July 4, 2020, 4:04 p.m. EDT Added a note about Reddit confirming a fix is coming.
Topics Cybersecurity iOS LinkedIn Privacy
Adam Rosenberg is a Senior Games Reporter for Mashable, where he plays all the games. Every single one. From AAA blockbusters to indie darlings to mobile favorites and browser-based oddities, he consumes as much as he can, whenever he can.Adam brings more than a decade of experience working in the space to the Mashable Games team. He previously headed up all games coverage at Digital Trends, and prior to that was a long-time, full-time freelancer, writing for a diverse lineup of outlets that includes Rolling Stone, MTV, G4, Joystiq, IGN, Official Xbox Magazine, EGM, 1UP, UGO and others.Born and raised in the beautiful suburbs of New York, Adam has spent his life in and around the city. He's a New York University graduate with a double major in Journalism and Cinema Studios. He's also a certified audio engineer. Currently, Adam resides in Crown Heights with his dog and his partner's two cats. He's a lover of fine food, adorable animals, video games, all things geeky and shiny gadgets.
