Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Rohkem teavet

Teema arhiveeriti. Please ask a new question if you need help.

LinkedIn hacks my Gmail contacts when they're open in the same browser. Is there a way for Firefox to prevent this?

tort
tort
more options

LinkedIn hacks my Gmail contacts without express permission by exploiting some vulnerability when they're both open in the same browser. (See a summary of the issue here: https://www.quora.com/Does-LinkedIn-access-your-email-or-contact-list). Is there a way for Firefox to prevent this?

LinkedIn hacks my Gmail contacts without express permission by exploiting some vulnerability when they're both open in the same browser. (See a summary of the issue here: https://www.quora.com/Does-LinkedIn-access-your-email-or-contact-list). Is there a way for Firefox to prevent this?

All Replies (2)

Paul
Paul
  • Moderator
  • Top 10 Contributor
more options

Hi

Thank you for your question.

This issue should be addressed with the arrival of a new feature that is due to arrive in Firefox in the near future called "container tabs". You can see more about this upcoming feature here.

Please keep an eye out for it possibly arriving in a future version of Firefox (it is already in the test versions of Firefox 51).

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

Hmm, it would be bizarre that a website in tab 1 could send background requests for data to a well designed website in tab 2 and actually get sensitive data in response. Otherwise, every marketer on earth would be constantly scraping your Facebook news feed, and we probably would have heard about that.

Two things I would check:

(1) Did you try changing your Gmail password to make sure that any login information you previously gave to LinkedIn is obsolete?

(2) If you check your Gmail settings, is LinkedIn currently authorized to connect?

In my account, this page lists the apps/websites/services allowed to access my Google account (not including the Gmail app, of course):

https://security.google.com/settings/security/permissions?pli=1

If that doesn't list apps, try the main page and look for the "Connected apps & sites" section:

https://myaccount.google.com/security