LinkedIn Apologizes For Trying To Connect Everyone In Real Life (vocativ.com)

LinkedIn has apologized for a vague new update that told some iPhone users its app would begin sharing their data with nearby users without further explanation. From a report: The update prompted outrage on Twitter after cybersecurity expert Rik Ferguson received a strange alert when he opened the resume app to read a new message: "LinkedIn would like to make data available to nearby Bluetooth devices even when you're not using the app." That gave Ferguson, vice president of research at the cybersecurity firm Trend Micro, a handful of concerns, he told Vocativ. Among them: "the lack of specificity, which data, when, under what conditions, to which devices, why does it need to happen when I'm not using the app, what are the benefits to me, where is the feature announcement and explanation, why wasn't it listed in the app update details." Reached for comment, LinkedIn said it's a mistake -- that some iPhone users were accidentally subject to undeveloped test feature the company is still working on.

Comments

It was a mistake

[thegarbz]

you found out about this horrible feature before we officially released it.

Nothing new

[93 Escort Wagon]

This isn't the first time LinkedIn did something shady via their iPhone app. Frankly, I'm not sure why anyone would still trust them enough to install it.

Bad security practices and double standards

[ukoda]

My current pet peeve with LinkedIn is the weekly requests for access to my email contact list. Would you employ someone to work with technology who gave out their email password just to share their contact list? I emailed them to complain that if I didn't compromise my security the first time they asked why do they keep on asking? They bounced my email because they couldn't do a reverse lookup on my email server. Apparently a SPF record is not good enough for them, I need to have enough money to be able to pay for service that will allow reverse lookup. A real double standard considering they want access to my contact list.

While I am complaining, I am really tempted to bounce any incoming emails with a noreply reply address. Is anyone doing that yet? If I am prepared to accept their email I think it is only reasonable they should be prepared to accept my reply.