Update: Cherrygram is safe.

.

GitHub Copilot inserted advertisements in pull requests

GitHub Copilot inserted ads promoting Raycast, Slack, Teams and itself in more than 11000 pull requests.

Technically, these were not ads but just "tips" by Copilot, as the raw data included a hidden HTML comment, "START COPILOT CODING AGENT TIPS."

This "bug" was introduced on March 24, when Copilot's abilities were expanded. Martin Woodward blamed it on a "programming logic issue" and tips have now been turned off permanently.

🧑‍💻 @agamtechtricks

78 Microsoft Products have "Copilot" in their name

As of now, there are 78 Microsoft Products with Copilot in their name. There are Copilots inside Copilots, Copilots for other Copilots, and even a physical key on all Windows laptops!

This website shows how each Copilot product is linked with the other Copilot products.

🧑‍💻 @agamtechtricks

Google REALLY wants our data, don't they?

or they want people to get their accounts locked once the plan ends so people would either have to delete everything to return to 15GB or continue paying

Either way, quite interesting

🧑‍💻 @agamtechtricks

LinkedIn is secretly injecting code and scanning 6,000+ browser extensions without consent

Everytime a user visits LinkedIn, malicious JavaScript is injected which scans the browser for installed extensions, without any notice and consent. This information is then stored at their servers and also sent to HUMAN Security, an American-Israeli cybersecurity firm.

The code downloads list of 6,222 extensions and detects each one of them. This has affected approx. 405 million people. Every extension is then matched to the (logged in) user. This is not mentioned anywhere in their privacy policy or any public document.

LinkedIn scans for:
• 762 LinkedIn-specific tools
• 209 sales & prospecting competitors
• 509 job search extensions
• VPNs, ad blockers, security tools
• Religious & Political extensions
• Disability & neurodivergence tools

LinkedIn knows which organization is using what tools by detecting what tools are installed by employees of that organization.

🔗 BrowserGate | Response
🧑‍💻 @agamtechtricks

LinkedIn has responded by saying that the claims are "plain wrong," and that:

To protect the privacy of our members, their data, and to ensure site stability, we do look for extensions that scrape data without members’ consent or otherwise violate LinkedIn’s Terms of Service

So, this means they are scanning extensions, doesn't it? Quite interesting, considering the list of these extensions is not published anywhere by LinkedIn.

🔗 YCombinator
🧑‍💻 @agamtechtricks

The all new Copilot app is simply Microsoft Edge

According to @TheBobPony, if "mscopilot.exe" is renamed to "msedge.exe" and the folder is renamed from "Copilot" to "Edge", it will simply open Microsoft Edge.

This happens even if Microsoft Edge Browser and WebView2 is completely uninstalled.

🧑‍💻 @agamtechtricks

Chrome is finally rolling out vertical tabs

To enable vertical tabs in Chrome, right click on the window and select "Show Tabs Vertically." This was previously available only as a flag on the stable version of Chrome, but now can be turned on easily.

Along with this, the new reader mode now offers a full-page interface. This can be enabled by right clicking on the page and selecting "Open in reading mode."

🔗 Google
🧑‍💻 @agamtechtricks

WhatsApp's username feature is now rolling out gradually on Android and iOS

Restrictions:

• Cannot start with a "www."
• Cannot end with a domain (.com, etc.) or a period
• At least 1 letter
• Only lowercase letters, numbers, periods and underscores.
• 3-35 characters

The username cannot match an existing username on Facebook/Instagram, and you can link your own username from these platforms.

WhatsApp will also offer an optional “username key,” which is a 4-digit code needed to send messages to a new username. Check WhatsApp > Settings > Profile if the update is available for you.

🔗 WABetaInfo
🧑‍💻 @agamtechtricks