LinkedIn is secretly injecting code and scanning 6,000+ browser extensions without consent

Everytime a user visits LinkedIn, malicious JavaScript is injected which scans the browser for installed extensions, without any notice and consent. This information is then stored at their servers and also sent to HUMAN Security, an American-Israeli cybersecurity firm.

The code downloads list of 6,222 extensions and detects each one of them. This has affected approx. 405 million people. Every extension is then matched to the (logged in) user. This is not mentioned anywhere in their privacy policy or any public document.

LinkedIn scans for:
• 762 LinkedIn-specific tools
• 209 sales & prospecting competitors
• 509 job search extensions
• VPNs, ad blockers, security tools
• Religious & Political extensions
• Disability & neurodivergence tools

LinkedIn knows which organization is using what tools by detecting what tools are installed by employees of that organization.

🔗 BrowserGate | Response
🧑‍💻 @agamtechtricks

LinkedIn has responded by saying that the claims are "plain wrong," and that:

To protect the privacy of our members, their data, and to ensure site stability, we do look for extensions that scrape data without members’ consent or otherwise violate LinkedIn’s Terms of Service

So, this means they are scanning extensions, doesn't it? Quite interesting, considering the list of these extensions is not published anywhere by LinkedIn.

🔗 YCombinator
🧑‍💻 @agamtechtricks

The all new Copilot app is simply Microsoft Edge

According to @TheBobPony, if "mscopilot.exe" is renamed to "msedge.exe" and the folder is renamed from "Copilot" to "Edge", it will simply open Microsoft Edge.

This happens even if Microsoft Edge Browser and WebView2 is completely uninstalled.

🧑‍💻 @agamtechtricks

Chrome is finally rolling out vertical tabs

To enable vertical tabs in Chrome, right click on the window and select "Show Tabs Vertically." This was previously available only as a flag on the stable version of Chrome, but now can be turned on easily.

Along with this, the new reader mode now offers a full-page interface. This can be enabled by right clicking on the page and selecting "Open in reading mode."

🔗 Google
🧑‍💻 @agamtechtricks

WhatsApp's username feature is now rolling out gradually on Android and iOS

Restrictions:

• Cannot start with a "www."
• Cannot end with a domain (.com, etc.) or a period
• At least 1 letter
• Only lowercase letters, numbers, periods and underscores.
• 3-35 characters

The username cannot match an existing username on Facebook/Instagram, and you can link your own username from these platforms.

WhatsApp will also offer an optional “username key,” which is a 4-digit code needed to send messages to a new username. Check WhatsApp > Settings > Profile if the update is available for you.

🔗 WABetaInfo
🧑‍💻 @agamtechtricks

Here's how the Mexican Government was breached:

All the data was accessible with a single curl command:

curl -s https://repodatos.atdt.gob.mx/api_update/

This is the central data repository maintained by Mexico's federal government. The data was last updated in February 2026. Running the command gave a directory of 177 federal agencies, without any credentials required.

64GB of Federal Data has been mirrored, with 17 Live Credential Sets and 7 Git Repositories. There are 186M+ Estimated Records.

🔗 ODINT | SubStack
🧑‍💻 @agamtechtricks

You can now run macOS X (Cheetah) on your Wii

With wiiMac by Bryan Keller, you can now boot macOS X natively on your soft-modded Nintendo Wii with an SD Card slot

Hardware not supported yet:
• Wi-Fi
• Bluetooth
• Optical drive
• Hardware-accelerated graphics
• Audio

In case you're interested in knowing how it was ported, read this blog by Bryan.

🔗 wiiMac
🧑‍💻 @agamtechtricks

France is moving from Windows to Linux

After moving from Microsoft Teams to Visio (based on Jitsi), France is now replacing Windows with Linux on all their workstations, starting with their digital agency, DINUM. This is being done to "become less reliant on American tools and regain control of our digital destiny."

By reducing our dependence on non-European solutions, the State is sending a clear message: that of a public authority regaining control over its technological choices in service of its digital sovereignty. (translated)

🔗 Gouvernement
🧑‍💻 @agamtechtricks

giving claude rooted access just to hack subway surfers money glitch is crazy

🧑‍💻 @agamtechtricks x @attmemes