[166505] in North American Network Operators' Group
Re: If you're on LinkedIn, and you use a smart phone...
daemon@ATHENA.MIT.EDU (Michael Thomas)
Sat Oct 26 10:34:29 2013
Date: Fri, 25 Oct 2013 23:16:56 -0700
From: Michael Thomas <mike@mtcc.com>
To: Chris Hartley <hartleyc@gmail.com>
In-Reply-To: <CAPnfr8+d0xjsG3scq1zeSD10ks0KfGgW17ZSsSXfO5ysjeW-Sw@mail.gmail.com>
Cc: Nanog <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Chris Hartley wrote:
> Anyone who has access to logs for their email infrastructure ought
> probably to check for authentications to user accounts from linkedin's
> servers. Likely, people in your organization are entering their
> credentials into linkedin to add to their contact list. Is it a
> problem if a social media company has your users' credentials? I
> guess it depends on your definition of "is." The same advice might
> apply to this perversion of trust as well, but I'm not sure how
> linkedin is achieving this "feat."
>
Heck, it ought to show in the received headers. Of course they may purposefully
not be adding a received header in which their sleaze factor goes up even more.
Mike
