Entries with tag social networking site.

Lawsuit Contends that LinkedIn Hacks Users’ E-Mail Accounts

A class action suit filed by four LinkedIn users asserts that the social-networking site accesses its members’ e-mail accounts and gathers information from them without explicit permission. The suit contends that LinkedIn hacked the users’ external e-mail accounts and downloaded the addresses of their contacts “for monetary gain” by promoting its services repeatedly to the users’ nonmember contacts. At issue is whether the social networking site acted without clearly notifying the user or obtaining consent. Users have complained to LinkedIn about its “harvesting” of email addresses and repeated spamming of those addresses, notes the complaint. The lawsuit, filed in a San Jose, California, federal court, is asking for damages and an order prohibiting LinkedIn from continuing its “wrongful and unlawful acts.” LinkedIn, in a brief blog post, called the accusations false and says it never sends messages or invitations to join LinkedIn without user permission. (PCWorld)(The New York Times)(LinkedIn Blog)
 

DNS Problem Takes Down Business Networking Site

Social-networking site LinkedIn has recovered from an unspecified DNS issue that took its site offline for about a half of -a- day. “For a short time early on Thursday morning, linkedin.com was not accessible to a majority of our members,” LinkedIn spokesman Darain Faraz stated in an e-mail message to PC World. “We have been told by the company that manages our domain that this was due to an error made on their end. Our team was able to quickly address the issue, and the site is returning to normal.” The site’s domain name was redirected to a third-party server belonging to Confluence Networks, a network-services provider. This caused the service to go offline and could have let hackers compromise user accounts. Observers say the site was hijacked. Confluence Networks,on the other hand, said the issue was the result of human error rather than a security-related problem. One observer said that because LinkedIn does not use secure sockets layer or transport layer security  by default, users who tried to access the site while it was offline might have had their session cookies stolen, which could let a hacker easily access their account since the information is in text format. About a year ago, 6.5 million passwords were stolen from LinkedIn and uploaded to a Russian hacker site. (ZDNet)(PCWorld)(LinkedIn @ Twitter)
 

Showing 2 results.