Hacker News new | ask | show | jobs
by tabel 4494 days ago
I think it could be easy to do this accidentally. From the main linkedin page, if I save my username and password (which is my email) the linkedin page automatically fills in the login/password box when I revisit the site.

It also has a separate username/password box for giving it access to your email address. I have never used this feature. However when I visit the site it fills in the second box with the same username and password.

If I used the same password for linkedin and my email account, saved my linkedin password, then all I would need to do is accidentally click the wrong button to send them my email credentials.