LinkedIn defends security of Intro service
LinkedIn has responded to criticism over its new Intro product, stating that many things that have been said are "not correct or purely speculative".
Last week, the company launched the service, which acts as a proxy service between a user and an email provider, intercepting emails in order to inject LinkedIn information for them.
The company's senior manager for information security Cory Scott wrote on the company's blog that the security team had challenged the idea internally in order to make sure it was implemented in a sound fashion. This included bringing in an outside security firm, iSEC Partners, to audit every line of code written, ensuring that email does not persist on its servers, placing the proxy server in a separate network segment, and performing its own internal penetration tests.
