Uncovering Hidden User Data: A Deep Dive into WeTal
Written on
Chapter 1: Introduction to WeTal
Recently, I received an intriguing LinkedIn message inviting me to join a platform named WeTal, described as "a Tinder for developers seeking jobs." Initially, I was skeptical and nearly disregarded the message. However, I noticed a URL in the invitation that included a parameter with the referrer’s username, prompting my curiosity.
Section 1.1: Discovering Data Through Network Calls
Upon examining the network activity, I uncovered a wealth of information. To do this in Windows, you can press F12 to access developer tools or right-click on the webpage and select "Inspect Element." Next, navigate to the "Network" tab. If it appears empty, refresh the page and filter the requests to "XHR" for a clearer view.
In total, I stumbled upon numerous API calls—essentially the communications between the site and its server—that revealed a vast amount of publicly accessible data, including user profiles, job postings, and reviews.
Subsection 1.1.1: Analyzing User Data
What caught my attention most was the user data. By following a specific link, I could access a JSON file containing information on 2,458 users. WeTal claims to host over 2,500 "talents," leaving me curious about the whereabouts of those missing individuals.
In essence, there’s no need for alarm; WeTal appears to be transparent in their data handling practices. I reached out to their developers on March 3, 2021, to inquire about their rationale for making these API calls publicly accessible, but I never received a response.
Chapter 2: Statistical Insights from User Data
The first video titled "Capture the Flag: Web Challenges, Part 2" dives into web challenges, showcasing techniques for extracting valuable data.
The second video, "Exposing ICT and his concepts once and for all," discusses the implications of data exposure, shedding light on security measures in web development.
An anonymous user from WeTal's server response is depicted in the screenshot below. This user, a freelancer with three years of experience, expects a salary of 900 SEK per hour for their services.
The data collected is invaluable for statistical analysis, revealing trends in salary expectations, experience levels, and skill sets among users. Despite the presence of 2,458 users, many profiles lack complete information. Excluding incomplete entries leaves 1,173 users, a number sufficient for meaningful statistical evaluation.
As highlighted, the purpose of this article is to empower readers to explore and analyze data found through browser developer tools. Stay curious about how websites function and the data exchanged between clients and servers. If you uncover something noteworthy, I’d love to hear about it!
If WeTal responds to my inquiry, I will update this article accordingly. Thank you for reading! If you found this article interesting, you might also enjoy these additional resources:
- Exposing Lies in Online Shop Source Codes
- Investigating Claims of Product Interest