{"id":106,"date":"2011-01-04T15:09:05","date_gmt":"2011-01-04T14:09:05","guid":{"rendered":"http:\/\/46.105.150.90\/tstnunix\/?p=106"},"modified":"2011-01-04T15:09:05","modified_gmt":"2011-01-04T14:09:05","slug":"reveal-hidden-visitors-on-viadeocom","status":"publish","type":"post","link":"https:\/\/nunix.fr\/?p=106","title":{"rendered":"Reveal hidden visitors on Viadeo.com"},"content":{"rendered":"

Viadeo has a feature to reveal who visited your profile…. but you first have to pay to become a premium user.<\/p>\n

But the way viadeo presents us the different profiles \u00ab\u00a0anonymized\u00a0\u00bb (cf picture1) contains a token which identify a profile. To illustrate this tiny breach in their business, I’ve created a small script you can launch when browsing the viadeo \u00ab\u00a0profile visits view\u00a0\u00bb<\/a>.<\/p>\n

Basically it replaces all links on profile cards by the user profile link whereas normally they point to the subscription page. The script also browses for you the different profiles and replace the labels by the real name and job position from your visitor (cf picture 2). Be careful that this latest option creates automated activity for your account and indicates to the profiles being revealed that you have visited them.<\/p>\n

\u00a0<\/p>\n

Before :<\/h3>\n

\"Anonymized
Anonymized profile card for your account’s visitors on viadeo.com<\/figcaption><\/figure><\/p>\n

After: <\/h3>\n

\u00a0<\/p>\n

\"Pprofile
Pprofile card for your account’s visitors revealed!!!<\/figcaption><\/figure><\/p>\n

\u00a0<\/p>\n

The user understandable code is below, but I also provide a mini version (cf attachments) you can bookmark in your favorite browser to execute it whenever you are on the viadeo page (correct as long as viadeo doesn’t change its systems).<\/p>\n

Code :<\/h3>\n

{codecitation class=\u00a0\u00bbbrush: javascript;\u00a0\u00bb}\/*
Copyright 2010 Gabriel Serme<\/p>\n

Licensed under the Apache License, Version 2.0 (the \u00ab\u00a0License\u00a0\u00bb);
you may not use this file except in compliance with the License.
You may obtain a copy of the License at<\/p>\n

http:\/\/www.apache.org\/licenses\/LICENSE-2.0<\/p>\n

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an \u00ab\u00a0AS IS\u00a0\u00bb BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*\/<\/p>\n

\/\/Utility functions<\/p>\n

function obValsl(ob){var r=[],mx=ob.length;for(var z=0;z<\/p>\n

function tags(element, tagName){ return obValsl(element.getElementsByTagName(tagName));};<\/p>\n

\u00a0<\/p>\n

function getHTTPObject() { if (typeof XMLHttpRequest != ‘undefined’) { return new XMLHttpRequest(); } try { return new ActiveXObject(\u00ab\u00a0Msxml2.XMLHTTP\u00a0\u00bb); } catch (e) { try { return new ActiveXObject(\u00ab\u00a0Microsoft.XMLHTTP\u00a0\u00bb); } catch (e) {} } return false; }<\/p>\n

\u00a0<\/p>\n

\/**<\/p>\n

* Change label on a card, to indicate a message<\/p>\n

* @parameter card : a user-card from viadeo<\/p>\n

* @parameter withName : if true, scrap the name from profile (additional network requetsts)<\/p>\n

*\/<\/p>\n

function changeLabel (card, message, withName){<\/p>\n

<\/span>\/\/change label<\/p>\n

<\/span>var label = card.getElementsByClassName(\u00ab\u00a0information\u00a0\u00bb).item(0)<\/p>\n

<\/span>.getElementsByClassName(\u00ab\u00a0main\u00a0\u00bb).item(0)<\/p>\n

<\/span>.childNodes[0]<\/p>\n

<\/span>.childNodes[0];<\/p>\n

\u00a0<\/p>\n

<\/span>label.innerHTML= message;<\/p>\n

<\/span>if (withName === true){<\/p>\n

<\/span>getNameFromProfile(label, card);<\/p>\n

<\/span>}<\/p>\n

}<\/p>\n

\u00a0<\/p>\n

\u00a0<\/p>\n

function getNameFromProfile(elem, card){<\/p>\n

<\/span>var pId = getPidFromCard(card);<\/p>\n

<\/span>if (undefined == pId)<\/p>\n

<\/span>return;<\/p>\n

<\/span>var http = getHTTPObject();<\/p>\n

<\/span>http.open(\u00ab\u00a0GET\u00a0\u00bb, baseUrl + pId, true);<\/p>\n

<\/span>http.onreadystatechange = function() {<\/p>\n

<\/span>if (http.readyState != 4)<\/p>\n

<\/span>return;<\/p>\n

<\/span>\/\/thx to http:\/\/www.anyexample.com\/webdev\/ajax\/ajax_example__get_page_title.xml<\/p>\n

<\/span>try { var real_status = http.status; }<\/p>\n

<\/span>catch (e) { return; }<\/p>\n

<\/span>\/\/ status != 200 means that page was not downloaded<\/p>\n

<\/span>\/\/ error 404 happened or something like this<\/p>\n

<\/span>if (real_status != 200)<\/p>\n

<\/span>return;<\/p>\n

<\/span>\/\/ regexp which parses text for value between .. tags<\/p>\n

<\/span>var re_title = new RegExp(\u00ab\u00a0[\\n\\r\\s]*(.*)[\\n\\r\\s]*\u00a0\u00bb, \u00ab\u00a0gmi\u00a0\u00bb);<\/p>\n

<\/span>\/\/ page text<\/p>\n

<\/span>var content = http.responseText;<\/p>\n

<\/span>var title = re_title.exec(content);<\/p>\n

<\/span>var emsg = \u00a0\u00bb; \/\/ output text<\/p>\n

<\/span>if (title == null) \u00a0\/\/ regexp didn’t match<\/p>\n

<\/span>return; \/\/we do not change the current label<\/p>\n

<\/span>else<\/p>\n

<\/span>emsg = title[1];<\/p>\n

<\/span>\/\/if everything is perfectly fine, we change label<\/p>\n

<\/span>elem.innerHTML= emsg;<\/p>\n

<\/span>}<\/p>\n

<\/span>http.send(null);<\/p>\n

}<\/p>\n

\u00a0<\/p>\n

\/**<\/p>\n

@return Pid if a picture is present, or undefined<\/p>\n

*\/<\/p>\n

function getPidFromCard(card){<\/p>\n

<\/span>var src = card.childNodes[0].childNodes[0].childNodes[0];<\/p>\n

<\/span>if (undefined == src){<\/p>\n

<\/span> return undefined;<\/p>\n

<\/span>}<\/p>\n

<\/span>src = src.getAttribute(\u00ab\u00a0src\u00a0\u00bb);<\/p>\n

<\/span>var pId = src.substr(src.indexOf(\u00ab\u00a0memberId=\u00a0\u00bb) + \u00ab\u00a0memberId=\u00a0\u00bb.length);<\/p>\n

<\/span>pId = pId.substr(0,pId.indexOf(\u00ab\u00a0&\u00a0\u00bb));<\/p>\n

<\/span>return pId;<\/p>\n

}<\/p>\n

\u00a0<\/p>\n

\/** Starting point *\/<\/p>\n

\u00a0<\/p>\n

var baseUrl = \u00ab\u00a0http:\/\/www.viadeo.com\/profile\/\u00a0\u00bb;<\/p>\n

var a = document.getElementsByClassName(‘user-card’);<\/p>\n

\/\/for all cards in the current page<\/p>\n

for (var i=0; i<\/p>\n

<\/span>var card = a.item(i).childNodes[2];<\/p>\n

\u00a0<\/p>\n

<\/span>var pId = getPidFromCard(card);<\/p>\n

<\/span>if (undefined == pId){<\/p>\n

<\/span> console.log(\u00ab\u00a0Couldn’t extract member profile\u00a0\u00bb);<\/p>\n

<\/span> continue;<\/p>\n

<\/span>}<\/p>\n

<\/span>\/\/change all links from the card, except common contacts<\/p>\n

<\/span>var links = Array.concat(<\/p>\n

<\/span>tags(a.item(i).childNodes[0], \u00ab\u00a0a\u00a0\u00bb),<\/p>\n

<\/span>tags(card.childNodes[0], \u00ab\u00a0a\u00a0\u00bb),<\/p>\n

<\/span>tags(card.childNodes[1], \u00ab\u00a0a\u00a0\u00bb));<\/p>\n

<\/span><\/p>\n

<\/span>for (var j=0; j<\/p>\n

<\/span>var l = links[j];<\/p>\n

<\/span>l.setAttribute(\u00ab\u00a0href\u00a0\u00bb, \u00ab\u00a0\/profile\/\u00a0\u00bb + pId);<\/p>\n

}<\/p>\n

\/\/temporary change label<\/p>\n

changeLabel (card, \u00ab\u00a0Wait for name\u00a0\u00bb, false);<\/p>\n

}<\/p>\n

\u00a0<\/p>\n

\/\/at this point, you can already click on picture or label to browse the profile<\/p>\n

\/\/second loop, to separate name fetching from simple url replacing<\/p>\n

for (var i=0; i<\/p>\n

<\/span>var card = a.item(i).childNodes[2];<\/p>\n

<\/span>\/\/change label, one per second<\/p>\n

<\/span>if (undefined == getPidFromCard(card)){<\/p>\n

<\/span> console.log(\u00ab\u00a0Couldn’t extract member profile\u00a0\u00bb);<\/p>\n

<\/span> continue;<\/p>\n

<\/span>}<\/p>\n

<\/span>window.setTimeout(changeLabel , 1000*i, card, \u00a0\u00ab\u00a0Wait for name – \u00a0\u00bb + i, true);<\/p>\n

}<\/p>\n

{\/codecitation}<\/p>\n

{jcomments on}<\/div>\n

\u00a0<\/p>\n

\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

Viadeo has a feature to reveal who visited your profile…. but you first have to pay to become a premium user. But the way viadeo presents us the different profiles \u00ab\u00a0anonymized\u00a0\u00bb (cf picture1) contains a token which identify a profile. To illustrate this tiny breach in their business, I’ve created a small script you can … Continuer la lecture de « Reveal hidden visitors on Viadeo.com »<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":104,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[25],"tags":[],"class_list":["post-106","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-js"],"_links":{"self":[{"href":"https:\/\/nunix.fr\/index.php?rest_route=\/wp\/v2\/posts\/106","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nunix.fr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nunix.fr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nunix.fr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nunix.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=106"}],"version-history":[{"count":0,"href":"https:\/\/nunix.fr\/index.php?rest_route=\/wp\/v2\/posts\/106\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nunix.fr\/index.php?rest_route=\/wp\/v2\/media\/104"}],"wp:attachment":[{"href":"https:\/\/nunix.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=106"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nunix.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=106"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nunix.fr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=106"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}