Find the Employer: Reading Clues a Profile Leaves Out

Security Fundamentals Level 1/4 ~2 min 2026-08-11

The challenge

A person calls themselves an engineer online but does not list where they work. Open the sources and put two clues together: a profile photo from a work event and a short post. Name the company they work for and submit it.

What you'll learn

  • Notice that a missing profile field can be filled from other clues
  • Read text visible inside a photo such as a badge and a banner
  • Use a tagged location in a post as a confirming clue
  • Combine two simple sources to reach one answer
  • Understand that small details add up to reveal private facts

Skills tested

Basic open-source researchReading detail in photosCombining clues

Prerequisites

  • Familiarity with online profiles and posts
  • No technical background needed

How it works

People often think that leaving a field blank keeps it private. In practice the same fact usually shows up somewhere else they did not think to hide. The skill being practised here is simply paying attention: reading what a photo actually shows and noticing the small labels people post without a second thought.

Dana's profile lists a name, a job title, and a city, but the employer field is empty. The profile photo, though, was taken at a work event, and the badge on the lanyard plainly reads Dana Reyes - Acme Corp, with the same company name on the booth banner behind. A recent post talks about a great first week and is tagged at Acme Corp HQ. Each clue on its own is suggestive; together they are decisive.

The OSINT board shows each source as a card you open and read. The blank field is not the end of the story - the badge in the photo and the location in the post both point at the same company, so the employer is Acme Corp.

Common mistakes

  • Stopping at the blank field. The employer being unlisted does not mean it is unknowable - read the other cards.
  • Submitting the city or the job title. Austin and Software Engineer are real details, but the question asks for the company.
  • Not reading the text inside the photo. The badge and banner spell out the company name.
  • Treating one clue as proof. The badge and the tagged post agreeing is what makes the answer solid.

How to defend against it

If you would rather not have strangers work out where you are employed, remember that the details around you - badges, banners, office check-ins - say as much as any field on your profile. Privacy comes from controlling those, not just the form.

  • Avoid posting photos that show a work badge or branded backdrop clearly.
  • Turn off location tagging on posts, especially about a new job.
  • Think about what a photo reveals in the background before sharing it.
  • Assume small, scattered clues can be combined by anyone who looks.

Full solution

Pro and Max members unlock the complete step-by-step walkthrough.

Go Pro

Community stats

163 completions
89% success rate
M2F14M3 First blood

Related Daily Hacks

20,000+ Hackers 100+ Labs & Courses Free
Start Hacking Free