Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Next dream job can be in an HTTP header

frenxi.com

Post reply on HN
Print view View original

21–30 of 178 posts

Re: Next dream job can be in an HTTP header

#22

Post by saagarjha »

asebold wrote: post #5

How did you find quirky headers on other websites? Did you use a script?

  $ curl -s -o /dev/null -D - https://frenxi.com/http-headers-you-dont-expect/
    HTTP/1.1 200 OK
  Content-Type: text/html
  Content-Length: 47608
  Connection: keep-alive
  Last-Modified: Fri, 15 May 2020 01:35:43 GMT
  x-amz-server-side-encryption: AES256
  Accept-Ranges: bytes
  Server: AmazonS3
  Via: 1.1 ddaf46a95abcfc80e8eae76235e2127c.cloudfront.net (CloudFront), 1.1 37d64bca4c93552139fb3a85c9c4a119.cloudfront.net (CloudFront)
  Strict-Transport-Security: max-age=31536000; includeSubDomains
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  X-Content-Type-Options: nosniff
  X-hack: Like HTTP headers? Check this blog post https://frenxi.com/http-headers-you-dont-expect/
  X-Amz-Cf-Pop: SEA19-C2
  Date: Fri, 15 May 2020 04:48:24 GMT
  ETag: "194d54c969aad10b9c74ca6d591ae3e7"
  Cache-Control: public, must-revalidate, max-age=0
  Vary: Accept-Encoding
  X-Cache: RefreshHit from cloudfront
  X-Amz-Cf-Pop: SFO20-C1
  X-Amz-Cf-Id: J_OaNOGn_a8oZRQzKfe9spXbuDp-V-zhmlX1tQJSLNM1BD4EFTYERg==

Re: Next dream job can be in an HTTP header

#23

Post by hombre_fatal »

Just telling people to apply to domain.com/jobs is pretty lame. So, basically the same door that anyone else goes through when they click the "Careers" link in your site's footer?

Reminds me of when I solved one of the CTF challenges for a website only for my reward to be "We're hiring! Apply at jobs.example.com!"

Real "be sure to drink your Ovaltine" moment.

Re: Next dream job can be in an HTTP header

#25

Post by galaxyLogic »

I had a similar idea for financing Open Source software projects. The contributing sponsors would get their URL and add-text into a comment at the top of the source-code. The bigger your sponsorship the higher up in the list your company will be.

The adds would of course be targeted at hackers, such as come work for us, since only hackers read source-code. So it would be a very targeted ad (like the http-header thing).

I don't know if this has been tried out in practice but why not, if even HTTP-headers are used for a similar purpose?

Re: Next dream job can be in an HTTP header

#26

Post by saagarjha »

hombre_fatal wrote: post #23

Just telling people to apply to domain.com/jobs is pretty lame. So, basically the same door that anyone else goes through when they click the "Careers" link in your site's footer? Reminds me of when I solved one of the CTF challenges for a website only for my reward to be "We're hiring! Apply at jobs.example.com!" Real "be sure to drink your Ovaltine" moment.

Google Foobar does it right and lets you skip to actually be considered, which is nice.

Re: Next dream job can be in an HTTP header

#29

Post by antigirl »

city41 wrote: post #28

Can someone share what header the author added to their site? I only have my iPhone for the next 6 days. Anyone know of a way to see headers on an iPhone out of curiosity?

x-hack: Like HTTP headers? Check this blog post https://frenxi.com/http-headers-you-dont-expect/
Post reply on HN