Secret Messages in Website Headers - Stupid Geek Tricks
Discovering Concealed Messages in Website Headers
A fascinating, yet often overlooked, aspect of web technology involves the hidden messages embedded within HTTP protocol headers. This "geek trick" reveals how website administrators can conceal information beneath the surface of their sites.
The core principle relies on the HTTP protocol, a set of text-based commands used for communication between web browsers and servers. While typically functional, these headers offer a space for creative expression.
How to View These Hidden Headers
Several methods exist to access these concealed headers. For those comfortable with the command line, the curl utility – available on Linux, macOS, and Windows – provides a straightforward solution.
Alternatively, the Live HTTP Headers add-on for Firefox offers a graphical interface for inspecting HTTP headers.
Using curl, the following command can be employed (note the dash and capital 'I', not the letter 'L'):
curl –I sitename.com
For example, executing curl –I slashdot.org reveals embedded quotes originating from the animated series, Futurama.
Examples of Hidden Messages
The WordPress blogging platform utilizes the header for a practical purpose – advertising job opportunities to those capable of locating the headers.
curl –I wordpress.com
Ross, from SimpleHelp.net, showcases his musical preferences within his site's header. The command to view this remains consistent.
Online Tech Tips provides a crucial recommendation within its headers.
The CybernetNews blog playfully suggests taping one's thumbs to their hands, noting its widespread adoption.
Mattias Geniar proudly declares his status as a "rocker" through his header message.
Tux Games employs a subtle form of advertising within its headers.
Adding Your Own Hidden Message
Website owners utilizing an Apache web server and a .htaccess file can incorporate their own secret messages into HTTP headers. Simply open your .htaccess file and add the following line, preferably near the beginning:
Header set X-Nerd "Something Here"
The prefix "X-" can be customized (e.g., X-Yay, X-SecretStuff), and the message itself should be concise.
Bonus: Extracting Random Quotes from Slashdot
With additional command-line expertise, a script can be created to retrieve a random quote directly from the Slashdot servers. While largely impractical, it demonstrates the possibilities.
curl -sI slashdot.org | grep -E "X-(B|L|F)"
Numerous other websites also feature hidden messages within their headers, awaiting discovery.