Humans.txt

https://humanstxt.org/

by skilled • 4 years ago

171 62 4 years ago

humanstxt.org

rs_rs_rs_rs_rs2• 4 years ago

More often than not, the owners of the site don't like the authors signing it

They'll surely allow humans.txt!

loxdalen• 4 years ago

The owners might never go to /humans.txt and never read the source code.

rs_rs_rs_rs_rs2• 4 years ago

This is so stupid I don't even know where to start...

onion2k• 4 years ago

While it might be nice to claim authorship of a website you're proud of building, the main impact of adding this would be it'd provide an easy mechanism for bots and attackers to harvest data about the people and tech behind something on the internet. Knowing that "Name: Jimbob Smith" was on the team is incredibly useful to anyone who wants to phish access credentials.

jsty• 4 years ago

Between the "About Us" / "Team" / ... company website pages and LinkedIn profiles, I'd wager a majority of white-collar employees already have much more than the contents of Humans.txt linking back to details of their employment

psychphysic2• 4 years ago

Yes but this is easily harvested. Ironically, by design this would make that far easier.

You could probably work out my mother's maiden name from Facebook, but I wouldn't make a SecurityQuestions.txt file and chuck it on websites I make.

bootsmann• 4 years ago

LinkedIn actually has very strong safeguards in place on their API to prevent such automated crawling.

belter2• 4 years ago

https://www.google.com/humans.txt

https://www.netflix.com/humans.txt

gempir• 4 years ago

I agree.

At my company we have a humans.txt that is not hosted in public and we only add first names to a list. So you kinda remember who was involved over the years.

I think that is a nice touch and has no privacy issues.

diegof792• 4 years ago

Yes, the security implications of this information is the first thing that came to my mind while reading the site.

At my current company, we received many phishing attempts trying to impersonate people from IT (including phone calls). LinkedIn, CrunchBase, Glassdoor, and others gives you much more data about a company’s employees. But, ironically, leaving a humans.txt file makes things easier for bots.

shit_game• 4 years ago

Absolutely. Something that many people may forget or not realize is just how much of the Internet's traffic consists of bots - benevolent, malevolent, or benign. If you've ever made a machine's IP public and logged the IPV4 traffic, it's harrowing and sobering. The results of publicly available information on the Internet is outright terrifying if you are unfortunate enough to register a domain without WHOIS privacy protections through your registrar. The entire IPV4 space is constantly probed by bots and zombies for common vulnerabilities and data mining opportunities, and providing a humans.txt would only be serving any included information to bad agents on a silver platter. robots.txt is already a voluntary "standard", meaning that any agent accessing it must volunteer to respect it - providing more information to automated agents would certainly follow the same unspoken rule.

I think it's noble and fair for the people behind online content to wish to be recognized if they wish, but I would absolutely abstain from putting my name in any document like a humans.txt.

funstuff007• 4 years ago

Indeed, we have pages on our site that are north of 95% bot traffic. And they're not junk or honeypot pages. The humans on this page often represent hi value prospects we seek to convert. B2B2C service.

867-5309• 4 years ago

exactly, best example I've seen:

https://abbey-decorators.co.uk/humans.txt

bigDinosaur• 4 years ago

Does this imply that the latest SPA monstrosity I had to ship could be tied back to me? No thanks!

rob74• 4 years ago

My thoughts exactly - in that case, I want to be known as Alan Smithee (https://en.wikipedia.org/wiki/Alan_Smithee)...

nixcraft• 4 years ago

Wow. I last updated my humans.txt[0] file many moons ago. It is one of those things you find the first time, jump on it, and then forget about it. LOL. I guess the same goes for security.txt[1]

[0] https://www.cyberciti.biz/humans.txt

[1] https://securitytxt.org/

Aethylia• 4 years ago

The same often goes for security without the .txt too.

Trouble_007• 4 years ago

Previous post;

Humans.txt, like robots.txt, but for humans. (on Jan 23, 2011 43 comments) : https://news.ycombinator.com/item?id=2131692

alx__• 4 years ago

Top comment, still relevant 11+ years later

:shrug-emoji:

rpigab• 4 years ago

https://humanstxt.org/humans.txt

  /* SITE */
  Last update:2012/02/04

O__________O2• 4 years ago

Examples:

https://www.google.com/search?q=site:.com+inurl:%22humans.tx...

myfonj• 4 years ago

    > site:.com inurl:"humans.txt" "the humans responsible & colophon"

That yields just "About 139 results". But searching for

    inurl:humans.txt filetype:txt

[1] gives "About 2,030 results". Quite surprised seeing it somewhat adopted by Google and Netflix, but not exactly in the way proposed by the "standard".

https://www.google.com/humans.txt (Vague.)

https://www.netflix.com/humans.txt (Promotional misuse, probably.)

https://www.paulirish.com/humans.txt (Awww.)

[1] https://www.google.com/search?q=inurl:humans.txt+filetype:tx...

diegof792• 4 years ago

Looking at the examples, it seems that most companies use humans.txt as an Easter egg for curious people. The one from Medium is “fun” because the only contact info that they share is from people who reported security bugs: https://medium.com/humans.txt

blauditore• 4 years ago

What's up with the linked Spotify playlist? I don't understand how a music playlist could be related, and the list itself mildly looks like it was composed as a joke to create sexual references through titles.

tfsh• 4 years ago

It's a publicly open collaborative playlist. Not sure why it's linked, maybe an experiment from the author?

felipelalli• 4 years ago

Opsec sent hugs. :'(

harryvederci• 4 years ago

Maybe we can also have a network.txt file, containing all 3rd party services that the website (both client and server?) will connect to.

Then you can decide up-front if you want to make use of a website, and block any outgoing calls that aren't mentioned in network.txt.

It's just an idea. The server-side part is hard to verify (especially for closed source software), of course.

Wronnay3• 4 years ago

That's actually a good idea and would make it easier to create GDPR solutions.

E.g. if a Agency needs to create a new cookie banner, they could just look at the network.txt instead of having to call the client multiple times (one call won't be enough because most clients don't have any clue which 3rd party solutions they actually use)

Wronnay3• 4 years ago

I wrote down my Idea how this could look: https://github.com/CMiksche/network.txt

Cloudef• 4 years ago

I thought it would be a text file for filtering out certain humans

psychphysic2• 4 years ago

Allow Leet Hax0rz

Deny Lame Fedz

divbzero2• 4 years ago

… and ignored by most humans just as robots.txt is ignored by most robots.

marban2• 4 years ago

My rule of thumb: I love Web-Standards but if some quirky format hasn't taken off over a decade after introduction, it's not worth implementing. Maybe someone can come up with something less prone to scraping under the .well-known umbrella.

mg• 4 years ago

    if some quirky format hasn't taken off over
    a decade after introduction, it's not worth
    implementing.

Like this hypertext thing, which was introduced in the 60s and still not used much in the 70s:

https://en.wikipedia.org/wiki/Hypertext

marban2• 4 years ago

Apples and oranges?

sneak• 4 years ago

The /.well-known/ directory was created specifically to keep clutter like this out of the webroot. Please use it!

account42• 4 years ago

That was my first reaction too but it does kind of mess with it being a joke about /robots.txt, which is grandfathered in at the root. Also, /.well-known/ is not very human-friendly.

muppetman• 4 years ago

What possible useful purpose could this serve other than an ego stroke for the people who list themselves in it?

Anyway a variation on this ego-stroke existed back in the day, the webmaster! No one emailed the webmaster back then either (despite his/her multiple pleas on every page) so I can't fathom how anyone thinks this sort of silliness will take off.

Good on them though, but I can't help but feel not enough people liked or subscribed to their YouTube channel.

jemurray• 4 years ago

I use my humans.txt to give credit to the people who influenced me over the years. https://jasonmurray.org/humans.txt - not everyone needs their ego stroked, even if they do who cares.

ilyt• 4 years ago

So like about page but worse ? I can't see benefits

Hoasi• 4 years ago

An original human.txt page is fun.

garbagetime• 4 years ago

This just doesn't make much sense. HTML files are much better than txt files because HTML allows for hyperlinks.

divbzero2• 4 years ago

2 of 5 FAANG companies appear to implement humans.txt.

F: n/a

A: n/a

N: https://www.netflix.com/humans.txt

    |\  |\   |                                                       |   /|  /|
    |\  |\   |    +---------------------------------------------+    |   /|  /|
    |\  |\   |    |               .                             |    |   /|  /|
    |\  |\   |    |   *              _  _  _                    |    |   /|  /|
    |\  |\   |    |            |\ | |_  | |_ |  | \/      *     |    |   /|  /|
    |\  |\   |    |            | \| |_  | |  |_ | /\            |    |   /|  /|
    |\  |\   |    |       .                                     |    |   /|  /|
    |\  |\   |    |                                .            |    |   /|  /|
    |\  |\   |    |  .          .     STARRING           .      |    |   /|  /|
    |\  |\   |    |                                             |    |   /|  /|
    |\  |\   |    |         An all-star cast of talented        |    |   /|  /|
    |\  |\   |    |             designers & engineers           |    |   /|  /|
    |\  |\   |    |                                         *   |    |   /|  /|
    |\  |\   |    |    *                                        |    |   /|  /|
    |\  |\   |    |                   JOIN US!        .         |    |   /|  /|
    |\  |\   |    |         .                                   |    |   /|  /|
    |\  |\   |    |               jobs.netflix.com         .    |    |   /|  /|
    |\  |\   |    |     .                              .        |    |   /|  /|
    |\  |\   |    |                                             |    |   /|  /|
    |\  |\   |    +---------------------------------------------+    |   /|  /|
    |\  |\   |                                                       |   /|  /|
    |\  |\   |=======================================================|   /|  /|
    |\  |\__/                                                         \__/|  /|
    |__/         _                                                         \__|
    |          _[_]_   88     _      _              o     _      (_)          |
                ( )  s(  )s  ( ) /  ( )            -#-   ( )    =()
              .----. .----. .----. .----. .----. .----. .----. .----.
              |    | |    | |    | |    | |    | |    | |    | |    |
             _      _            __     _             __     _      _
            { }    [ ]          q  p  <( )>          (  )  ~( )~   ( )
          .----. .----. .----. .----. .----. .----. .----. .----. .----.
          |    | |    | |    | |    | |    | |    | |    | |    | |    |

G: https://www.google.com/humans.txt

  Google is built by a large team of engineers, designers, researchers, robots, and others in many different sites across the globe. It is updated continuously, and built with more tools and technologies than we can shake a stick at. If you'd like to help us out, see careers.google.com.

AstralStorm2• 4 years ago

More like marketdroids.txt for these.

catfishx• 4 years ago

I don't see how this will be useful to humans (which it, as I understand, should).

If the site owner wants to publish who the people behind a site are, they can add that to an About or Team page which are also a lot easier to read, especially for non-tech people.

I think this "humans.txt" file will be mostly useful for robots collecting that information and running automated phishing attacks or other bad stuff..

moffkalast• 4 years ago

It definitely sounds to me more like a doxxing.txt

vesinisa• 4 years ago

This sounds like an April Fool's RFC

amelius• 4 years ago

Can we also have a lawyers.txt?

instagraham• 4 years ago

It's cute and harmless to add if you're okay with getting more visibility/giving your developers more visibility

imhoguy• 4 years ago

I was curious would I get this https://humanstxt.org/hackers.txt, but nah.

https://stackoverflow.com/questions/15358356/what-is-the-use...

jpswade• 4 years ago

I know this is a play on robots.txt, but I always thought this should be people.txt.

rouxz• 4 years ago

How about pets.txt? My cat contributes a lot to my wellbeing so it was a tremendous help while building a website, I am sure people would like to know it.

Humans.txt

Related Stories