All Questions

Today a question mentioning CVE popped up. I would have assumed that what CVE stands for and what it actually is would be common knowledge on a Q&A-site focused on IT security (maybe I'm biased ...

Feeling a bit hesitant rolling back an edit by a moderator, but on this question , this edit by a moderator invalidates this answer. My understanding across SE is that such edits are not okay (have ...

I was going to ask a question about how to get user buy-in to some security changes I'm making at work. I know what changes I want to make, how, and why, but I am looking for advice on how to show ...

The question How to prevent users from executing commands through browser URL has an answer which IMO does not provide the answer to the question, because the "how-to" information what was asked is ...

The comments on this question were recently purged - but only partially. Some of the subsequent comments devolved into Q&A, so I understand why some of them may have been purged. But others of ...

Before I posted, I wanted to make sure it would be acceptable? If not, is there a better site I could look for advice from the community?

Source post on hold: for reference The entire post was about hardening Chrome, referencing vulnerabilities, and offering solutions. He does not believe hardening chrome against the latest TLS_RSA, ...

There was a vulnerability in Tor Browser not long ago. After updates it was enabling javascript automatically without any warning whatsoever. I want to find out whether it was intentional or not. ...

2019 is here! And with the new year, as usual, comes a new iteration of Community Promotion Ads! Let’s refresh these for the coming year :) What are Community Promotion Ads? Community Promotion Ads ...

Question: Hacked aiming xgirlfreind The answer was deleted by a moderator, but I do not understand why. It has some humour/sarcasm, but it does make an attempt at answering the question. I doubt the ...

I just asked a question regarding old fashioned paper, ink and handwriting. I notice that there are many other questions on the site concerning "analog" information security, such as involving ...

I asked a question about a specific feature (CIDR-Binding) of a security tool. It was a specific question with a specific answer about a security tool, which I was able to answer later by diving ...

It's New Year's Day in Stack Exchange land... A distinguishing characteristic of these sites is how they are moderated: We designed the Stack Exchange network engine to be mostly self-regulating, ...

I asked a question on stack exchange meta recently for recommending a site for my question and they suggested Information security. Question link: Where to ask about improvements for a security ...

This answer was edited in such a way that it removed the context for its comments. The original answer contained a political spiel. While political spiels do not belong in answers, and its removal ...

From time to time there are questions about "operational security" around like: Search for military installed backdoors on laptop Police forcing me to install Jingwang spyware app, how to minimize ...

In response to one of my answers, a user took one part of my answer, declared that my including that one part means that "your answer [is] all about this one weird quirk of this one" part and stated "...

There are a number of questions on this site asking essentially the same question: Why do 2FA apps send an SMS to the user rather than have the user send an SMS to the server? here are some ...

The image tag is currently used for: the picture kind of images forensic images to 'image' a computer in the sense of writing a disk image to it And I'm surprised nobody referred to iso(-like) files ...

The answer: https://security.stackexchange.com/a/23431/10863 The timeline as I understand it: The question is about Nmap and one of the original authors of Nmap answers. They copy the answer to ...

What is the required amount of reputation required to edit a question? I'm not referring to the 2,000 rep style of edit, I'm referring to the propose an edit feature where it has to be peer reviewed ...

Why can't we fix identity theft? Your moderator is rather argumentative and doesn't seem to want to help me fix the question. I can't ask the question in any more detail (because I don't ...

I know there is a data-leakage tag, but that is not what I am looking for. I am wondering if there are any tags that encompass traditional information leakage in binary exploitation, for example ...

Background I recently came across an answer where an archived link (the one that point to the web archive) was used instead of the direct link. When I asked the user for the intention I got a reply ...

Let's participate in the Square CTF! Format: Jeopardy Duration: 6 days(!) Start: Thu, 2018-11-08 19:00 UTC (Other timezone) Finish: Mon, 2018-11-14 19:00 UTC (Other timezone) Official URL: http://...

I'm toying with the idea of asking a question that isn't exactly technical: how does an IT specialist who is NOT an expert in security select a security company or consultant for, say, a pentest or a ...

Let's participate in the HITCON CTF 2018! Format: Jeopardy Duration: 48h Start: Sat, 2018-10-20 02:00 UTC (Other timezone) Finish: Mon, 2018-10-22 02:00 UTC (Other timezone) Official URL: https://ctf....

I encountered a user with an anomalous activity pattern while going through the Suggested Edits queue, just now. It seems like they might be trying to game the system somehow. The suggested edit ...

Situation I recently spotted this question: Police forcing me to install Jingwang spyware app, how to minimize impact? In this post there is a good technical question, but it also provides ...

Let's participate in the Hackover CTF 2018! Hackover is a Jeopardy-style CTF and lasts 38 hours with ~100 participating teams announced. It's organized by the Hamburg CCC chapter in the context of ...

Let me explain a bit what I am trying to ask. So I am giving links of profiles of two high rep users. For example, two of our mods. schroeder's profile He is member of 22 sites but as you can see, ...

@AndrolGenhald suggested I ask this here. My answer here was deleted for the reason that "this is covered by other answers". First of all, its obviously not a duplicate answer, but it also contains ...

UPDATE - We've pushed this live for everyone now. Thanks to those who took the time to give feedback. Please do know, being live doesn't mean we can't address further changes for you! Write an answer ...

Similar to this discussion on math.SE and this discussion on cs.SE, I would like to suggest to turn on the citation feature. Interface Please note the "cite" link in the bottom right: which gives:

I asked the following question Does removing a GUI from a server make it less vulnerable? But I don't get enough reputation as I expected, once I start a bounty and I did get a reputation as I paid, ...

Right now Information Security is no longer accepting questions from my account. Is there a way to override this or am I screwed?

Let's participate in the Dragon CTF 2018 Teaser! The CTF runs Sa, 29 Sept. 2018, 12:00 UTC — So, 30 Sept. 2018, 12:00 UTC. You can find additional details on the CTFtime event page. Links to ...

It is possible to create the MQTT tag? There are some questions about MQTT but not a tag... Description from stackoverflow tag: MQTT - a light on the wire protocol for publish/subscribe. Clients ...

The scenario: A dangerously incorrect answer contains advice that has the potential to cause harm. The danger is missed, misunderstood or underestimated by some members and the answer receives some ...

Apparently framing is not allowed. I presume this means loading stackexchange in an iframe. However I recently started seeing that error message from stackexchange when I closed a security....

This high-traffic question from two days ago, many comments and answers: How could a public DNS server return bad results? The question comes in two parts: How is the ISP achieving this? Are ...

In this question: How a public dns server could return wrong results A good Samaritan user @Michael lovingly transcribed out the screenshot of a terminal in a suggested edit. Certainly text in a ...

I propose that checksum be marked as a synonym of hash. Checksums are not always hashes, for example parity bits on network packets, but I think that for security purposes, people use "checksum" as a ...

I find it curious that there aren't any tags for open source intelligence (OSINT) or even threat intelligence (TI). There do seem to be multiple questions that could make use of an OSINT tag, ...

I recently answered a question about a very specific piece of code the other day (PHP eval code sandbox break). Since I was on my mobile device I only posted a link rather than try to copy/format a ...

Tamper data Chrome not working Could you please explain to me how a question about an extension, used for tampering data by many of security experts, is not related to a QA site on Information ...

I have enough rep to protect and unprotect questions. Sometimes I come across a question that has been protected years ago, and I believe it should no longer be protected. In these cases, when should ...

This answer on the Bypass MAC address internet time filtering question seems to be a joke answer, half-answering the question using specific terminology (re: timing attack, side channel attack). ...

Normally I use the "Smaller Subheader" formatting to make my paragraphs easier to read. To my opinion, it works like a summary and helps readers to get the main idea by a quick glance. This is how my ...

I am member of sec.se for about 8-9 months and since we have 3 mods schroeder , Rory Alosp and AviD . But what I observed generally is that schroeder is highly active on main site, Rory Alosp is ...