All Questions

What is going on with this question? It looks fine when viewing, but the text in the edit box is... a bit strange. Is this a bug, or has the user engaged in some kind of unicode shenanigans? A small ...

I posted an answer to a question, where a potentially malicious link was part of the answer. I posted the link in code tags, so it would not be directly clickable, requiring user to actively copy it ...

I want to appeal the action taken by moderator. This question was deleted, but I think it was a legit & normal question, and doesn't deserve to be deleted. The moderator has also deleted the ...

How should the below question be handle? Is it good to post it as is? Or should I only describe the links as spamy and pornny and cut them off? The advantage of the former is that people can have full ...

I'm wondering –considering GRCon'21 has another Capture The Flag challenge– whether such signal-centric problems, which typically also involve a more "classical" infosec problems but do need ...

We're excited to announce that Auth0 will be sponsoring InfoSec beginning September 14 through December. We wanted to give you a heads up and walk you through what it will look like. How and where ...

In response to a recent question about getting people to trust untrustworthy software, I responded with a frame challenge explaining why this software should be considered malicious and abandoned by ...

I voted to close a question on the basis that it's asking for assistance writing malware. An admin seems to disagree strongly with my characterization of the behavior as malware, and: deleted the ...

I believe it's pretty self-evident that technology is rather generic at best. The tag currently has four questions, none of them pretty good. Let's have a look at the four burnination questions: 1. ...

My question went wrong Emails about bank are either scam or a mistake And, completely inconsistent, an almost identical question was accepted Sent text by bank I don’t have an account with- Is this a ...

There is no tag for LibreSSL, and I've now encountered several Qs that are tagged openssl but are actually about Libre. Searching "libressl" finds 55 Qs while "libressl [openssl]" ...

I had always thought that the community consensus on very minor suggested edits was that they should be rejected [1][2]. Personally, I agree with that (and I believe some reviews by schroeder support ...

September update: Community Ads are now live network-wide. All ads with a score of 6 or higher, or with a score of 4 or higher and no downvotes will be displayed (except for any that have a note from ...

On one of my answers, I provided an illustrative ASN.1 specification to accompany it. However, I could not find the right language to use to make it "light up". Does StackOverflow or ...

A user posted a log entry: Concerning GET request in logs I found an associated CVE of the vulnerability trying to be exploited. Is it okay to post and/or link the CVE number for clarification?

The phenomenon We regularly get questions where OP has run a vulnerability scanner on an application and asks for help with interpretation of the results. Usually they quote part of the scanner's ...

The question "Can HTTPS prameters be seen by the PC client?" was migrated to Super User, and I struggle to see why. It seems like an obvious fit for this site, on the format "can ...

There are a lot of tags that seem fairly redundant. There are a number of posts (example) discussing data remanence and recovery which seem to be used more or less interchangeably: data-recovery data-...

As technology evolves, answers to some questions might get outdated. Now, if I see a question which I know has outdated answers, I can either post a new answer, or ask a question which points out why ...

I don't know if this should be on meta or on the Information security stack exchange, so please tell me. With the code snippets feature, you can insert malicious code out of view, and people will ...

My question was closed for being off topic. The reason stated by the moderator was that "This is not a security issue. This is pure TCP/IP". I feel it is reasonable to consider my question ...

Can we act on this question? The question basically asks how to set up a firewall on Linux that blocks non VPN connections. Would a rewording of the question be useful in order to re-open it? Can we ...

I don't particularly use StackOverflow however, I just noticed that when you edit your profile under the preferences section they now have "theme" and there's a dark mode! So can $designer ...

As we say goodbye to the old year and welcome the new one, we have a tradition of sharing moderation stats for the past 12 months. As most of you here are aware, sites on the Stack Exchange network ...

Would this question from The WorkPlace SE about notification of OP's still active access to company data be on topic here? As access management and revocation of access for former employees is a ...

I have a question about my Information Security Stack Exchange post: I have been a victim, but of what? This is the timeline of what happened to my question: Tuesday, 03:20 PM: I wrote a question on ...

A few days ago, an old shopping account of mine was "hacked". Or at least, an attacker managed to change its password. Now, I am wondering what was the purpose of this happening and whether ...

One of our supplier suffered a cyberattack and I'm writing a report on how we handled the situation. I plan to include some metrics I judge useful (eg: time taken to inform the relevant personnel). ...

The review queue is empty, but a red dot is displayed: I have not skipped any questions in last couple of weeks. So skipped questions cannot be a reason. I have not reached the limit of 20 answers ...

The name "Angular" is used to refer to Angular 2.0 and upwards, while the name "AngularJS" refers to the old 1.x version. We have had angularjs for some time, it has 32 questions. ...

Are we supposed to avoid mentioning a specific piece of malware? In my latest question, I mentioned a specific piece of malware / app I encountered. The question does have broad applicability as well....

I am planning to launch a pen test company and several questions have arisen (e.g what NIST documents should I study, how to properly report vulnerabilities to clients and more). I would like to ask ...

I read on How to ask a good question the following text: If you're still unsure if you should ask your question on Information Security Stack Exchange, feel free to ask in our chat or on our meta ...

I asked the following question on WorldBuilding SE. How can invading aliens access the Internet to find out all about us? I now find that I am unqualified to judge the best answer. These range from &...

We have the following three tags: file-inclusion, 36 questions: A remote code execution attack where user input is used to build the path of code files to be executed, allowing an attacker to ...

You can see the lack of having an SE for Security Operation Center, this is a big deal and can make a big opportunity for a Security specialist to follow their work and share their knowledge and ...

I'm yyyyyyyan and this is not my primary account. I created this account so I could post this here, because I couldn't figure out what to do. A few days ago I tried to ask a question about email ...

I have noticed over the years that we get a lot of questions that are not information security specific, and are subsequently closed or migrated to a better site. While the migration process isn't a ...

Given the recent move away from the loaded meanings of "white" and "black", and that organisations are moving away from the terms "whitelist" and "blacklist", ...

Is such type of question acceptable here? Idk, I am looking for anything like requests from LAN through my computer's vpn to anything unusual like torrent clients, games sites/servers various video ...

There is a community rule for flagging questions here in SECSE: Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the ...

I edited (accepted) the question to bring it on-topic. I do not see a place to "vote to reopen". But since the question is closed, I edited the answer to provide a more accurate answer. My edit to ...

Somehow @Polynomial managed to quietly get up to 120k without many folks noticing! 4th out of our 180,000 members, with nearly 1000 answers and 65 questions! Congratulations!

Congratulations to @Schroeder for hitting 100k! Our 5th 100k-er He not only manages to be the most active moderator on Sec.SE, but also has answered over 1500 questions Well done!

Is dnyuz.com a Russian or Eastern European hacksite masquerading as a news site? It was quickly closed with the blurb "Unfortunately, we can't analyse the site for you or do a reputational deep dive."...

2020 has come! But… oops, where did the time go? It’s already March! Belated as it is, it’s time for a refresh of Community Promotion Ads! What are Community Promotion Ads? Community Promotion Ads ...

I know it's a silly request, but I just feel like name would fit the theme of Information Security better. It was also inspired by this rather funny question, where somebody wanted to create a ...

I recently posted this question: How do recovery tools like Cellebrite work and can they recover data from phones which utilize Full Disk Encryption? Quite simply, I read through the Help Center and ...

Do we need a canonical question about how to deal with ransomware, so that questions like this could be marked as a duplicate instead of closed as off topic? An answer could consist of something ...

Exhibit A: https://security.stackexchange.com/review/suggested-edits/149427 Rejected by Schroeder because he thought it was not about MD5 specifically (I thought it was and approved, but I was also ...