All Questions

4
votes
2answers
73 views

What is the best practice for acronym usage in Questions/Answers/Comments?

Today a question mentioning CVE popped up. I would have assumed that what CVE stands for and what it actually is would be common knowledge on a Q&A-site focused on IT security (maybe I'm biased ...
-3
votes
2answers
35 views

Moderator edit invalidated an answer

Feeling a bit hesitant rolling back an edit by a moderator, but on this question , this edit by a moderator invalidates this answer. My understanding across SE is that such edits are not okay (have ...
1
vote
1answer
26 views

Are questions about interacting with users on-topic

I was going to ask a question about how to get user buy-in to some security changes I'm making at work. I know what changes I want to make, how, and why, but I am looking for advice on how to show ...
1
vote
1answer
33 views

Is this a link-only answer which should be improved by adding most important link content into answer?

The question How to prevent users from executing commands through browser URL has an answer which IMO does not provide the answer to the question, because the "how-to" information what was asked is ...
0
votes
1answer
23 views

Why were only some of the comments on this question recently purged?

The comments on this question were recently purged - but only partially. Some of the subsequent comments devolved into Q&A, so I understand why some of them may have been purged. But others of ...
1
vote
1answer
57 views

Would the IS site be an appropriate place to ask for help in deciding between a Masters in Cyber Security vs a CISSP certification?

Before I posted, I wanted to make sure it would be acceptable? If not, is there a better site I could look for advice from the community?
-5
votes
3answers
99 views

Moderator believes hardening Chrome ciphers is not about “security”, not relevant here [post on hold]

Source post on hold: for reference The entire post was about hardening Chrome, referencing vulnerabilities, and offering solutions. He does not believe hardening chrome against the latest TLS_RSA, ...
2
votes
1answer
69 views

Would this question be on-topic here?

There was a vulnerability in Tor Browser not long ago. After updates it was enabling javascript automatically without any warning whatsoever. I want to find out whether it was intentional or not. ...
8
votes
3answers
176 views

Community Promotion Ads — 2019

2019 is here! And with the new year, as usual, comes a new iteration of Community Promotion Ads! Let’s refresh these for the coming year :) What are Community Promotion Ads? Community Promotion Ads ...
0
votes
1answer
61 views

Why was this answer deleted?

Question: Hacked aiming xgirlfreind The answer was deleted by a moderator, but I do not understand why. It has some humour/sarcasm, but it does make an attempt at answering the question. I doubt the ...
2
votes
1answer
36 views

Is there an “analog” type of tag?

I just asked a question regarding old fashioned paper, ink and handwriting. I notice that there are many other questions on the site concerning "analog" information security, such as involving ...
10
votes
2answers
348 views

Which Open Source security tools are considered off-topic?

I asked a question about a specific feature (CIDR-Binding) of a security tool. It was a specific question with a specific answer about a security tool, which I was able to answer later by diving ...
14
votes
0answers
127 views

2018: a year in moderation

It's New Year's Day in Stack Exchange land... A distinguishing characteristic of these sites is how they are moderated: We designed the Stack Exchange network engine to be mostly self-regulating, ...
1
vote
1answer
46 views

What is the proper way to format a question asking for improvements for a security scenarios?

I asked a question on stack exchange meta recently for recommending a site for my question and they suggested Information security. Question link: Where to ask about improvements for a security ...
2
votes
2answers
79 views

Appeal of an edit rejection

This answer was edited in such a way that it removed the context for its comments. The original answer contained a political spiel. While political spiels do not belong in answers, and its removal ...
1
vote
2answers
51 views

How do we handle questions which imply danger to personal safety of the enquirer?

From time to time there are questions about "operational security" around like: Search for military installed backdoors on laptop Police forcing me to install Jingwang spyware app, how to minimize ...
-3
votes
1answer
101 views

Is saying that someone is *probably* a troll acceptable?

In response to one of my answers, a user took one part of my answer, declared that my including that one part means that "your answer [is] all about this one weird quirk of this one" part and stated "...
3
votes
0answers
56 views

Canonical answer for “Why not authenticate with the user sending an SMS?” should have its duplicate tags swapped

There are a number of questions on this site asking essentially the same question: Why do 2FA apps send an SMS to the user rather than have the user send an SMS to the server? here are some ...
10
votes
1answer
95 views

Ambiguous [image] tag

The image tag is currently used for: the picture kind of images forensic images to 'image' a computer in the sense of writing a disk image to it And I'm surprised nobody referred to iso(-like) files ...
9
votes
2answers
153 views

This answer was edited and should be undeleted. I cannot vote to undelete

The answer: https://security.stackexchange.com/a/23431/10863 The timeline as I understand it: The question is about Nmap and one of the original authors of Nmap answers. They copy the answer to ...
3
votes
1answer
19 views

What rep is required to edit / propose an edit on a question?

What is the required amount of reputation required to edit a question? I'm not referring to the 2,000 rep style of edit, I'm referring to the propose an edit feature where it has to be peer reviewed ...
0
votes
3answers
74 views

Can you help me rephrase my question?

Why can't we fix identity theft? Your moderator is rather argumentative and doesn't seem to want to help me fix the question. I can't ask the question in any more detail (because I don't ...
2
votes
0answers
45 views

Is there a tag for infoleaks?

I know there is a data-leakage tag, but that is not what I am looking for. I am wondering if there are any tags that encompass traditional information leakage in binary exploitation, for example ...
8
votes
2answers
202 views

Should we use archived links instead of direct links?

Background I recently came across an answer where an archived link (the one that point to the web archive) was used instead of the direct link. When I asked the user for the intention I got a reply ...
9
votes
1answer
311 views

Square CTF | 08 Nov. 2018, 19:00 UTC —14 Nov. 2018, 19:00 UTC

Let's participate in the Square CTF! Format: Jeopardy Duration: 6 days(!) Start: Thu, 2018-11-08 19:00 UTC (Other timezone) Finish: Mon, 2018-11-14 19:00 UTC (Other timezone) Official URL: http://...
8
votes
3answers
153 views

Is this question in scope: how to select a security firm/consultant

I'm toying with the idea of asking a question that isn't exactly technical: how does an IT specialist who is NOT an expert in security select a security company or consultant for, say, a pentest or a ...
8
votes
0answers
126 views

HITCON CTF 2018 | Sat, 20 Oct 02:00 — Mon, 22 Oct 02:00 UTC (48h)

Let's participate in the HITCON CTF 2018! Format: Jeopardy Duration: 48h Start: Sat, 2018-10-20 02:00 UTC (Other timezone) Finish: Mon, 2018-10-22 02:00 UTC (Other timezone) Official URL: https://ctf....
16
votes
2answers
245 views

Odd user activity - many small edits, bounties offered for a single other user's questions

I encountered a user with an anomalous activity pattern while going through the Suggested Edits queue, just now. It seems like they might be trying to game the system somehow. The suggested edit ...
1
vote
1answer
48 views

Editing misleading question, possibly against authors intention

Situation I recently spotted this question: Police forcing me to install Jingwang spyware app, how to minimize impact? In this post there is a good technical question, but it also provides ...
11
votes
8answers
249 views

Write-ups: Hackover CTF 2018 | Fri, 05 Oct, 20:00 UTC — Sun, 07 Oct, 10:00 UTC (38h)

Let's participate in the Hackover CTF 2018! Hackover is a Jeopardy-style CTF and lasts 38 hours with ~100 participating teams announced. It's organized by the Hamburg CCC chapter in the context of ...
0
votes
2answers
114 views

What does '101' reputation (on many sites) means in profiles of some high rep users?

Let me explain a bit what I am trying to ask. So I am giving links of profiles of two high rep users. For example, two of our mods. schroeder's profile He is member of 22 sites but as you can see, ...
-5
votes
2answers
144 views

Moderator deleted my answer without good reason

@AndrolGenhald suggested I ask this here. My answer here was deleted for the reason that "this is covered by other answers". First of all, its obviously not a duplicate answer, but it also contains ...
1
vote
5answers
515 views

Information Security's updated site theme is live!

UPDATE - We've pushed this live for everyone now. Thanks to those who took the time to give feedback. Please do know, being live doesn't mean we can't address further changes for you! Write an answer ...
1
vote
0answers
49 views

Enabling the citation feature on Stack Exchange postings

Similar to this discussion on math.SE and this discussion on cs.SE, I would like to suggest to turn on the citation feature. Interface Please note the "cite" link in the bottom right: which gives:
-4
votes
1answer
56 views

I want to start bounty for a question [closed]

I asked the following question Does removing a GUI from a server make it less vulnerable? But I don't get enough reputation as I expected, once I start a bounty and I did get a reputation as I paid, ...
2
votes
1answer
60 views

Questions are no longer being accepted

Right now Information Security is no longer accepting questions from my account. Is there a way to override this or am I screwed?
15
votes
1answer
728 views

Write-ups: Teaser Dragon CTF 2018: Sa, 29 Sept. 2018, 12:00 UTC — So, 30 Sept. 2018, 12:00 UTC, lasts 24 hours

Let's participate in the Dragon CTF 2018 Teaser! The CTF runs Sa, 29 Sept. 2018, 12:00 UTC — So, 30 Sept. 2018, 12:00 UTC. You can find additional details on the CTFtime event page. Links to ...
2
votes
1answer
33 views

It is possible to create an MQTT tag?

It is possible to create the MQTT tag? There are some questions about MQTT but not a tag... Description from stackoverflow tag: MQTT - a light on the wire protocol for publish/subscribe. Clients ...
-2
votes
2answers
71 views

Answers with the potential to cause harm

The scenario: A dangerously incorrect answer contains advice that has the potential to cause harm. The danger is missed, misunderstood or underestimated by some members and the answer receives some ...
1
vote
0answers
43 views

“Framing not allowed” when re-opening closed tab in google chrome

Apparently framing is not allowed. I presume this means loading stackexchange in an iframe. However I recently started seeing that error message from stackexchange when I closed a security....
4
votes
2answers
249 views

Is this bordering on “helping you break the security of a system”?

This high-traffic question from two days ago, many comments and answers: How could a public DNS server return bad results? The question comes in two parts: How is the ISP achieving this? Are ...
14
votes
2answers
153 views

Should we transcribe screenshots of text?

In this question: How a public dns server could return wrong results A good Samaritan user @Michael lovingly transcribed out the screenshot of a terminal in a suggested edit. Certainly text in a ...
2
votes
3answers
80 views

Merge [checksum] and [hash]?

I propose that checksum be marked as a synonym of hash. Checksums are not always hashes, for example parity bits on network packets, but I think that for security purposes, people use "checksum" as a ...
7
votes
0answers
98 views

New tag suggestion - OSINT

I find it curious that there aren't any tags for open source intelligence (OSINT) or even threat intelligence (TI). There do seem to be multiple questions that could make use of an OSINT tag, ...
4
votes
2answers
109 views

Is banhammer the best way to handle link only answers?

I recently answered a question about a very specific piece of code the other day (PHP eval code sandbox break). Since I was on my mobile device I only posted a link rather than try to copy/format a ...
-2
votes
1answer
143 views

Tamper data in Chrome question closed

Tamper data Chrome not working Could you please explain to me how a question about an extension, used for tampering data by many of security experts, is not related to a QA site on Information ...
10
votes
1answer
102 views

When is it appropriate to unprotect a question?

I have enough rep to protect and unprotect questions. Sometimes I come across a question that has been protected years ago, and I believe it should no longer be protected. In these cases, when should ...
4
votes
1answer
372 views

Is this joke answer really an answer?

This answer on the Bypass MAC address internet time filtering question seems to be a joke answer, half-answering the question using specific terminology (re: timing attack, side channel attack). ...
3
votes
2answers
82 views

Should I restrain from excessive using of headers in my answers?

Normally I use the "Smaller Subheader" formatting to make my paragraphs easier to read. To my opinion, it works like a summary and helps readers to get the main idea by a quick glance. This is how my ...
1
vote
3answers
66 views

Are mods have been assigned a specific job in moderating the site?

I am member of sec.se for about 8-9 months and since we have 3 mods schroeder , Rory Alosp and AviD . But what I observed generally is that schroeder is highly active on main site, Rory Alosp is ...

15 30 50 per page