All Questions

The phenomenon We regularly get questions where OP has run a vulnerability scanner on an application and asks for help with interpretation of the results. Usually they quote part of the scanner's ...

The question "Can HTTPS prameters be seen by the PC client?" was migrated to Super User, and I struggle to see why. It seems like an obvious fit for this site, on the format "can ...

There are a lot of tags that seem fairly redundant. There are a number of posts (example) discussing data remanence and recovery which seem to be used more or less interchangeably: data-recovery data-...

As technology evolves, answers to some questions might get outdated. Now, if I see a question which I know has outdated answers, I can either post a new answer, or ask a question which points out why ...

I don't know if this should be on meta or on the Information security stack exchange, so please tell me. With the code snippets feature, you can insert malicious code out of view, and people will ...

My question was closed for being off topic. The reason stated by the moderator was that "This is not a security issue. This is pure TCP/IP". I feel it is reasonable to consider my question ...

Can we act on this question? The question basically asks how to set up a firewall on Linux that blocks non VPN connections. Would a rewording of the question be useful in order to re-open it? Can we ...

I don't particularly use StackOverflow however, I just noticed that when you edit your profile under the preferences section they now have "theme" and there's a dark mode! So can $designer ...

As we say goodbye to the old year and welcome the new one, we have a tradition of sharing moderation stats for the past 12 months. As most of you here are aware, sites on the Stack Exchange network ...

Would this question from The WorkPlace SE about notification of OP's still active access to company data be on topic here? As access management and revocation of access for former employees is a ...

I have a question about my Information Security Stack Exchange post: I have been a victim, but of what? This is the timeline of what happened to my question: Tuesday, 03:20 PM: I wrote a question on ...

A few days ago, an old shopping account of mine was "hacked". Or at least, an attacker managed to change its password. Now, I am wondering what was the purpose of this happening and whether ...

One of our supplier suffered a cyberattack and I'm writing a report on how we handled the situation. I plan to include some metrics I judge useful (eg: time taken to inform the relevant personnel). ...

The review queue is empty, but a red dot is displayed: I have not skipped any questions in last couple of weeks. So skipped questions cannot be a reason. I have not reached the limit of 20 answers ...

The name "Angular" is used to refer to Angular 2.0 and upwards, while the name "AngularJS" refers to the old 1.x version. We have had angularjs for some time, it has 32 questions. ...

Are we supposed to avoid mentioning a specific piece of malware? In my latest question, I mentioned a specific piece of malware / app I encountered. The question does have broad applicability as well....

I am planning to launch a pen test company and several questions have arisen (e.g what NIST documents should I study, how to properly report vulnerabilities to clients and more). I would like to ask ...

I read on How to ask a good question the following text: If you're still unsure if you should ask your question on Information Security Stack Exchange, feel free to ask in our chat or on our meta ...

I asked the following question on WorldBuilding SE. How can invading aliens access the Internet to find out all about us? I now find that I am unqualified to judge the best answer. These range from &...

We have the following three tags: file-inclusion, 36 questions: A remote code execution attack where user input is used to build the path of code files to be executed, allowing an attacker to ...

You can see the lack of having an SE for Security Operation Center, this is a big deal and can make a big opportunity for a Security specialist to follow their work and share their knowledge and ...

I'm yyyyyyyan and this is not my primary account. I created this account so I could post this here, because I couldn't figure out what to do. A few days ago I tried to ask a question about email ...

I have noticed over the years that we get a lot of questions that are not information security specific, and are subsequently closed or migrated to a better site. While the migration process isn't a ...

Given the recent move away from the loaded meanings of "white" and "black", and that organisations are moving away from the terms "whitelist" and "blacklist", ...

Is such type of question acceptable here? Idk, I am looking for anything like requests from LAN through my computer's vpn to anything unusual like torrent clients, games sites/servers various video ...

There is a community rule for flagging questions here in SECSE: Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the ...

I edited (accepted) the question to bring it on-topic. I do not see a place to "vote to reopen". But since the question is closed, I edited the answer to provide a more accurate answer. My edit to ...

Somehow @Polynomial managed to quietly get up to 120k without many folks noticing! 4th out of our 180,000 members, with nearly 1000 answers and 65 questions! Congratulations!

Congratulations to @Schroeder for hitting 100k! Our 5th 100k-er He not only manages to be the most active moderator on Sec.SE, but also has answered over 1500 questions Well done!

Is dnyuz.com a Russian or Eastern European hacksite masquerading as a news site? It was quickly closed with the blurb "Unfortunately, we can't analyse the site for you or do a reputational deep dive."...

2020 has come! But… oops, where did the time go? It’s already March! Belated as it is, it’s time for a refresh of Community Promotion Ads! What are Community Promotion Ads? Community Promotion Ads ...

I know it's a silly request, but I just feel like name would fit the theme of Information Security better. It was also inspired by this rather funny question, where somebody wanted to create a ...

I recently posted this question: How do recovery tools like Cellebrite work and can they recover data from phones which utilize Full Disk Encryption? Quite simply, I read through the Help Center and ...

Do we need a canonical question about how to deal with ransomware, so that questions like this could be marked as a duplicate instead of closed as off topic? An answer could consist of something ...

Exhibit A: https://security.stackexchange.com/review/suggested-edits/149427 Rejected by Schroeder because he thought it was not about MD5 specifically (I thought it was and approved, but I was also ...

I recently saw that microsoft exists, and has 79 questions tagged as of this writing. Upon checking, apple, amazon and facebook exist as well. Facebook I can explain, since the company and the main ...

I had some questions about why my post was closed and I thought I would come here for answers and clarification of site rules and closing criteria. My question,How to "unprotect" malicious ...

I see no common rule across Android questions on IS SE. For example my post about possible infection of Android device was considered off-topic, however this typical broad question post which gives ...

When a question related to security is opinion-based, can we ask it on meta? And can we ask opinion-based question on meta in general?

I have a question about cryptography algorithm difference: Rhinjael has been choosen over Serpent (and other) for AES. However, Serpent has been considere less vulnerable to attack in theory. But, ...

I am new to information security. According to Wikipedia NSA hacks actively on IPSec to design attacks but does it mean TLS based VPN is less flawable? I wanted to understand comparability of both ...

Lately, I've been thinking about the Windows 7 end of support, what kind of impact it could have (e.g. security and vulnerability wise). I know it's dangerous, but I don't know if I'm still at risk ...

It's New Year's Day in Stack Exchange land... A distinguishing characteristic of these sites is how they are moderated: We designed the Stack Exchange network engine to be mostly self-regulating, ...

Officially, short answers in comments are not allowed. I actually do this quite a lot because: You can help someone out when you don't have time for a full answer. The length of full answers can ...

I still see that a lot of questions that are directly and only about cryptography and cryptographic schemes are kept here, while I'm regularly migrating questions to security.SE when they are on the ...

This question suggests that questions about physical lock security are on-topic, and since lock-picking and locksport are huge topics concerning lock security, I think they should be on-topic. While ...

I'm truthfully perplexed at why my answer here was deleted by a mod. The down vote I understand, the deletion I don't. A down vote is given when you disagree with the answer / you think the answer is ...

I wanted to post a question but I decided to search if it had been asked before on information security. I found a very similar question with a good answer but I wanted some clarification so I posted ...

I study ISO 2700x and its implications, for example how organizations must meet requirements regarding storage of "e-mail (address) lists". For example the term "e-mail list" would mean a list of ...

It was suggested that I ask Security.meta for opinions on creating a canonical question for those that can be summed up as "I created a complex system. Are there any security concerns with it?" These ...