I asked this question recently which got a lot of votes and people thought was interesting, as well as some very interesting answers. It could have been the start of a very interesting discussion, except it was oddly closed for being "too blackhat".
This is ridiculous.
I asked only what techniques may exist to do so, not for advice on actually doing so.
I would think that question is not so different from other bypassing questions on this site, such as how to bypass ASLR.
The question is, to what extent do you determine a question is blackhat? Simply asking about an attack scenario is not enough, as there is nothing inherently blackhat about discussing potential attacks.
Now, if someone is asking for specific tools or instructions for a scenario, then that could be considered blackhat. In this case however I asked about potential attacks, with the question and level being similar to what would be presented at any security conference.
I would propose that simply asking how things can be bypassed, or what the potential attacks may be in a scenario should not be considered blackhat, as ideally good questions will be abstracted enough where it is possible to determine motivation.
It only makes sense for questions which are obviously blackhat to be considered blackhat. Thoughts?