Linked Questions

1
vote
1answer
66 views

Which question guidelines exist on security stackexchange?

It seems that one should avoid question about cyber security tools (Since it is very opinion based. But is it allowed to ask about how specific popular tools work?), no code reviews, obviously no ...
2
votes
1answer
50 views

Is this question about doing damage on a system ethical and on-topic?

The following question understandably popped up in the Hot Network Questions: I have the ability to run arbitrary Python code on the 'apache' user. What damage can I do? To my surprise, however, it ...
49
votes
10answers
2k views

Should we allow malware authors to weigh in on questions?

The title is perhaps more inflammatory than the reality, but I can alter it later. Concerning this answer: https://security.stackexchange.com/a/120775/6253 to the question "What should you do if you ...
19
votes
2answers
245 views

Breaking a specific system and How to demonstrate an understanding of concepts involved

I recently noticed that a lot of questions asking for how can I exploit this specific code or filter get closed (but a lot of them also do not get closed) or marked as duplicates of the general topic ...
1
vote
1answer
110 views

Suspicious Questions

Just wondering some questions I see on security.stackexchange.com seem very destructive. Some questions it's quite obvious what they are trying to do is illegal like "How do I hack my neighbors wifi" ...
20
votes
2answers
343 views

Downvoting anything that looks like “how do I write malware”

I recently posted a question about methods for preventing alterations to a file or program. A short while after posting, it occurred to me that malware often tries to do that. Sure enough, when I came ...
5
votes
2answers
61 views

Can this close reason be improved?

One of our custom off topic close reasons is the following: Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the ...
4
votes
2answers
110 views

Area 51 - are we covering this proposal?

Regarding Q&As on this subject, if this kind of questions are welcomed here, does this proposal overlapping with our site: Computer Security Hacking ? Top rated examples of questions: How can I ...
8
votes
1answer
139 views

How far should we go to demonstrate a topic that could be used for harm?

Whilst writing an answer recently, I had to ponder how much of the subject I should demonstrate, in terms of a real exploit scenario. In the case of the answer I wrote, I think that we're relatively ...
8
votes
1answer
397 views

Should white hats know methods that can be used by black hats to attack them?

In my opinion to be sure that protection mechanisms work, you should know what attacks can be performed against them. Only if you know techniques that can be used to attack you, you can be sure ...
10
votes
4answers
362 views

What determines if a question should be considered Blackhat?

I asked this question recently which got a lot of votes and people thought was interesting, as well as some very interesting answers. It could have been the start of a very interesting discussion, ...
15
votes
4answers
314 views

How do we provide value to white and grey hats?

So it's something we're kicking around in chat for a while about a specific question, but I think it goes to the style of the site. We as a community are answering blackhat style questions. Do we ...
8
votes
4answers
387 views

Should we allow questions/answers that appear to include or request exploit code?

I don't speak SQL myself, so I'm not sure if this is a good example, but here is the question that prompted this query: How to exploit the "PHP_MAGIC_QUOTES ON" vulnerability in order to ...
14
votes
5answers
418 views

Should we accept question about making exploit or building malware?

The kind of question I am referring to is a little bit like this one : Malwares source repositories. Where? Question that are around the subject of "How can I make virus/malware/exploit/etc." are ...