Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [discussion]

The question you're asking is designed to solicit opinions or best-practices on a particular topic, with the goal of reaching community consensus.

-1
votes
1answer
72 views

Why is the question about e-mail spoofing closed?

How to Stop Email Spoofing [closed] is an interesting question, even when its formulated as a careless one-liner. But the question is valid, the asker did basic research (he mentions SPF) and the ...
5
votes
0answers
26 views

Request to rename [macosx] → [macos]

The current name of Apple's desktop operating system is macOS. On this site, the tag macosx is used to refer to that ("Mac OS X" was the original name of the operating system"). But other Stack ...
0
votes
1answer
63 views

Is this user trolling?

I recently came across Cash-, who seemingly asked the same question regarding SQL Injection over and over again. Here are the links: SQLI Login Bypass Cheat-sheets Question '=' 'OR' ...
0
votes
1answer
52 views

Are questions on law enforcement surveillance techniques on-topic?

I have a “I would like others to explain ______ to me” type question which means I am 'probably OK' but wanted to check. A recent article mentioned suspects performing an action (leaving a phone on ...
10
votes
1answer
183 views

Is it acceptable to delete repost an answer to counter “runaway downvotes”?

A user posted an answer to a HNQ question which was quickly heavily downvoted. When it hit -7, the user deleted their answer then reposted it, resetting their downvotes, with only minimal changes. A ...
0
votes
2answers
25 views

VPN comparison - on topic?

I fear that this would be off-topic on the main site, so ask here for clarification. My IVPN subscription expires soon. I have been satisfied with the service and would normally just renew. However, ...
0
votes
1answer
29 views

Why was this migrated?

Why was this migrated? There are other PGP/GnuPG question in InformationSecurity.SE https://superuser.com/questions/1436140/verify-pgp-signature-on-fedora
1
vote
1answer
30 views

Is “Which tool can do X?” off-topic?

A general rule of thumb on many StackExchange sites is that "Product recommendations are off-topic". I agree with this stance, as there are so many ways a question like "What is the best ..." can go ...
0
votes
1answer
26 views

How to proceed with questions without an accepted answer?

I recently came across this question, which got bumped to the homepage, as it did not have an accepted answer. The provided answer was very good, yet was not accepted. Why this is the case is unclear,...
1
vote
0answers
41 views

Would this question be a duplicate?

There are quite a few questions about http vs. https. I think the most similar to mine is Is HTTPS redirecting to HTTP a vulnerability? My question is: I visited a website where the login page was ...
0
votes
1answer
38 views

Why the aggressive migration of comments to chat?

Post I'm referring to: What are the differences between credential stuffing and password spraying? I don't recall seeing mods move short discussions from answer comments to chat before. Usually this ...
2
votes
1answer
46 views

Flag wasn't helpful

I flagged the following post as spam since it wasn't a question at all. Secure file I hope Seems to be copy/paste of text on a Google webpage. Your account, your data. The Google data ...
14
votes
1answer
273 views

Is “Is my PC infected?” off-topic?

I've seen several questions from people whom I'd generally not describe as "Information Security Professionals" which asked if their personal device is infected by malware. Are these questions ...
1
vote
2answers
43 views

Edit comment language

I recently stumbled upon this edit with the following comment 仕方が無い. Which google translate inform me transliterate to Shikata ga nai. While a descriptive comment for the edit performed (correcting ...
2
votes
1answer
70 views

Should we assume worst case scenario while writing answers?

Recently I answered a question where the password was sent to the users email in plain text. Technically this means the password is stored in two ways, Plain Text - which was sent to the user (the ...
-6
votes
2answers
165 views

A moderator is harassing me. Someone please look at this

I have a question about my Information Security Stack Exchange post: What’s the best way to report an IP address from Romania? The mod that deleted my answer is mad at me because I told him he marked ...
-6
votes
1answer
63 views

How is this off topic?

I have a question about my Information Security Stack Exchange post: USB Drive for Bad USB How is that post off topic? I asked about a device used for pen testing.
6
votes
2answers
114 views

What is the best practice for acronym usage in Questions/Answers/Comments?

Today a question mentioning CVE popped up. I would have assumed that what CVE stands for and what it actually is would be common knowledge on a Q&A-site focused on IT security (maybe I'm biased ...
-3
votes
2answers
60 views

Moderator edit invalidated an answer

Feeling a bit hesitant rolling back an edit by a moderator, but on this question , this edit by a moderator invalidates this answer. My understanding across SE is that such edits are not okay (have ...
1
vote
1answer
32 views

Are questions about interacting with users on-topic

I was going to ask a question about how to get user buy-in to some security changes I'm making at work. I know what changes I want to make, how, and why, but I am looking for advice on how to show ...
1
vote
1answer
35 views

Is this a link-only answer which should be improved by adding most important link content into answer?

The question How to prevent users from executing commands through browser URL has an answer which IMO does not provide the answer to the question, because the "how-to" information what was asked is ...
0
votes
1answer
24 views

Why were only some of the comments on this question recently purged?

The comments on this question were recently purged - but only partially. Some of the subsequent comments devolved into Q&A, so I understand why some of them may have been purged. But others of ...
1
vote
1answer
61 views

Would the IS site be an appropriate place to ask for help in deciding between a Masters in Cyber Security vs a CISSP certification?

Before I posted, I wanted to make sure it would be acceptable? If not, is there a better site I could look for advice from the community?
-4
votes
3answers
116 views

Moderator believes hardening Chrome ciphers is not about “security”, not relevant here [post on hold]

Source post on hold: for reference The entire post was about hardening Chrome, referencing vulnerabilities, and offering solutions. He does not believe hardening chrome against the latest TLS_RSA, ...
2
votes
1answer
76 views

Would this question be on-topic here?

There was a vulnerability in Tor Browser not long ago. After updates it was enabling javascript automatically without any warning whatsoever. I want to find out whether it was intentional or not. ...
8
votes
3answers
202 views

Community Promotion Ads — 2019

2019 is here! And with the new year, as usual, comes a new iteration of Community Promotion Ads! Let’s refresh these for the coming year :) What are Community Promotion Ads? Community Promotion Ads ...
0
votes
1answer
66 views

Why was this answer deleted?

Question: Hacked aiming xgirlfreind The answer was deleted by a moderator, but I do not understand why. It has some humour/sarcasm, but it does make an attempt at answering the question. I doubt the ...
11
votes
2answers
359 views

Which Open Source security tools are considered off-topic?

I asked a question about a specific feature (CIDR-Binding) of a security tool. It was a specific question with a specific answer about a security tool, which I was able to answer later by diving ...
14
votes
0answers
130 views

2018: a year in moderation

It's New Year's Day in Stack Exchange land... A distinguishing characteristic of these sites is how they are moderated: We designed the Stack Exchange network engine to be mostly self-regulating, ...
1
vote
1answer
48 views

What is the proper way to format a question asking for improvements for a security scenarios?

I asked a question on stack exchange meta recently for recommending a site for my question and they suggested Information security. Question link: Where to ask about improvements for a security ...
2
votes
2answers
83 views

Appeal of an edit rejection

This answer was edited in such a way that it removed the context for its comments. The original answer contained a political spiel. While political spiels do not belong in answers, and its removal ...
1
vote
2answers
58 views

How do we handle questions which imply danger to personal safety of the enquirer?

From time to time there are questions about "operational security" around like: Search for military installed backdoors on laptop Police forcing me to install Jingwang spyware app, how to minimize ...
-3
votes
1answer
110 views

Is saying that someone is *probably* a troll acceptable?

In response to one of my answers, a user took one part of my answer, declared that my including that one part means that "your answer [is] all about this one weird quirk of this one" part and stated "...
3
votes
0answers
58 views

Canonical answer for “Why not authenticate with the user sending an SMS?” should have its duplicate tags swapped

There are a number of questions on this site asking essentially the same question: Why do 2FA apps send an SMS to the user rather than have the user send an SMS to the server? here are some ...
10
votes
1answer
102 views

Ambiguous [image] tag

The image tag is currently used for: the picture kind of images forensic images to 'image' a computer in the sense of writing a disk image to it And I'm surprised nobody referred to iso(-like) files ...
9
votes
2answers
157 views

This answer was edited and should be undeleted. I cannot vote to undelete

The answer: https://security.stackexchange.com/a/23431/10863 The timeline as I understand it: The question is about Nmap and one of the original authors of Nmap answers. They copy the answer to ...
2
votes
0answers
48 views

Is there a tag for infoleaks?

I know there is a data-leakage tag, but that is not what I am looking for. I am wondering if there are any tags that encompass traditional information leakage in binary exploitation, for example ...
8
votes
2answers
207 views

Should we use archived links instead of direct links?

Background I recently came across an answer where an archived link (the one that point to the web archive) was used instead of the direct link. When I asked the user for the intention I got a reply ...
9
votes
1answer
317 views

Square CTF | 08 Nov. 2018, 19:00 UTC —14 Nov. 2018, 19:00 UTC

Let's participate in the Square CTF! Format: Jeopardy Duration: 6 days(!) Start: Thu, 2018-11-08 19:00 UTC (Other timezone) Finish: Mon, 2018-11-14 19:00 UTC (Other timezone) Official URL: http://...
7
votes
3answers
156 views

Is this question in scope: how to select a security firm/consultant

I'm toying with the idea of asking a question that isn't exactly technical: how does an IT specialist who is NOT an expert in security select a security company or consultant for, say, a pentest or a ...
8
votes
0answers
126 views

HITCON CTF 2018 | Sat, 20 Oct 02:00 — Mon, 22 Oct 02:00 UTC (48h)

Let's participate in the HITCON CTF 2018! Format: Jeopardy Duration: 48h Start: Sat, 2018-10-20 02:00 UTC (Other timezone) Finish: Mon, 2018-10-22 02:00 UTC (Other timezone) Official URL: https://ctf....
16
votes
2answers
248 views

Odd user activity - many small edits, bounties offered for a single other user's questions

I encountered a user with an anomalous activity pattern while going through the Suggested Edits queue, just now. It seems like they might be trying to game the system somehow. The suggested edit ...
1
vote
1answer
49 views

Editing misleading question, possibly against authors intention

Situation I recently spotted this question: Police forcing me to install Jingwang spyware app, how to minimize impact? In this post there is a good technical question, but it also provides ...
12
votes
8answers
316 views

Write-ups: Hackover CTF 2018 | Fri, 05 Oct, 20:00 UTC — Sun, 07 Oct, 10:00 UTC (38h)

Let's participate in the Hackover CTF 2018! Hackover is a Jeopardy-style CTF and lasts 38 hours with ~100 participating teams announced. It's organized by the Hamburg CCC chapter in the context of ...
0
votes
2answers
115 views

What does '101' reputation (on many sites) means in profiles of some high rep users?

Let me explain a bit what I am trying to ask. So I am giving links of profiles of two high rep users. For example, two of our mods. schroeder's profile He is member of 22 sites but as you can see, ...
-5
votes
2answers
153 views

Moderator deleted my answer without good reason

@AndrolGenhald suggested I ask this here. My answer here was deleted for the reason that "this is covered by other answers". First of all, its obviously not a duplicate answer, but it also contains ...
2
votes
5answers
519 views

Information Security's updated site theme is live!

UPDATE - We've pushed this live for everyone now. Thanks to those who took the time to give feedback. Please do know, being live doesn't mean we can't address further changes for you! Write an answer ...
-4
votes
1answer
56 views

I want to start bounty for a question [closed]

I asked the following question Does removing a GUI from a server make it less vulnerable? But I don't get enough reputation as I expected, once I start a bounty and I did get a reputation as I paid, ...
2
votes
1answer
61 views

Questions are no longer being accepted

Right now Information Security is no longer accepting questions from my account. Is there a way to override this or am I screwed?
15
votes
1answer
781 views

Write-ups: Teaser Dragon CTF 2018: Sa, 29 Sept. 2018, 12:00 UTC — So, 30 Sept. 2018, 12:00 UTC, lasts 24 hours

Let's participate in the Dragon CTF 2018 Teaser! The CTF runs Sa, 29 Sept. 2018, 12:00 UTC — So, 30 Sept. 2018, 12:00 UTC. You can find additional details on the CTFtime event page. Links to ...