We changed our privacy policy. Read more.

Questions tagged [discussion]

The question you're asking is designed to solicit opinions or best-practices on a particular topic, with the goal of reaching community consensus.

Filter by
Sorted by
Tagged with
0
votes
1answer
16 views

How should questions containing spammy and porny links be handled?

How should the below question be handle? Is it good to post it as is? Or should I only describe the links as spamy and pornny and cut them off? The advantage of the former is that people can have full ...
0
votes
1answer
15 views

Are topics touching both Signal Intelligence and Information Security / Extraction on topic?

I'm wondering –considering GRCon'21 has another Capture The Flag challenge– whether such signal-centric problems, which typically also involve a more "classical" infosec problems but do need ...
12
votes
0answers
274 views

Auth0 will soon be sponsoring InfoSec

We're excited to announce that Auth0 will be sponsoring InfoSec beginning September 14 through December. We wanted to give you a head's up and walk you through what it will look like. How and where ...
-9
votes
2answers
125 views

Mod deleted a valid answer for a false reason

In response to a recent question about getting people to trust untrustworthy software, I responded with a frame challenge explaining why this software should be considered malicious and abandoned by ...
10
votes
0answers
80 views

Should we deprecate [technology]?

I believe it's pretty self-evident that technology is rather generic at best. The tag currently has four questions, none of them pretty good. Let's have a look at the four burnination questions: 1. ...
6
votes
2answers
69 views

Should LibreSSL have a tag?

There is no tag for LibreSSL, and I've now encountered several Qs that are tagged openssl but are actually about Libre. Searching "libressl" finds 55 Qs while "libressl [openssl]" ...
2
votes
1answer
40 views

Guidelines for suggested edits being too minor

I had always thought that the community consensus on very minor suggested edits was that they should be rejected [1][2]. Personally, I agree with that (and I believe some reviews by schroeder support ...
5
votes
2answers
239 views

Community Ads for 2021

September update: Community Ads are now live network-wide. All ads with a score of 6 or higher, or with a score of 4 or higher and no downvotes will be displayed (except for any that have a note from ...
7
votes
1answer
112 views

Are we allowed to post CVE numbers of reported issues?

A user posted a log entry: Concerning GET request in logs I found an associated CVE of the vulnerability trying to be exploited. Is it okay to post and/or link the CVE number for clarification?
7
votes
2answers
71 views

Should we be more strict about analysis of reports from vulnerability scanners?

The phenomenon We regularly get questions where OP has run a vulnerability scanner on an application and asks for help with interpretation of the results. Usually they quote part of the scanner's ...
3
votes
1answer
69 views

Why was this question about clients reading HTTPS parameters migrated to Super User?

The question "Can HTTPS prameters be seen by the PC client?" was migrated to Super User, and I struggle to see why. It seems like an obvious fit for this site, on the format "can ...
8
votes
1answer
73 views

What should we do about all the data destruction and recovery tags?

There are a lot of tags that seem fairly redundant. There are a number of posts (example) discussing data remanence and recovery which seem to be used more or less interchangeably: data-recovery data-...
10
votes
1answer
114 views

Is a question asking if old answers to same/similar question are still valid acceptable?

As technology evolves, answers to some questions might get outdated. Now, if I see a question which I know has outdated answers, I can either post a new answer, or ask a question which points out why ...
2
votes
1answer
43 views

Question closed for being off-topic

My question was closed for being off topic. The reason stated by the moderator was that "This is not a security issue. This is pure TCP/IP". I feel it is reasonable to consider my question ...
1
vote
1answer
29 views

Can we re-open this?

Can we act on this question? The question basically asks how to set up a firewall on Linux that blocks non VPN connections. Would a rewording of the question be useful in order to re-open it? Can we ...
7
votes
1answer
69 views

2020: a year in moderation

As we say goodbye to the old year and welcome the new one, we have a tradition of sharing moderation stats for the past 12 months. As most of you here are aware, sites on the Stack Exchange network ...
3
votes
1answer
33 views

Would this question from the Workplace SE be on topic here?

Would this question from The WorkPlace SE about notification of OP's still active access to company data be on topic here? As access management and revocation of access for former employees is a ...
1
vote
0answers
76 views

I have been a victim, but of what? [closed]

A few days ago, an old shopping account of mine was "hacked". Or at least, an attacker managed to change its password. Now, I am wondering what was the purpose of this happening and whether ...
5
votes
1answer
84 views

What's your angle on [Angular]?

The name "Angular" is used to refer to Angular 2.0 and upwards, while the name "AngularJS" refers to the old 1.x version. We have had angularjs for some time, it has 32 questions. ...
3
votes
1answer
67 views

Are we to avoid listing specific apps / malware?

Are we supposed to avoid mentioning a specific piece of malware? In my latest question, I mentioned a specific piece of malware / app I encountered. The question does have broad applicability as well....
1
vote
1answer
45 views

Should I ask questions concerning tips on how to launch Penetration Testing company?

I am planning to launch a pen test company and several questions have arisen (e.g what NIST documents should I study, how to properly report vulnerabilities to clients and more). I would like to ask ...
1
vote
1answer
57 views

Where to ask this security-related question?

I read on How to ask a good question the following text: If you're still unsure if you should ask your question on Information Security Stack Exchange, feel free to ask in our chat or on our meta ...
-1
votes
1answer
40 views

Can I ask on IS Stack Exchange about the correctness of answers on a different SE?

I asked the following question on WorldBuilding SE. How can invading aliens access the Internet to find out all about us? I now find that I am unqualified to judge the best answer. These range from &...
7
votes
1answer
106 views

Can we exclude some inclusion tags?

We have the following three tags: file-inclusion, 36 questions: A remote code execution attack where user input is used to build the path of code files to be executed, allowing an attacker to ...
-6
votes
1answer
51 views

Proposal for Security operation center Stack (SOC.SE)

You can see the lack of having an SE for Security Operation Center, this is a big deal and can make a big opportunity for a Security specialist to follow their work and share their knowledge and ...
9
votes
1answer
109 views

Proposed update to help center to decrease quantity of off-topic/migrated questions

I have noticed over the years that we get a lot of questions that are not information security specific, and are subsequently closed or migrated to a better site. While the migration process isn't a ...
1
vote
2answers
207 views

Rewording "Whitelist" and "Blacklist" tags

Given the recent move away from the loaded meanings of "white" and "black", and that organisations are moving away from the terms "whitelist" and "blacklist", ...
1
vote
2answers
90 views

Can anyone look into wireshark logs and say if anything suspicious?

Is such type of question acceptable here? Idk, I am looking for anything like requests from LAN through my computer's vpn to anything unusual like torrent clients, games sites/servers various video ...
0
votes
2answers
81 views

Should the "breaking a specific system" close reason be retired?

There is a community rule for flagging questions here in SECSE: Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the ...
-1
votes
1answer
87 views

Reopen process for https://security.stackexchange.com/questions/161829?

I edited (accepted) the question to bring it on-topic. I do not see a place to "vote to reopen". But since the question is closed, I edited the answer to provide a more accurate answer. My edit to ...
15
votes
1answer
167 views

Congratulations to Polynomial

Somehow @Polynomial managed to quietly get up to 120k without many folks noticing! 4th out of our 180,000 members, with nearly 1000 answers and 65 questions! Congratulations!
26
votes
3answers
210 views

Congratulations to Schroeder for hitting 100k

Congratulations to @Schroeder for hitting 100k! Our 5th 100k-er He not only manages to be the most active moderator on Sec.SE, but also has answered over 1500 questions Well done!
-4
votes
1answer
97 views

Why was my question closed and where can I ask it?

Is dnyuz.com a Russian or Eastern European hacksite masquerading as a news site? It was quickly closed with the blurb "Unfortunately, we can't analyse the site for you or do a reputational deep dive."...
3
votes
1answer
94 views

Community Promotion Ads — 2020 [duplicate]

2020 has come! But… oops, where did the time go? It’s already March! Belated as it is, it’s time for a refresh of Community Promotion Ads! What are Community Promotion Ads? Community Promotion Ads ...
2
votes
1answer
46 views

Why is this question off-topic?

I recently posted this question: How do recovery tools like Cellebrite work and can they recover data from phones which utilize Full Disk Encryption? Quite simply, I read through the Help Center and ...
11
votes
1answer
615 views

Do we need a canonical ransomware question?

Do we need a canonical question about how to deal with ransomware, so that questions like this could be marked as a duplicate instead of closed as off topic? An answer could consist of something ...
3
votes
0answers
50 views

Soteri brute forcing tag edits

Exhibit A: https://security.stackexchange.com/review/suggested-edits/149427 Rejected by Schroeder because he thought it was not about MD5 specifically (I thought it was and approved, but I was also ...
10
votes
2answers
129 views

What is the point of company-specific tags and should we burninate them?

I recently saw that microsoft exists, and has 79 questions tagged as of this writing. Upon checking, apple, amazon and facebook exist as well. Facebook I can explain, since the company and the main ...
1
vote
1answer
40 views

Closure of "How to “unprotect” malicious workbook without knowing password"

I had some questions about why my post was closed and I thought I would come here for answers and clarification of site rules and closing criteria. My question,How to "unprotect" malicious ...
1
vote
1answer
33 views

Questions about Android Security are on-topic?

I see no common rule across Android questions on IS SE. For example my post about possible infection of Android device was considered off-topic, however this typical broad question post which gives ...
0
votes
1answer
49 views

Are opinion-based questions allowed on meta?

When a question related to security is opinion-based, can we ask it on meta? And can we ask opinion-based question on meta in general?
1
vote
0answers
42 views

Is this question on topic here?

I have a question about cryptography algorithm difference: Rhinjael has been choosen over Serpent (and other) for AES. However, Serpent has been considere less vulnerable to attack in theory. But, ...
2
votes
0answers
34 views

Can I ask about the risks of running an out of date Operating System?

Lately, I've been thinking about the Windows 7 end of support, what kind of impact it could have (e.g. security and vulnerability wise). I know it's dangerous, but I don't know if I'm still at risk ...
5
votes
0answers
61 views

2019: a year in moderation

It's New Year's Day in Stack Exchange land... A distinguishing characteristic of these sites is how they are moderated: We designed the Stack Exchange network engine to be mostly self-regulating, ...
6
votes
3answers
221 views

Short answers in comments

Officially, short answers in comments are not allowed. I actually do this quite a lot because: You can help someone out when you don't have time for a full answer. The length of full answers can ...
9
votes
1answer
126 views

Are questions about cryptography migrated?

I still see that a lot of questions that are directly and only about cryptography and cryptographic schemes are kept here, while I'm regularly migrating questions to security.SE when they are on the ...
4
votes
1answer
98 views

Can I ask about lock-picking and locksport?

This question suggests that questions about physical lock security are on-topic, and since lock-picking and locksport are huge topics concerning lock security, I think they should be on-topic. While ...
0
votes
1answer
39 views

Why was my answer deleted?

I'm truthfully perplexed at why my answer here was deleted by a mod. The down vote I understand, the deletion I don't. A down vote is given when you disagree with the answer / you think the answer is ...
3
votes
1answer
26 views

Can I discuss someone else's question?

I wanted to post a question but I decided to search if it had been asked before on information security. I found a very similar question with a good answer but I wanted some clarification so I posted ...
1
vote
0answers
21 views

Would this question be appropriate

I study ISO 2700x and its implications, for example how organizations must meet requirements regarding storage of "e-mail (address) lists". For example the term "e-mail list" would mean a list of ...

1
2 3 4 5
18