Skip to main content

Questions tagged [discussion]

The question you're asking is designed to solicit opinions or best-practices on a particular topic, with the goal of reaching community consensus.

Filter by
Sorted by
Tagged with
0 votes
1 answer
10 views

Is a question about code to generate passphrase appropriate here?

There are a couple of passprase generators out there, but all (I have found) use English words to build the passphrase. I wrote one using German words. Is it appropriate to discuss this code here with ...
phunsoft's user avatar
  • 189
1 vote
1 answer
11 views

What is the background of the Information security site logo

I was looking at the information security stack exchange site logo and thought it looks pretty cool and appropriate. I'm interested in how it was chosen, does it come from somewhere else or is it ...
user1605665's user avatar
2 votes
0 answers
12 views

Google Cloud will soon be sponsoring Information Security Stack Exchange

We're excited to announce that Google Cloud will be sponsoring Information Security Stack Exchange beginning July 8th through September 30th. We wanted to give you a heads-up and walk you through what ...
SpencerG's user avatar
  • 101
0 votes
2 answers
14 views

Will there be another moderator election in the foreseeable future?

So, I know that there are four moderators, and that one of these moderators were elected in the most recent election. I would I also like to say that I mean absolutely no offence in what I am asking, ...
security_paranoid's user avatar
3 votes
1 answer
29 views

Is it worth making a tag for [reproducible-builds]?

A search for "reproducible build" turns up 61 posts. Even if we discount some of the posts as questions and answers in the same thread, I think a reproducible-builds tag would be in the top ...
Michael come lately's user avatar
2 votes
1 answer
50 views

US Government Security Compliance GSC Questions Answered Here?

Does this community answer questions about US Government Security Compliance (GSC)? More specifically questions about the NISPOM, DD254s, STIG, SCAP, etc. If not, can someone recommend an alternate ...
cmwt's user avatar
  • 101
1 vote
1 answer
44 views

A complaint of over-moderation

I'd like to complain about my question and its self answer. Another member has probably mistaken my answer as an expansion of the question, probably because it began with "a bit of context". ...
DannyNiu's user avatar
  • 374
2 votes
0 answers
13 views

2023: a year in moderation

It’s that time of the year again! As we wave goodbye to last year and welcome the new one, we have a tradition of sharing moderation stats for the preceding calendar year. As most of you here might be ...
JNat's user avatar
  • 101
0 votes
1 answer
37 views

How can I get a post to be undeleted once I've fixed the issues?

My post on ABAC adoption was deleted with an hour of my posting it. The moderator claimed it missed the point of the question so I reworked it to be clearer. The post is factual and the area is one I'...
David Brossard's user avatar
-1 votes
1 answer
79 views

Why my question was moved to another stackexchange site?

My question was about Bitlocker and therefore ultimately was about disk encryption. But my question was moved to superuser.com for reason of "Not suitable for this site". Isn't disk ...
Claude's user avatar
  • 11
-1 votes
1 answer
44 views

Can mods delete answers simply because they dislike the contents?

A mod recently deleted my answer with the following comment: This doesn't answer the question. It's an arbitrary list of what you do and an overly paranoid statement without definition While it’s ...
JonathanReez's user avatar
  • 1,024
3 votes
1 answer
25 views

Should we do "Is X secure for Y"-questions?

We from time to time get questions such as this, which essentially asks if some very specific action is secure for some very specific circumstance. It's not very likely to help future readers much; it'...
vidarlo's user avatar
  • 16.7k
1 vote
2 answers
61 views

My question was closed but I think it was on-topic (Perhaps because there is no IT asset being protected?)

This is my question: Can the IBAN of the initiator of a SEPA direct debit be faked?. I don't really mind it getting closed I just want to understand why it was closed. So I won't do the same mistake ...
zomega's user avatar
  • 145
1 vote
1 answer
63 views

Clarify on why this wasn't a hardening question?

Could I get some clarification of scope for security.stackexchange. I'd though my question was on topic as a "hardening" question, as mentioned in the help. I don't quite understand what ...
Philip Couling's user avatar
3 votes
1 answer
119 views

Is this a security question or a networking question?

Possible to determine who on the Internet is resetting (RST) my TCP connection? To me, this is a pure networking question. "How to find where in the traffic flow the RST is happening" is ...
schroeder's user avatar
  • 131k
2 votes
1 answer
122 views

Can I ask for research experiment participants here?

I'm working on my masters thesis and will be looking for participants to attempt to hack a server and bypass a new protocol I've invented. Is it alright to advertise my research here?
Jonathon Anderson's user avatar
-2 votes
1 answer
139 views

Why is the question about suddent large traffic on a GitHub repo off-topic?

Question on question: What would be the reasons for a GitHub repo suddenly get cloned by a huge amount of times in a short period of time? The question is closed as off-topic. From What topics can I ...
Ooker's user avatar
  • 1,591
3 votes
2 answers
316 views

Middle Sidebar Advertising

As you all know, advertising is an important source of revenue for Stack Overflow and it helps us support all the sites across the Stack Exchange Network and the resources that go into maintaining and ...
Rosie's user avatar
  • 101
2 votes
1 answer
145 views

Should I add a disclaimer to my answers?

On some questions related to hacking, I'm not 100% sure whether the person has permission to do it or not. In those cases, does it make sense to add a disclaimer to my answers?
UndercoverDog's user avatar
1 vote
0 answers
252 views

Tag for "group chat" encryption and group key exchange protocols

I'm proposing a new tag to cover the more specific key exchange and encryption amongst groups. I'm thinking along the lines of group-chat : an argument for this choice is that the concept would be ...
brynk's user avatar
  • 1,137
2 votes
0 answers
147 views

2022: a year in moderation

As we say goodbye to the old year and welcome the new one, we have a tradition of sharing moderation stats for the preceding calendar year. As most of you here are aware, sites on the Stack Exchange ...
JNat's user avatar
  • 101
-1 votes
1 answer
208 views

How to reword to make it on topic?

This question got closed for being "off topic". The Help Center specifically says "security tools" are in scope. I don't understand why asking about how to use a tool is out of ...
Jackson Pfeffer's user avatar
0 votes
1 answer
172 views

OK to ask if a particuar app store's vetting is sufficient for a high risk app under non-targeted conditions?

I want to ask whether it is safe to install an app from a high-risk provider. Googling has shown that Apple's app store does vetting of code to prevent stealing of information from personal ...
user2153235's user avatar
1 vote
1 answer
143 views

Would this be the right place to ask for hint/guidance regarding InfoSec ctfs/challenges?

I am starting out in bug bounty training and have some need for guidance and hints towards solving some challenges and ctfs, as well as explanations on what is actually happening both in challenges I'...
Alvaro's user avatar
  • 11
2 votes
1 answer
130 views

What should one do when one finds an answer with an example that could create a security issue?

As I'm working on a tool to manage my firewalls, I stumbled on this answer: Block SYN,ACK response with iptables which include two lines of code like so: # iptables -A INPUT -p tcp -m state --state ...
Alexis Wilke's user avatar
  • 1,017
2 votes
0 answers
164 views

Can we make the 2fa tag a synonym of multi-factor?

I've been trying to kill the 2fa tag for a while, but it keeps comming back from the dead. We already have the tag multi-factor and I see no meaningful distinction that would be upheld by people ...
Anders's user avatar
  • 65.7k
2 votes
1 answer
280 views

Why was my answer to this question about Adobe Illustrator files deleted?

I'm extremely confused. I've provided an extensive explanation and answer to the question "Can .ai files (Adobe Illustrator) be malicious?", yet it was deleted on some unclear grounds. Why ...
Artem S. Tashkinov's user avatar
0 votes
2 answers
197 views

Someone is stealing my edits

When submitting an edit, a person is rejecting it in the review queue, but then submits their own edit where many things from my edit are copied.
UndercoverDog's user avatar
0 votes
1 answer
187 views

Is it possible for mods to 'force accept' answers on questions where the account of the (question-)author is dead

Is it possible for mods to 'force accept' answers on questions where the account of the (question-)author is dead/is offline for a long time? I'm asking that question because I'm seeing posts like ...
UndercoverDog's user avatar
3 votes
1 answer
263 views

Why are there so many already answered 3-10year old posts in the active feed?

Why are there so many 3-10year old posts that are already answered like some years ago in the active feed? For example I saw posts like this recently
UndercoverDog's user avatar
2 votes
2 answers
187 views

How is a question about Windows Defender not restoring a quarantined file off topic?

How is this off topic? Windows defender restore quarantined file not working. The closed reason links to "What topics can I ask about here" which doesn't clarify what is wrong at all so I ...
Rodger's user avatar
  • 101
4 votes
0 answers
231 views

Auth0 will soon be sponsoring InfoSec again

Auth0 had previously sponsored InfoSec from September 2021 to January 2022. We are excited to announce that they will be sponsoring InfoSec once again from April 21 to December 31, 2022. As some of ...
Rosie's user avatar
  • 101
9 votes
2 answers
299 views

Is Auth0 sponsoring us again?

Auth0 was supposed to be sponsoring us from September to January 31, 2022. The sponsorship had duly ended, but I've noticed that the Auth0 logo has appeared again. Is this a bug, or did Auth0 start ...
nobody's user avatar
  • 11.6k
6 votes
0 answers
145 views

2021: a year in moderation

As we say goodbye to the old year and welcome the new one, we have a tradition of sharing moderation stats for the preceding calendar year. As most of you here are aware, sites on the Stack Exchange ...
JNat's user avatar
  • 101
2 votes
1 answer
139 views

Question being marked as a duplicate of another with general troubleshooting steps

I posted this question here trying to get specific help on how to deploy a metasploit payload via a tunneling service called pagekite. My question was closed and marked as a duplicate of another ...
Chryron's user avatar
  • 101
4 votes
0 answers
145 views

What to do about the password tag mess?

Our tagging landscape for all things password-related is a bit of a mess. Right now, there are: passwords (3.8k): Specific to the security of passwords: hashing, entropy, cracking, resets, lockouts, ...
Anders's user avatar
  • 65.7k
8 votes
3 answers
172 views

Should I mask potentially harmful links?

I posted an answer to a question, where a potentially malicious link was part of the answer. I posted the link in code tags, so it would not be directly clickable, requiring user to actively copy it ...
vidarlo's user avatar
  • 16.7k
-1 votes
1 answer
148 views

I want to appeal deletion of a specific question

I want to appeal the action taken by moderator. This question was deleted, but I think it was a legit & normal question, and doesn't deserve to be deleted. The moderator has also deleted the ...
T.Todua's user avatar
  • 2,727
2 votes
2 answers
111 views

How should questions containing spammy and porny links be handled?

How should the below question be handle? Is it good to post it as is? Or should I only describe the links as spamy and pornny and cut them off? The advantage of the former is that people can have full ...
Ooker's user avatar
  • 1,591
1 vote
1 answer
45 views

Are topics touching both Signal Intelligence and Information Security / Extraction on topic?

I'm wondering –considering GRCon'21 has another Capture The Flag challenge– whether such signal-centric problems, which typically also involve a more "classical" infosec problems but do need ...
Marcus Müller's user avatar
13 votes
1 answer
663 views

Auth0 will soon be sponsoring InfoSec

We're excited to announce that Auth0 will be sponsoring InfoSec beginning September 14 through January 31, 2022. We wanted to give you a heads up and walk you through what it will look like. How and ...
Rosie's user avatar
  • 101
-9 votes
2 answers
149 views

Mod deleted a valid answer for a false reason

In response to a recent question about getting people to trust untrustworthy software, I responded with a frame challenge explaining why this software should be considered malicious and abandoned by ...
Mason Wheeler's user avatar
10 votes
0 answers
99 views

Should we deprecate [technology]?

I believe it's pretty self-evident that technology is rather generic at best. The tag currently has four questions, none of them pretty good. Let's have a look at the four burnination questions: 1. ...
user avatar
7 votes
2 answers
96 views

Should LibreSSL have a tag?

There is no tag for LibreSSL, and I've now encountered several Qs that are tagged openssl but are actually about Libre. Searching "libressl" finds 55 Qs while "libressl [openssl]" ...
dave_thompson_085's user avatar
2 votes
1 answer
50 views

Guidelines for suggested edits being too minor

I had always thought that the community consensus on very minor suggested edits was that they should be rejected [1][2]. Personally, I agree with that (and I believe some reviews by schroeder support ...
nobody's user avatar
  • 11.6k
5 votes
2 answers
264 views

Community Ads for 2021

September update: Community Ads are now live network-wide. All ads with a score of 6 or higher, or with a score of 4 or higher and no downvotes will be displayed (except for any that have a note from ...
JNat's user avatar
  • 101
7 votes
1 answer
142 views

Are we allowed to post CVE numbers of reported issues?

A user posted a log entry: Concerning GET request in logs I found an associated CVE of the vulnerability trying to be exploited. Is it okay to post and/or link the CVE number for clarification?
Nathan Goings's user avatar
8 votes
2 answers
90 views

Should we be more strict about analysis of reports from vulnerability scanners?

The phenomenon We regularly get questions where OP has run a vulnerability scanner on an application and asks for help with interpretation of the results. Usually they quote part of the scanner's ...
Arminius's user avatar
  • 45k
3 votes
1 answer
85 views

Why was this question about clients reading HTTPS parameters migrated to Super User?

The question "Can HTTPS prameters be seen by the PC client?" was migrated to Super User, and I struggle to see why. It seems like an obvious fit for this site, on the format "can ...
Anders's user avatar
  • 65.7k
9 votes
1 answer
96 views

What should we do about all the data destruction and recovery tags?

There are a lot of tags that seem fairly redundant. There are a number of posts (example) discussing data remanence and recovery which seem to be used more or less interchangeably: data-recovery data-...
forest's user avatar
  • 67k

1
2 3 4 5
19