Questions tagged [discussion]
The question you're asking is designed to solicit opinions or best-practices on a particular topic, with the goal of reaching community consensus.
897
questions
0
votes
1
answer
13
views
Can I ask for research experiment participants here?
I'm working on my masters thesis and will be looking for participants to attempt to hack a server and bypass a new protocol I've invented. Is it alright to advertise my research here?
schroederMod
- 127k
2
votes
2
answers
231
views
Middle Sidebar Advertising
As you all know, advertising is an important source of revenue for Stack Overflow and it helps us support all the sites across the Stack Exchange Network and the resources that go into maintaining and ...
- 101
1
vote
1
answer
41
views
Should I add a disclaimer to my answers?
On some questions related to hacking, I'm not 100% sure whether the person has permission to do it or not.
In those cases, does it make sense to add a disclaimer to my answers?
- 796
-1
votes
1
answer
51
views
Why is the question about suddent large traffic on a GitHub repo off-topic?
Question on question: What would be the reasons for a GitHub repo suddenly get cloned by a huge amount of times in a short period of time?
The question is closed as off-topic. From What topics can I ...
schroederMod
- 127k
1
vote
0
answers
144
views
Tag for "group chat" encryption and group key exchange protocols
I'm proposing a new tag to cover the more specific key exchange and encryption amongst groups.
I'm thinking along the lines of group-chat : an argument for this choice is that the concept would be ...
- 1,061
2
votes
0
answers
72
views
2022: a year in moderation
As we say goodbye to the old year and welcome the new one, we have a tradition of sharing moderation stats for the preceding calendar year.
As most of you here are aware, sites on the Stack Exchange ...
- 101
1
vote
1
answer
106
views
Would this be the right place to ask for hint/guidance regarding InfoSec ctfs/challenges?
I am starting out in bug bounty training and have some need for guidance and hints towards solving some challenges and ctfs, as well as explanations on what is actually happening both in challenges I'...
CommunityBot
- 3
-1
votes
1
answer
147
views
How to reword to make it on topic?
This question got closed for being "off topic". The Help Center specifically says "security tools" are in scope. I don't understand why asking about how to use a tool is out of ...
schroederMod
- 127k
0
votes
1
answer
118
views
OK to ask if a particuar app store's vetting is sufficient for a high risk app under non-targeted conditions?
I want to ask whether it is safe to install an app from a high-risk provider. Googling has shown that Apple's app store does vetting of code to prevent stealing of information from personal ...
Rory AlsopMod
- 61.5k
2
votes
1
answer
123
views
What should one do when one finds an answer with an example that could create a security issue?
As I'm working on a tool to manage my firewalls, I stumbled on this answer:
Block SYN,ACK response with iptables
which include two lines of code like so:
# iptables -A INPUT -p tcp -m state --state ...
schroederMod
- 127k
2
votes
0
answers
158
views
Can we make the 2fa tag a synonym of multi-factor?
I've been trying to kill the 2fa tag for a while, but it keeps comming back from the dead. We already have the tag multi-factor and I see no meaningful distinction that would be upheld by people ...
- 65.1k
0
votes
1
answer
179
views
Is it possible for mods to 'force accept' answers on questions where the account of the (question-)author is dead
Is it possible for mods to 'force accept' answers on questions where the account of the (question-)author is dead/is offline for a long time?
I'm asking that question because I'm seeing posts like ...
- 103
2
votes
1
answer
273
views
Why was my answer to this question about Adobe Illustrator files deleted?
I'm extremely confused.
I've provided an extensive explanation and answer to the question "Can .ai files (Adobe Illustrator) be malicious?", yet it was deleted on some unclear grounds.
Why ...
- 103
0
votes
2
answers
189
views
Someone is stealing my edits
When submitting an edit, a person is rejecting it in the review queue, but then submits their own edit where many things from my edit are copied.
- 32.5k
3
votes
1
answer
251
views
Why are there so many already answered 3-10year old posts in the active feed?
Why are there so many 3-10year old posts that are already answered like some years ago in the active feed?
For example I saw posts like this recently
schroederMod
- 127k
0
votes
1
answer
181
views
I want to secure my personal information within a PDF, can I ask how on security.SE?
I have to hand in a CV/resume to a job I apply. Such a document leaks lots of information I only very reluctantly like to offer.
Therefore I would like to ask advice how to secure the data, for ...
CommunityBot
- 3
2
votes
2
answers
181
views
How is a question about Windows Defender not restoring a quarantined file off topic?
How is this off topic? Windows defender restore quarantined file not working.
The closed reason links to "What topics can I ask about here" which doesn't clarify what is wrong at all so I ...
- 12.4k
4
votes
0
answers
225
views
Auth0 will soon be sponsoring InfoSec again
Auth0 had previously sponsored InfoSec from September 2021 to January 2022. We are excited to announce that they will be sponsoring InfoSec once again from April 21 to December 31, 2022. As some of ...
- 103
9
votes
2
answers
281
views
Is Auth0 sponsoring us again?
Auth0 was supposed to be sponsoring us from September to January 31, 2022. The sponsorship had duly ended, but I've noticed that the Auth0 logo has appeared again. Is this a bug, or did Auth0 start ...
- 101
13
votes
1
answer
658
views
Auth0 will soon be sponsoring InfoSec
We're excited to announce that Auth0 will be sponsoring InfoSec beginning September 14 through January 31, 2022. We wanted to give you a heads up and walk you through what it will look like.
How and ...
- 330
6
votes
0
answers
141
views
2021: a year in moderation
As we say goodbye to the old year and welcome the new one, we have a tradition of sharing moderation stats for the preceding calendar year.
As most of you here are aware, sites on the Stack Exchange ...
- 101
2
votes
1
answer
130
views
Question being marked as a duplicate of another with general troubleshooting steps
I posted this question here trying to get specific help on how to deploy a metasploit payload via a tunneling service called pagekite. My question was closed and marked as a duplicate of another ...
Rory AlsopMod
- 61.5k
4
votes
0
answers
137
views
What to do about the password tag mess?
Our tagging landscape for all things password-related is a bit of a mess. Right now, there are:
passwords (3.8k): Specific to the security of passwords: hashing, entropy, cracking, resets, lockouts, ...
- 65.1k
-1
votes
1
answer
142
views
I want to appeal deletion of a specific question
I want to appeal the action taken by moderator. This question was deleted, but I think it was a legit & normal question, and doesn't deserve to be deleted. The moderator has also deleted the ...
- 2,707
8
votes
3
answers
163
views
Should I mask potentially harmful links?
I posted an answer to a question, where a potentially malicious link was part of the answer. I posted the link in code tags, so it would not be directly clickable, requiring user to actively copy it ...
- 72.5k
2
votes
2
answers
105
views
How should questions containing spammy and porny links be handled?
How should the below question be handle? Is it good to post it as is? Or should I only describe the links as spamy and pornny and cut them off? The advantage of the former is that people can have full ...
- 34k
1
vote
1
answer
42
views
Are topics touching both Signal Intelligence and Information Security / Extraction on topic?
I'm wondering –considering GRCon'21 has another Capture The Flag challenge– whether such signal-centric problems, which typically also involve a more "classical" infosec problems but do need ...
schroederMod
- 127k
5
votes
2
answers
261
views
Community Ads for 2021
September update: Community Ads are now live network-wide. All ads with a score of 6 or higher, or with a score of 4 or higher and no downvotes will be displayed (except for any that have a note from ...
- 101
-9
votes
2
answers
142
views
Mod deleted a valid answer for a false reason
In response to a recent question about getting people to trust untrustworthy software, I responded with a frame challenge explaining why this software should be considered malicious and abandoned by ...
Rory AlsopMod
- 61.5k
10
votes
0
answers
97
views
Should we deprecate [technology]?
I believe it's pretty self-evident that technology is rather generic at best. The tag currently has four questions, none of them pretty good. Let's have a look at the four burnination questions:
1. ...
CommunityBot
- 3
7
votes
2
answers
88
views
Should LibreSSL have a tag?
There is no tag for LibreSSL, and I've now encountered several Qs that are tagged openssl but are actually about Libre. Searching "libressl" finds 55 Qs while "libressl [openssl]" ...
- 15.2k
2
votes
1
answer
47
views
Guidelines for suggested edits being too minor
I had always thought that the community consensus on very minor suggested edits was that they should be rejected [1][2]. Personally, I agree with that (and I believe some reviews by schroeder support ...
schroederMod
- 127k
8
votes
2
answers
84
views
Should we be more strict about analysis of reports from vulnerability scanners?
The phenomenon
We regularly get questions where OP has run a vulnerability scanner on an application and asks for help with interpretation of the results. Usually they quote part of the scanner's ...
- 58.3k
8
votes
2
answers
292
views
Should we use archived links instead of direct links?
Background
I recently came across an answer where an archived link (the one that point to the web archive) was used instead of the direct link.
When I asked the user for the intention I got a reply ...
- 65.8k
7
votes
1
answer
134
views
Are we allowed to post CVE numbers of reported issues?
A user posted a log entry: Concerning GET request in logs
I found an associated CVE of the vulnerability trying to be exploited. Is it okay to post and/or link the CVE number for clarification?
- 65.8k
3
votes
1
answer
82
views
Why was this question about clients reading HTTPS parameters migrated to Super User?
The question "Can HTTPS prameters be seen by the PC client?" was migrated to Super User, and I struggle to see why. It seems like an obvious fit for this site, on the format "can ...
schroederMod
- 127k
9
votes
1
answer
87
views
What should we do about all the data destruction and recovery tags?
There are a lot of tags that seem fairly redundant. There are a number of posts (example) discussing data remanence and recovery which seem to be used more or less interchangeably:
data-recovery
data-...
- 65.1k
50
votes
11
answers
2k
views
Should we allow malware authors to weigh in on questions?
The title is perhaps more inflammatory than the reality, but I can alter it later.
Concerning this answer: https://security.stackexchange.com/a/120775/6253 to the question "What should you do if you ...
- 66
10
votes
1
answer
130
views
Is a question asking if old answers to same/similar question are still valid acceptable?
As technology evolves, answers to some questions might get outdated. Now, if I see a question which I know has outdated answers, I can either post a new answer, or ask a question which points out why ...
schroederMod
- 127k
2
votes
1
answer
46
views
Question closed for being off-topic
My question was closed for being off topic. The reason stated by the moderator was that "This is not a security issue. This is pure TCP/IP".
I feel it is reasonable to consider my question ...
- 343
1
vote
1
answer
37
views
Can we re-open this?
Can we act on this question?
The question basically asks how to set up a firewall on Linux that blocks non VPN connections.
Would a rewording of the question be useful in order to re-open it?
Can we ...
schroederMod
- 127k
7
votes
1
answer
74
views
2020: a year in moderation
As we say goodbye to the old year and welcome the new one, we have a tradition of sharing moderation stats for the past 12 months.
As most of you here are aware, sites on the Stack Exchange network ...
- 101
3
votes
1
answer
42
views
Would this question from the Workplace SE be on topic here?
Would this question from The WorkPlace SE about notification of OP's still active access to company data be on topic here? As access management and revocation of access for former employees is a ...
schroederMod
- 127k
1
vote
0
answers
93
views
I have been a victim, but of what? [closed]
A few days ago, an old shopping account of mine was "hacked". Or at least, an attacker managed to change its password. Now, I am wondering what was the purpose of this happening and whether ...
5
votes
1
answer
100
views
What's your angle on [Angular]?
The name "Angular" is used to refer to Angular 2.0 and upwards, while the name "AngularJS" refers to the old 1.x version.
We have had angularjs for some time, it has 32 questions. ...
CommunityBot
- 3
4
votes
1
answer
84
views
Are we to avoid listing specific apps / malware?
Are we supposed to avoid mentioning a specific piece of malware? In my latest question, I mentioned a specific piece of malware / app I encountered. The question does have broad applicability as well....
schroederMod
- 127k
1
vote
1
answer
60
views
Should I ask questions concerning tips on how to launch Penetration Testing company?
I am planning to launch a pen test company and several questions have arisen (e.g what NIST documents should I study, how to properly report vulnerabilities to clients and more).
I would like to ask ...
- 65.1k
1
vote
1
answer
65
views
Where to ask this security-related question?
I read on How to ask a good question the following text:
If you're still unsure if you should ask your question on Information Security Stack Exchange, feel free to ask in our chat or on our meta ...
schroederMod
- 127k
-1
votes
1
answer
46
views
Can I ask on IS Stack Exchange about the correctness of answers on a different SE?
I asked the following question on WorldBuilding SE.
How can invading aliens access the Internet to find out all about us?
I now find that I am unqualified to judge the best answer. These range from &...
schroederMod
- 127k
8
votes
1
answer
115
views
Can we exclude some inclusion tags?
We have the following three tags:
file-inclusion, 36 questions:
A remote code execution attack where user input is used to build the path of code files to be executed, allowing an attacker to ...
Rory AlsopMod
- 61.5k