Skip to main content

Questions tagged [discussion]

The question you're asking is designed to solicit opinions or best-practices on a particular topic, with the goal of reaching community consensus.

Filter by
Sorted by
Tagged with
108 votes
20 answers
26k views

The Memes of Information Security

There are memes common to whole Stack Exchange. But after spending some time in The DMZ it becomes evident that Information Security has it's own memes (e.g. rory). I therefore propose that this ...
Andrei Botalov's user avatar
76 votes
0 answers
834 views

You're making a difference!

Occasionally, we receive some e-mails that really make us proud of doing the job we do here, thanking us for the knowledge this site, along with a few others on the network, has made available. These ...
JNat's user avatar
  • 101
62 votes
0 answers
908 views

Please do not dump Wikipedia into tag wikis

Please do not populate tag wikis by copying text from Wikipedia. Reviewers, please reject tag wiki suggestions that are copied from Wikipedia or other sources, or more generally that suggest content ...
Gilles 'SO- stop being evil''s user avatar
59 votes
7 answers
2k views

"Is (x) Secure" Question Anti-Pattern

A common problem that I see with questions is that they ask something like "Is (x) secure", which to me is an unanswerable question, the same way as asking "is the city north", it has no meaning in an ...
Rory McCune's user avatar
  • 62.3k
50 votes
6 answers
4k views

A Security Stack Exchange CTF team

Updates: Added first challenge to prepare We have a CTFTime team, secse. Please join this. We communicate over Slack. To get an invitation to the group you can contact Benoit Esnard, HamZa, Xavier59,...
49 votes
11 answers
2k views

Should we allow malware authors to weigh in on questions?

The title is perhaps more inflammatory than the reality, but I can alter it later. Concerning this answer: https://security.stackexchange.com/a/120775/6253 to the question "What should you do if you ...
schroeder's user avatar
  • 131k
47 votes
8 answers
1k views

Request for comment: Stack Overflow is hiring a Director of Information Security

This is a bit unorthodox, but also extra meta: we (Stack Overflow, the folks behind this here site), are looking to hire our first Director of Information Security and I'd appreciate any feedback you ...
David Fullerton's user avatar
42 votes
6 answers
660 views

Too aggressive with "off-topic" comments?

The question: Authenticating a user via SMS elicited a very interesting comment from the OP after a very new user (<20 days) suggested the question was off-topic. I don't mean to kick a hornet's ...
Mike Ounsworth's user avatar
42 votes
6 answers
451 views

Can people please be a little less zealous with close votes?

This question currently has 3 flags against it for "primarily opinion based". If you read it, and its edit history, at no point was it opinion based. It is quite clearly asking whether VSTs could ...
Polynomial's user avatar
  • 135k
40 votes
0 answers
498 views

Congratulations to our third 100k member of Sec.SE (first human member...)

Congratulations to Steffen Ullrich who has just passed 100k! Like the Great and Little Bears before him, this is no small feat! With over 2000 answers, one with 431 upvotes, and four with over 100 ...
Rory Alsop's user avatar
  • 61.5k
35 votes
4 answers
887 views

Is Security.SE only for professionals?

I recently asked a question that made it to "Hot Network Questions" and picked up a huge number of views, upvotes and favorites in a very short time. The moderators put it "On Hold", because the ...
Shaul Behr's user avatar
  • 1,027
33 votes
9 answers
2k views

Clarify our stance on black hat questions

In the site FAQ, it is written: Black Hat vs White Hat - This site is not intended to be a resource for Black Hats, or malicious hackers. While we understand discussion of exploits may require ...
Gilles 'SO- stop being evil''s user avatar
33 votes
1 answer
645 views

Zalgo text invades Security.SE

Zalgo text (http://textozor.com/zalgo-text/) takes advantage UTF8 and rendering. Some, like the user profile below are relatively benign. Some, not so much. The user below is brand new to Security.SE. ...
h4ckNinja's user avatar
  • 3,056
32 votes
1 answer
2k views

I hereby declare the 22nd of September each year to be Bear Day!

Thomas Pornin, one of the most distinguished members of our community has reached 100k rep, a terrific milestone! A complete list of his contributions to the site is probably way too long to fit into ...
user avatar
31 votes
0 answers
295 views

2015 Community Moderator Election Results

Information Security's third moderator election has come to a close, the votes have been tallied, and the new moderator is: He'll be joining the existing crew shortly — please thank him for ...
Jon Ericson's user avatar
28 votes
9 answers
1k views

Why do people post questions on here they can easily google an answer for?

I'm honestly being serious. It's just not on this forum either. Why do people put in the time and effort to post a question they can simply google the answer for? Posting their question on a forum ...
Snipercatz's user avatar
28 votes
4 answers
639 views

Are the wrong questions and answers getting too many upvotes?

On the Tour page for Security.SE it states: Information Security Stack Exchange is a question and answer site for Information security professionals. However, when I see questions like this Does ...
SilverlightFox's user avatar
28 votes
2 answers
807 views

IT Security Stack Exchange Top User Swag

As a thank you for being awesome, if you have at least 1,000 reputation and are on page 1 or page 2 of … https://security.stackexchange.com/users?tab=reputation&filter=all … we'll ...
Rebecca Chernoff's user avatar
28 votes
0 answers
486 views

Praise the day! Our ursine overlord has brought more glory than ever!

Thomas Pornin, our ursine overlord has reached the milestone of 200,000 reputation on Sec.SE! Before we delve into the bear's amazing here are some facts about his account(s): The bears are the only ...
SEJPM's user avatar
  • 9,780
27 votes
3 answers
766 views

Why doesn't security.stackexchange.com use HTTPS?

When trying to access https://security.stackexchange.com I get redirected to regular HTTP. In case I'd be using a public wifi someone could simply hijack my session and post whatever they want or ...
Indrek's user avatar
  • 173
27 votes
0 answers
460 views

Why is "citizenfour" a tag?

I understand that people might reference the movie in a question. But shouldn't the tags for that question be related to the security technology/technique they're asking about, and not which movie it ...
RoraΖ's user avatar
  • 12.5k
26 votes
8 answers
2k views

Design for IT Security

I'm Jin, and I'll be working on the designs for the Stack Exchange sites as they graduate from the beta phase. Each site will have its own unique theme that will reflect its topic. However, all sites ...
Jin's user avatar
  • 101
26 votes
1 answer
515 views

Can we all stop posting duplicate questions about the Heartbleed bug?

I have noticed 9/10 posts appear to be about the heartbleed vulnerability, and most of them seem to be duplicate questions. Please, search for existing answers to your question before you ask it, ...
Sam Aldis's user avatar
25 votes
3 answers
229 views

Congratulations to Schroeder for hitting 100k

Congratulations to @Schroeder for hitting 100k! Our 5th 100k-er He not only manages to be the most active moderator on Sec.SE, but also has answered over 1500 questions Well done!
Rory Alsop's user avatar
  • 61.5k
25 votes
1 answer
393 views

School Exercise and Answer that only give Clues

So, today someone asked a school question AES-ECB chosen plaintext attack with long secret Usually, I don't answer those but I decided to help the OP by giving some clues about how to solve the ...
Gudradain's user avatar
  • 7,001
25 votes
1 answer
348 views

How to handle "Sensationalist" questions and answers?

When I saw the question How does Windows 10 allow Microsoft to spy on you? with 10'000 views, and an answer that seems to be not accepted for it's accuracy or facts, I wondered if there's precedent on ...
Peter's user avatar
  • 3,630
24 votes
5 answers
607 views

Do we want hats?

In 2011, the Gaming Stack Exchange hosted an event called Hat Dash, where users earned "hats" for their gravatars by completing certain tasks (analogous to badges): Certain actions would trigger the ...
Rory Alsop's user avatar
  • 61.5k
24 votes
4 answers
933 views

Code review / Deobfuscation: Why is it considered off-topic here?

I viewed the help center multiple times and, unless I'm missing something, I didn't see anything related to code-review being off-topic, so all this time, I assumed it was allowed here. Let's take ...
Mark Buffalo's user avatar
  • 22.5k
24 votes
8 answers
373 views

We still don't have a 404 image

Back when we were discussing site design, @Jin came up with this design question and we do have some answers which could be relevant to our 404 page. I think we need to get something defined, as ours ...
Rory Alsop's user avatar
  • 61.5k
23 votes
3 answers
367 views

Plagiarism on SE

I've often seen suspicious answers on SE. They're too detailed, well formatted. I put some of the body text of the answer in Google and I quickly spot the original source. E.g., I flagged this one ...
mgjk's user avatar
  • 7,525
23 votes
2 answers
209 views

Do we only rely on community member's memories to identify duplicates?

I have a habit of reviewing the latest posts at least once a day. Sometimes I realize that I have seen a particular question before and am able to mark it as a duplicate. Sometimes I check the SE if ...
Limit's user avatar
  • 3,276
23 votes
1 answer
408 views

Difference between security stackexchange and cryptography stackexchange?

What is the difference between this stackexchange website and https://crypto.stackexchange.com/ ? Are there some rules or guidelines to what to post here and not there, and vice versa? To me, ...
Karel Bílek's user avatar
23 votes
1 answer
546 views

Let's not go to Stack Overflow; 'tis NOT a silly place

TL;DR How can we stop people from suggesting that bad questions be re-asked on Stack Overflow? Every so often, a new user asks a question that is more programming-related than security related. Then ...
S.L. Barth is on codidact.com's user avatar
23 votes
2 answers
710 views

A design update is coming!

You may have noticed some updates to the design lately, they are part of a SE network-wide update to a new base css framework. The updates allow us to: Have sharper / more beautiful design on retina ...
Stéphane's user avatar
  • 101
22 votes
6 answers
920 views

Official Security Stack Exchange Anniversary Competition

As Security Stack Exchange has just passed its 1st anniversary of graduation, we are going to follow in the tradition of other sites and run a competition. With prizes! Cool ones! Obviously in order ...
Rory Alsop's user avatar
  • 61.5k
22 votes
2 answers
569 views

Blog - actions required

As discussed previously on this post and this one, the current SE hosted blog service on WordPress is going away - with an ideal timeline of 1 Jan 2017. It shouldn't be immensely complex, but there ...
Rory Alsop's user avatar
  • 61.5k
21 votes
5 answers
281 views

Is it acceptable to ask a question and give an answer strictly for peer review?

I want to ask a question where I believe I know the answer but am not 100% confident in my own answer, so would it be good practice to ask it, answer myself and see what others have to say about it ...
Matthew Peters's user avatar
21 votes
2 answers
360 views

Downvoting anything that looks like "how do I write malware"

I recently posted a question about methods for preventing alterations to a file or program. A short while after posting, it occurred to me that malware often tries to do that. Sure enough, when I came ...
anaximander's user avatar
  • 1,521
21 votes
0 answers
510 views

Google CTF 2017, 17 June 2017 at 00:00 UTC, lasts 48 hours

Let's participate in Google CTF 2017. The CTF will begin on 17 June 2017 00:00:01 UTC and ends on 18 June 2017 23:59:59 UTC. As usual, we will play as team sec.se, but unlike previous CTFs, because ...
Benoit Esnard's user avatar
20 votes
4 answers
962 views

Are we a free malware analysis service?

Every so often we get questions about someone having found malware and wanting to know what it does. Essentially they are asking us to analyze the malware and tell them what it is. The latest one is ...
André Borie's user avatar
  • 12.8k
20 votes
2 answers
218 views

Does it make a sense to add own answer over an already accepted answer?

Suppose a question was asked 4 months ago and the OP was satisfied by a given available answer: Is there any benefit to add y own answer to the OP's question 4 months later?
user avatar
20 votes
3 answers
353 views

Is security.stackexchange vulnerable to session hijacking?

I'm logged in to security.stackexchange and I'm not using https to browse the site. Does this mean that the site is vulnerable to session hijacking? I assume that it's not, but I don't get how ...
EpicVendetta's user avatar
20 votes
5 answers
962 views

Requests for Question of The Week blog posts

Since starting the Security Stack Exchange Blog on 15 July 2011 we have some excellent blog posts, and a large number of these are from our Question of the Week posts. Going forwards, it is probably ...
Rory Alsop's user avatar
  • 61.5k
20 votes
1 answer
276 views

Ads for this site on Stack Overflow show questions with bad grammar

I was browsing Stack Overflow when I saw the following ad for Information Security on the right side of my window: As you can see, this question title has bad grammar. It should read "Does one need ...
Thunderforge's user avatar
20 votes
4 answers
214 views

What is the appropriate way to handle posts requiring very minor edits?

Occasionally, I come across questions or answers with grammatical errors that have a major impact on the meaning of a sentence, but take less than 6 characters to fix. This question for example ...
lzam's user avatar
  • 892
19 votes
21 answers
842 views

The great 2015 tag cleaning [closed]

With every passing year and our growing popularity, we see lot of new questions. This is a good thing :) Due to the nature of question tagging, we are generating lots of new tags every week. It's not ...
M'vy's user avatar
  • 13.1k
19 votes
5 answers
637 views

Sunshine CTF 2016 - 12 March 2016 at 16 pm UTC, lasts 28,5 hours

Let's participate at Sunshine CTF 2016. The CTF will begin on 12 March 2016 16:00 UTC and ends on 13 March 2016 20:30 UTC. As usual, we will play as team sec.se. The team communicates through the ...
HamZa's user avatar
  • 1,361
19 votes
2 answers
251 views

Breaking a specific system and How to demonstrate an understanding of concepts involved

I recently noticed that a lot of questions asking for how can I exploit this specific code or filter get closed (but a lot of them also do not get closed) or marked as duplicates of the general topic ...
tim's user avatar
  • 29.6k
19 votes
0 answers
158 views

Merging [burp] and [burpsuite]?

Aren't these two tags actually the same thing? burp, 57 questions, 9 followers: a popular platform for performing security testing of web applications. It can also be used by a malicious party to ...
Anders's user avatar
  • 65.6k
18 votes
8 answers
899 views

Do we want to continue with our blog?

Firstly - yes we have a blog - with 91 posts over the last 5 years (although the last 8 months has been a bit of a desert, for various reasons - one being the removal of support for blogs.) Now, ...
Rory Alsop's user avatar
  • 61.5k

1
2 3 4 5
19