Questions tagged [discussion]

The question you're asking is designed to solicit opinions or best-practices on a particular topic, with the goal of reaching community consensus.

Filter by
Sorted by
Tagged with
10
votes
1answer
105 views

Ambiguous [image] tag

The image tag is currently used for: the picture kind of images forensic images to 'image' a computer in the sense of writing a disk image to it And I'm surprised nobody referred to iso(-like) files ...
9
votes
2answers
161 views

This answer was edited and should be undeleted. I cannot vote to undelete

The answer: https://security.stackexchange.com/a/23431/10863 The timeline as I understand it: The question is about Nmap and one of the original authors of Nmap answers. They copy the answer to ...
2
votes
0answers
48 views

Is there a tag for infoleaks?

I know there is a data-leakage tag, but that is not what I am looking for. I am wondering if there are any tags that encompass traditional information leakage in binary exploitation, for example ...
8
votes
2answers
214 views

Should we use archived links instead of direct links?

Background I recently came across an answer where an archived link (the one that point to the web archive) was used instead of the direct link. When I asked the user for the intention I got a reply ...
9
votes
1answer
333 views

Square CTF | 08 Nov. 2018, 19:00 UTC —14 Nov. 2018, 19:00 UTC

Let's participate in the Square CTF! Format: Jeopardy Duration: 6 days(!) Start: Thu, 2018-11-08 19:00 UTC (Other timezone) Finish: Mon, 2018-11-14 19:00 UTC (Other timezone) Official URL: http://...
7
votes
3answers
158 views

Is this question in scope: how to select a security firm/consultant

I'm toying with the idea of asking a question that isn't exactly technical: how does an IT specialist who is NOT an expert in security select a security company or consultant for, say, a pentest or a ...
8
votes
0answers
129 views

HITCON CTF 2018 | Sat, 20 Oct 02:00 — Mon, 22 Oct 02:00 UTC (48h)

Let's participate in the HITCON CTF 2018! Format: Jeopardy Duration: 48h Start: Sat, 2018-10-20 02:00 UTC (Other timezone) Finish: Mon, 2018-10-22 02:00 UTC (Other timezone) Official URL: https://ctf....
16
votes
2answers
257 views

Odd user activity - many small edits, bounties offered for a single other user's questions

I encountered a user with an anomalous activity pattern while going through the Suggested Edits queue, just now. It seems like they might be trying to game the system somehow. The suggested edit ...
1
vote
1answer
50 views

Editing misleading question, possibly against authors intention

Situation I recently spotted this question: Police forcing me to install Jingwang spyware app, how to minimize impact? In this post there is a good technical question, but it also provides situational ...
12
votes
8answers
412 views

Write-ups: Hackover CTF 2018 | Fri, 05 Oct, 20:00 UTC — Sun, 07 Oct, 10:00 UTC (38h)

Let's participate in the Hackover CTF 2018! Hackover is a Jeopardy-style CTF and lasts 38 hours with ~100 participating teams announced. It's organized by the Hamburg CCC chapter in the context of ...
0
votes
2answers
120 views

What does '101' reputation (on many sites) means in profiles of some high rep users?

Let me explain a bit what I am trying to ask. So I am giving links of profiles of two high rep users. For example, two of our mods. schroeder's profile He is member of 22 sites but as you can see, ...
-4
votes
2answers
164 views

Moderator deleted my answer without good reason

@AndrolGenhald suggested I ask this here. My answer here was deleted for the reason that "this is covered by other answers". First of all, its obviously not a duplicate answer, but it also contains ...
2
votes
5answers
532 views

Information Security's updated site theme is live!

UPDATE - We've pushed this live for everyone now. Thanks to those who took the time to give feedback. Please do know, being live doesn't mean we can't address further changes for you! Write an answer ...
-4
votes
1answer
63 views

I want to start bounty for a question [closed]

I asked the following question Does removing a GUI from a server make it less vulnerable? But I don't get enough reputation as I expected, once I start a bounty and I did get a reputation as I paid, ...
2
votes
1answer
62 views

Questions are no longer being accepted

Right now Information Security is no longer accepting questions from my account. Is there a way to override this or am I screwed?
15
votes
1answer
854 views

Write-ups: Teaser Dragon CTF 2018: Sa, 29 Sept. 2018, 12:00 UTC — So, 30 Sept. 2018, 12:00 UTC, lasts 24 hours

Let's participate in the Dragon CTF 2018 Teaser! The CTF runs Sa, 29 Sept. 2018, 12:00 UTC — So, 30 Sept. 2018, 12:00 UTC. You can find additional details on the CTFtime event page. Links to ...
-2
votes
2answers
84 views

Answers with the potential to cause harm

The scenario: A dangerously incorrect answer contains advice that has the potential to cause harm. The danger is missed, misunderstood or underestimated by some members and the answer receives some ...
4
votes
2answers
295 views

Is this bordering on “helping you break the security of a system”?

This high-traffic question from two days ago, many comments and answers: How could a public DNS server return bad results? The question comes in two parts: How is the ISP achieving this? Are ...
14
votes
2answers
164 views

Should we transcribe screenshots of text?

In this question: How a public dns server could return wrong results A good Samaritan user @Michael lovingly transcribed out the screenshot of a terminal in a suggested edit. Certainly text in a ...
2
votes
3answers
141 views

Merge [checksum] and [hash]?

I propose that checksum be marked as a synonym of hash. Checksums are not always hashes, for example parity bits on network packets, but I think that for security purposes, people use "checksum" as a ...
7
votes
0answers
106 views

New tag suggestion - OSINT

I find it curious that there aren't any tags for open source intelligence (OSINT) or even threat intelligence (TI). There do seem to be multiple questions that could make use of an OSINT tag, ...
4
votes
2answers
116 views

Is banhammer the best way to handle link only answers?

I recently answered a question about a very specific piece of code the other day (PHP eval code sandbox break). Since I was on my mobile device I only posted a link rather than try to copy/format a ...
-2
votes
1answer
153 views

Tamper data in Chrome question closed

Tamper data Chrome not working Could you please explain to me how a question about an extension, used for tampering data by many of security experts, is not related to a QA site on Information ...
10
votes
1answer
106 views

When is it appropriate to unprotect a question?

I have enough rep to protect and unprotect questions. Sometimes I come across a question that has been protected years ago, and I believe it should no longer be protected. In these cases, when should ...
4
votes
1answer
374 views

Is this joke answer really an answer?

This answer on the Bypass MAC address internet time filtering question seems to be a joke answer, half-answering the question using specific terminology (re: timing attack, side channel attack). ...
3
votes
2answers
83 views

Should I restrain from excessive using of headers in my answers?

Normally I use the "Smaller Subheader" formatting to make my paragraphs easier to read. To my opinion, it works like a summary and helps readers to get the main idea by a quick glance. This is how my ...
1
vote
3answers
68 views

Are mods have been assigned a specific job in moderating the site?

I am member of sec.se for about 8-9 months and since we have 3 mods schroeder , Rory Alosp and AviD . But what I observed generally is that schroeder is highly active on main site, Rory Alosp is ...
2
votes
1answer
35 views

How to identify if a question is a security / cryptography / reverse engineering question?

Sometimes I have doubts while asking question or answering question, if the question is really about information security. Especially when they seem as a cryptography or malware analysis, or computer ...
8
votes
2answers
243 views

Writeup: Meepwn CTF Quals 2018: starts 13 July 19:00 UTC — ends 15 July 2018, 19:00 UTC, lasts 48 hours

Let's participate in the Meepwn CTF Qualifier 2018! The CTF runs Fr, 13 July 2018, 19:00 UTC — Sun, 15 July 2018, 19:00 UTC. You can find additional details on the CTFtime event page. Links to ...
41
votes
0answers
481 views

Congratulations to our third 100k member of Sec.SE (first human member…)

Congratulations to Steffen Ullrich who has just passed 100k! Like the Great and Little Bears before him, this is no small feat! With over 2000 answers, one with 431 upvotes, and four with over 100 ...
6
votes
1answer
175 views

Can we get InfoSec Ex hoodies?

This has probably already been asked and I don't know how possible this is, but... Can we get InfoSec Ex hoodies? I know StackEx used to have a shop a long time ago and it closed due to the reasons ...
0
votes
1answer
54 views

Reputation cap and Process of applying cap

I've noticed there is a reputation cap of 200 per day max. Let's assume a question/answer gaining reputation more than 200 in a day, then believe the cap will limit the reputation to 200. And let's ...
15
votes
1answer
513 views

Is this type of behaviour acceptable?

A question appeared on the site this afternoon which is explicitly off-topic for the site as per the scope. All that question would do is cause opinionated answers and comments filled to the brim with ...
0
votes
0answers
46 views

Upvoting answers on opinion-based questions?

TL;DR - Should answers to opinion-based questions be upvoted? Afternoon, I am a little concerned with the number of off-topic questions that slip through currently, obviously, this is a growing ...
10
votes
1answer
194 views

InfoSec Ex Badges

One thing I've wondered since I've started contributing here is - how come the badges (That being the bronze, silver & gold) don't feature the lion as per the official logo? I realise there ...
3
votes
2answers
81 views

Concern: Can users post any image or link while asking questions on site?

It's a serious concern that while asking questions anybody can post any link or image(may be malicious). What would happen if any user open that malicious link or image file? So my question is : Is ...
1
vote
1answer
55 views

Should we have a canonical question tag?

I posted a canonical question and was wondering why there wasn't a tag for canonical questions? Shouldn't we have a tag for this? Right now the only way to know for sure that the question is intended ...
2
votes
2answers
65 views

Is it acceptable to ask for software recommendations?

I'm searching for an Online Password Manager to move all my passwords to, and I'd like to ask to the community their choices and preferences. Is it acceptable to ask for the "top" Password Managers, ...
5
votes
1answer
107 views

What to do if OP edits their question from a different account?

In the edit review queue, I sometimes encounter edits by someone who writes as if they were the OP, or even claim to be the OP, even though they are using a different account. The OP account is ...
7
votes
2answers
131 views

How should questions be handled that are part on-topic and part off-topic?

If I encounter a question in the Review Queue for Close Votes that is partly off-topic and partly on-topic, how should I proceed? Vote to close? Leave Open? Suggest edits to the author to make it on-...
9
votes
5answers
603 views

Write-ups: DEF CON CTF 2018 qualifiers: starts 12 May 00:00 UTC, lasts 48 hours

Let's participate in the DEF CON CTF Qualifier 2018! The CTF runs Sat, 12 May 2018, 00:00 UTC — Mon, 14 May 2018, 00:00 UTC. You can find additional details on the CTFtime event page. Links to ...
9
votes
3answers
251 views

Writeups: PlaidCTF 2018 - Sat, 05 May 2018 at 04:00 UTC, lasts for 36 hours

Let's participate at PlaidCTF 2018! The CTF will begin on Sat, 05 May 2018 at 04:00 UTC, and end on Sun, 06 May 2018 at 16:00 UTC (that's 36 hours). PlaidCTF is a yearly CTF run by Plaid Parliament ...
5
votes
2answers
158 views

What to do about the [fingerprint] tags?

We have a number of different concepts related to "fingerprints" on this site: Physical fingerprints, e.g. for use in biometric authentication. Fingerprinting software (and hardware?), i.e. trying to ...
19
votes
1answer
218 views

Spam, spam, [spammer] and [spam]

We currently have two tags for spam: spam, 316 questions spammer, 17 question While I understand the difference between the person who sends the spam and the spam itself, that is not a meaningful ...
6
votes
1answer
153 views

Undeletion followed by lock — communication denied

I deleted this answer over a year ago, for reasons I do not remember. I assume it was due to some hostility in the comments, but I don't know anymore. (The comments had been moved to chat, and ...
6
votes
2answers
159 views

Should we recommend deletion of a low quality post if it has a comment suggesting how to improve it?

Sorry, I wasn't able to frame the question in a short and easy to understand format. I see that there are posts like this in the review queue. They are marked as low quality posts and have comments ...
5
votes
0answers
195 views

WPICTF 2018, Fri 13 April 2018 at 19:00 UTC, lasts 48 hours

Let's participate in WPICTF 2018. WPICTF is a Jeopardy-style CTF and lasts 48 hours. According to their website: The CTF should be "beginner friendly". Most challenges were made by WPI students, so ...
-2
votes
1answer
73 views

Soften “how to ask” restrictions for CTF write-ups and allow them on main site

While I was writing this, it became to clear me, that I'm not even sure if CTF write-ups are off-topic or prohibited on the main site or if there was ever an agreement to post them here on Meta. If it'...
1
vote
2answers
113 views

Is this Q as fishy as it looks to me?

I am talking about Image upload vulnerability checking in php script How do we know that this is really OP`s server? Do we support such questions at all?
-6
votes
2answers
169 views

What is our definition of an IT Professional?

I recently came across this answer: What should you do if you catch encryption ransomware mid-operation? And instantly had an issue with the choice of words: We are professionals and will help you ...

1 2
3
4 5
18