Questions tagged [discussion]
The question you're asking is designed to solicit opinions or best-practices on a particular topic, with the goal of reaching community consensus.
897
questions
8
votes
0
answers
58
views
Request to rename [macosx] → [macos]
The current name of Apple's desktop operating system is macOS. On this site, the tag macosx is used to refer to that ("Mac OS X" was the original name of the operating system").
But other Stack ...
- 211
1
vote
1
answer
118
views
Is this user trolling?
I recently came across Cash-, who seemingly asked the same question regarding SQL Injection over and over again. Here are the links:
SQLI Login Bypass Cheat-sheets Question
'=' 'OR' ...
user163495
2
votes
1
answer
78
views
Are questions on law enforcement surveillance techniques on-topic?
I have a “I would like others to explain ______ to me” type question which means I am 'probably OK' but wanted to check.
A recent article mentioned suspects performing an action (leaving a phone on ...
- 256
9
votes
1
answer
203
views
Is it acceptable to delete repost an answer to counter "runaway downvotes"?
A user posted an answer to a HNQ question which was quickly heavily downvoted. When it hit -7, the user deleted their answer then reposted it, resetting their downvotes, with only minimal changes. A ...
- 65.8k
0
votes
2
answers
80
views
VPN comparison - on topic?
I fear that this would be off-topic on the main site, so ask here for clarification.
My IVPN subscription expires soon. I have been satisfied with the service and would normally just renew. However, ...
0
votes
1
answer
35
views
Why was this migrated?
Why was this migrated? There are other PGP/GnuPG question in InformationSecurity.SE
https://superuser.com/questions/1436140/verify-pgp-signature-on-fedora
- 101
1
vote
1
answer
38
views
Is "Which tool can do X?" off-topic?
A general rule of thumb on many StackExchange sites is that "Product recommendations are off-topic". I agree with this stance, as there are so many ways a question like "What is the best ..." can go ...
user163495
0
votes
1
answer
33
views
How to proceed with questions without an accepted answer?
I recently came across this question, which got bumped to the homepage, as it did not have an accepted answer.
The provided answer was very good, yet was not accepted. Why this is the case is unclear,...
user163495
1
vote
0
answers
48
views
Would this question be a duplicate?
There are quite a few questions about http vs. https. I think the most similar to mine is Is HTTPS redirecting to HTTP a vulnerability?
My question is: I visited a website where the login page was ...
- 143
0
votes
1
answer
47
views
Why the aggressive migration of comments to chat?
Post I'm referring to: What are the differences between credential stuffing and password spraying? I don't recall seeing mods move short discussions from answer comments to chat before. Usually this ...
- 8,361
2
votes
1
answer
64
views
Flag wasn't helpful
I flagged the following post as spam since it wasn't a question at all.
Secure file I hope
Seems to be copy/paste of text on a Google webpage.
Your account, your data.
The Google data ...
- 1,042
13
votes
1
answer
303
views
Is "Is my PC infected?" off-topic?
I've seen several questions from people whom I'd generally not describe as "Information Security Professionals" which asked if their personal device is infected by malware.
Are these questions ...
user163495
1
vote
2
answers
54
views
Edit comment language
I recently stumbled upon this edit with the following comment 仕方が無い.
Which google translate inform me transliterate to Shikata ga nai. While a descriptive comment for the edit performed (correcting ...
- 1,754
2
votes
1
answer
76
views
Should we assume worst case scenario while writing answers?
Recently I answered a question where the password was sent to the users email in plain text. Technically this means the password is stored in two ways,
Plain Text - which was sent to the user (the ...
- 2,682
-7
votes
2
answers
207
views
A moderator is harassing me. Someone please look at this
I have a question about my Information Security Stack Exchange post: What’s the best way to report an IP address from Romania?
The mod that deleted my answer is mad at me because I told him he marked ...
- 21
-5
votes
1
answer
87
views
How is this off topic?
I have a question about my Information Security Stack Exchange post: USB Drive for Bad USB
How is that post off topic? I asked about a device used for pen testing.
- 21
7
votes
2
answers
135
views
What is the best practice for acronym usage in Questions/Answers/Comments?
Today a question mentioning CVE popped up. I would have assumed that what CVE stands for and what it actually is would be common knowledge on a Q&A-site focused on IT security (maybe I'm biased ...
- 1,440
-3
votes
2
answers
74
views
Moderator edit invalidated an answer
Feeling a bit hesitant rolling back an edit by a moderator, but on this question , this edit by a moderator invalidates this answer.
My understanding across SE is that such edits are not okay (have ...
- 1,349
1
vote
1
answer
37
views
Are questions about interacting with users on-topic
I was going to ask a question about how to get user buy-in to some security changes I'm making at work. I know what changes I want to make, how, and why, but I am looking for advice on how to show ...
- 211
1
vote
1
answer
40
views
Is this a link-only answer which should be improved by adding most important link content into answer?
The question How to prevent users from executing commands through browser URL has an answer which IMO does not provide the answer to the question, because the "how-to" information what was asked is ...
- 115
0
votes
1
answer
29
views
Why were only some of the comments on this question recently purged?
The comments on this question were recently purged - but only partially.
Some of the subsequent comments devolved into Q&A, so I understand why some of them may have been purged.
But others of ...
- 9,358
1
vote
1
answer
65
views
Would the IS site be an appropriate place to ask for help in deciding between a Masters in Cyber Security vs a CISSP certification?
Before I posted, I wanted to make sure it would be acceptable? If not, is there a better site I could look for advice from the community?
- 145
-3
votes
3
answers
144
views
Moderator believes hardening Chrome ciphers is not about "security", not relevant here [post on hold]
Source post on hold: for reference
The entire post was about hardening Chrome, referencing vulnerabilities, and offering solutions.
He does not believe hardening chrome against the latest TLS_RSA, ...
- 425
2
votes
1
answer
87
views
Would this question be on-topic here?
There was a vulnerability in Tor Browser not long ago. After updates it was enabling javascript automatically without any warning whatsoever.
I want to find out whether it was intentional or not. ...
- 152
7
votes
3
answers
257
views
Community Promotion Ads — 2019 [duplicate]
2019 is here! And with the new year, as usual, comes a new iteration of Community Promotion Ads! Let’s refresh these for the coming year :)
What are Community Promotion Ads?
Community Promotion Ads ...
- 101
0
votes
1
answer
76
views
Why was this answer deleted?
Question: Hacked aiming xgirlfreind
The answer was deleted by a moderator, but I do not understand why. It has some humour/sarcasm, but it does make an attempt at answering the question. I doubt the ...
- 32.5k
11
votes
2
answers
420
views
Which Open Source security tools are considered off-topic?
I asked a question about a specific feature (CIDR-Binding) of a security tool.
It was a specific question with a specific answer about a security tool, which I was able to answer later by diving ...
- 640
14
votes
0
answers
144
views
2018: a year in moderation
It's New Year's Day in Stack Exchange land...
A distinguishing characteristic of these sites is how they are moderated:
We designed the Stack Exchange network engine to be mostly self-regulating, in ...
- 101
1
vote
1
answer
56
views
What is the proper way to format a question asking for improvements for a security scenarios?
I asked a question on stack exchange meta recently for recommending a site for my question and they suggested Information security.
Question link: Where to ask about improvements for a security ...
- 103
3
votes
2
answers
95
views
Appeal of an edit rejection
This answer was edited in such a way that it removed the context for its comments. The original answer contained a political spiel. While political spiels do not belong in answers, and its removal ...
- 160
1
vote
2
answers
67
views
How do we handle questions which imply danger to personal safety of the enquirer?
From time to time there are questions about "operational security" around like:
Search for military installed backdoors on laptop
Police forcing me to install Jingwang spyware app, how to minimize ...
- 2,553
-3
votes
1
answer
117
views
Is saying that someone is *probably* a troll acceptable?
In response to one of my answers, a user took one part of my answer, declared that my including that one part means that "your answer [is] all about this one weird quirk of this one" part and stated "...
- 123
5
votes
0
answers
75
views
Canonical answer for "Why not authenticate with the user sending an SMS?" should have its duplicate tags swapped
There are a number of questions on this site asking essentially the same question:
Why do 2FA apps send an SMS to the user rather than have the user send an SMS to the server?
here are some ...
- 58.3k
10
votes
1
answer
110
views
Ambiguous [image] tag
The image tag is currently used for:
the picture kind of images
forensic images
to 'image' a computer in the sense of writing a disk image to it
And I'm surprised nobody referred to iso(-like) files ...
- 32.5k
9
votes
2
answers
163
views
This answer was edited and should be undeleted. I cannot vote to undelete
The answer: https://security.stackexchange.com/a/23431/10863
The timeline as I understand it:
The question is about Nmap and one of the original authors of Nmap answers.
They copy the answer to ...
- 32.5k
3
votes
0
answers
51
views
Is there a tag for infoleaks?
I know there is a data-leakage tag, but that is not what I am looking for. I am wondering if there are any tags that encompass traditional information leakage in binary exploitation, for example ...
- 65.8k
8
votes
2
answers
292
views
Should we use archived links instead of direct links?
Background
I recently came across an answer where an archived link (the one that point to the web archive) was used instead of the direct link.
When I asked the user for the intention I got a reply ...
- 2,682
10
votes
1
answer
346
views
Square CTF | 08 Nov. 2018, 19:00 UTC —14 Nov. 2018, 19:00 UTC
Let's participate in the Square CTF!
Format: Jeopardy
Duration: 6 days(!)
Start: Thu, 2018-11-08 19:00 UTC (Other timezone)
Finish: Mon, 2018-11-14 19:00 UTC (Other timezone)
Official URL: http://...
- 7,945
7
votes
3
answers
159
views
Is this question in scope: how to select a security firm/consultant
I'm toying with the idea of asking a question that isn't exactly technical: how does an IT specialist who is NOT an expert in security select a security company or consultant for, say, a pentest or a ...
- 18.6k
8
votes
0
answers
136
views
HITCON CTF 2018 | Sat, 20 Oct 02:00 — Mon, 22 Oct 02:00 UTC (48h)
Let's participate in the HITCON CTF 2018!
Format: Jeopardy
Duration: 48h
Start: Sat, 2018-10-20 02:00 UTC (Other timezone)
Finish: Mon, 2018-10-22 02:00 UTC (Other timezone)
Official URL: https://ctf....
- 44.4k
15
votes
2
answers
262
views
Odd user activity - many small edits, bounties offered for a single other user's questions
I encountered a user with an anomalous activity pattern while going through the Suggested Edits queue, just now. It seems like they might be trying to game the system somehow.
The suggested edit ...
- 2,809
1
vote
1
answer
51
views
Editing misleading question, possibly against authors intention
Situation
I recently spotted this question: Police forcing me to install Jingwang spyware app, how to minimize impact?
In this post there is a good technical question, but it also provides situational ...
- 1,715
11
votes
8
answers
461
views
Write-ups: Hackover CTF 2018 | Fri, 05 Oct, 20:00 UTC — Sun, 07 Oct, 10:00 UTC (38h)
Let's participate in the Hackover CTF 2018!
Hackover is a Jeopardy-style CTF and lasts 38 hours with ~100 participating teams announced. It's organized by the Hamburg CCC chapter in the context of ...
- 44.4k
0
votes
2
answers
123
views
What does '101' reputation (on many sites) means in profiles of some high rep users?
Let me explain a bit what I am trying to ask. So I am giving links of profiles of two high rep users. For example, two of our mods.
schroeder's profile
He is member of 22 sites but as you can see, ...
- 177
-3
votes
2
answers
165
views
Moderator deleted my answer without good reason
@AndrolGenhald suggested I ask this here.
My answer here was deleted for the reason that "this is covered by other answers". First of all, its obviously not a duplicate answer, but it also contains ...
- 197
2
votes
5
answers
542
views
Information Security's updated site theme is live!
UPDATE - We've pushed this live for everyone now. Thanks to those who took the time to give feedback. Please do know, being live doesn't mean we can't address further changes for you! Write an answer ...
- 101
-4
votes
1
answer
65
views
I want to start bounty for a question [closed]
I asked the following question Does removing a GUI from a server make it less vulnerable?
But I don't get enough reputation as I expected, once I start a bounty and I did get a reputation as I paid, ...
- 1,627
2
votes
1
answer
65
views
Questions are no longer being accepted
Right now Information Security is no longer accepting questions from my account. Is there a way to override this or am I screwed?
16
votes
1
answer
879
views
Write-ups: Teaser Dragon CTF 2018: Sa, 29 Sept. 2018, 12:00 UTC — So, 30 Sept. 2018, 12:00 UTC, lasts 24 hours
Let's participate in the Dragon CTF 2018 Teaser!
The CTF runs Sa, 29 Sept. 2018, 12:00 UTC — So, 30 Sept. 2018, 12:00 UTC.
You can find additional details on the CTFtime event page. Links to ...
- 7,945
-2
votes
2
answers
87
views
Answers with the potential to cause harm
The scenario:
A dangerously incorrect answer contains advice that has the potential to cause harm. The danger is missed, misunderstood or underestimated by some members and the answer receives some ...
