Questions tagged [discussion]
The question you're asking is designed to solicit opinions or best-practices on a particular topic, with the goal of reaching community consensus.
Is this bordering on "helping you break the security of a system"?
This high-traffic question from two days ago, many comments and answers: How could a public DNS server return bad results? The question comes in two parts: How is the ISP achieving this? Are ...
Should we transcribe screenshots of text?
In this question: How a public dns server could return wrong results A good Samaritan user @Michael lovingly transcribed out the screenshot of a terminal in a suggested edit. Certainly text in a ...
Merge [checksum] and [hash]?
I propose that checksum be marked as a synonym of hash. Checksums are not always hashes, for example parity bits on network packets, but I think that for security purposes, people use "checksum" as a ...
New tag suggestion - OSINT
I find it curious that there aren't any tags for open source intelligence (OSINT) or even threat intelligence (TI). There do seem to be multiple questions that could make use of an OSINT tag, ...
Is banhammer the best way to handle link only answers?
I recently answered a question about a very specific piece of code the other day (PHP eval code sandbox break). Since I was on my mobile device I only posted a link rather than try to copy/format a ...
Tamper data in Chrome question closed
Tamper data Chrome not working Could you please explain to me how a question about an extension, used for tampering data by many of security experts, is not related to a QA site on Information ...
When is it appropriate to unprotect a question?
I have enough rep to protect and unprotect questions. Sometimes I come across a question that has been protected years ago, and I believe it should no longer be protected. In these cases, when should ...
Is this joke answer really an answer?
This answer on the Bypass MAC address internet time filtering question seems to be a joke answer, half-answering the question using specific terminology (re: timing attack, side channel attack). ...
Should I restrain from excessive using of headers in my answers?
Normally I use the "Smaller Subheader" formatting to make my paragraphs easier to read. To my opinion, it works like a summary and helps readers to get the main idea by a quick glance. This is how my ...
Are mods have been assigned a specific job in moderating the site?
I am member of sec.se for about 8-9 months and since we have 3 mods schroeder , Rory Alosp and AviD . But what I observed generally is that schroeder is highly active on main site, Rory Alosp is ...
How to identify if a question is a security / cryptography / reverse engineering question?
Sometimes I have doubts while asking question or answering question, if the question is really about information security. Especially when they seem as a cryptography or malware analysis, or computer ...
Writeup: Meepwn CTF Quals 2018: starts 13 July 19:00 UTC — ends 15 July 2018, 19:00 UTC, lasts 48 hours
Let's participate in the Meepwn CTF Qualifier 2018! The CTF runs Fr, 13 July 2018, 19:00 UTC — Sun, 15 July 2018, 19:00 UTC. You can find additional details on the CTFtime event page. Links to ...
Congratulations to our third 100k member of Sec.SE (first human member...)
Congratulations to Steffen Ullrich who has just passed 100k! Like the Great and Little Bears before him, this is no small feat! With over 2000 answers, one with 431 upvotes, and four with over 100 ...
Can we get InfoSec Ex hoodies?
This has probably already been asked and I don't know how possible this is, but... Can we get InfoSec Ex hoodies? I know StackEx used to have a shop a long time ago and it closed due to the reasons ...
Reputation cap and Process of applying cap
I've noticed there is a reputation cap of 200 per day max. Let's assume a question/answer gaining reputation more than 200 in a day, then believe the cap will limit the reputation to 200. And let's ...
Is this type of behaviour acceptable?
A question appeared on the site this afternoon which is explicitly off-topic for the site as per the scope. All that question would do is cause opinionated answers and comments filled to the brim with ...
Upvoting answers on opinion-based questions?
TL;DR - Should answers to opinion-based questions be upvoted? Afternoon, I am a little concerned with the number of off-topic questions that slip through currently, obviously, this is a growing ...
InfoSec Ex Badges
One thing I've wondered since I've started contributing here is - how come the badges (That being the bronze, silver & gold) don't feature the lion as per the official logo? I realise there ...
Concern: Can users post any image or link while asking questions on site?
It's a serious concern that while asking questions anybody can post any link or image(may be malicious). What would happen if any user open that malicious link or image file? So my question is : Is ...
Should we have a canonical question tag?
I posted a canonical question and was wondering why there wasn't a tag for canonical questions? Shouldn't we have a tag for this? Right now the only way to know for sure that the question is intended ...
Is it acceptable to ask for software recommendations?
I'm searching for an Online Password Manager to move all my passwords to, and I'd like to ask to the community their choices and preferences. Is it acceptable to ask for the "top" Password Managers, ...
What to do if OP edits their question from a different account?
In the edit review queue, I sometimes encounter edits by someone who writes as if they were the OP, or even claim to be the OP, even though they are using a different account. The OP account is ...
How should questions be handled that are part on-topic and part off-topic?
If I encounter a question in the Review Queue for Close Votes that is partly off-topic and partly on-topic, how should I proceed? Vote to close? Leave Open? Suggest edits to the author to make it on-...
Write-ups: DEF CON CTF 2018 qualifiers: starts 12 May 00:00 UTC, lasts 48 hours
Let's participate in the DEF CON CTF Qualifier 2018! The CTF runs Sat, 12 May 2018, 00:00 UTC — Mon, 14 May 2018, 00:00 UTC. You can find additional details on the CTFtime event page. Links to ...
Writeups: PlaidCTF 2018 - Sat, 05 May 2018 at 04:00 UTC, lasts for 36 hours
Let's participate at PlaidCTF 2018! The CTF will begin on Sat, 05 May 2018 at 04:00 UTC, and end on Sun, 06 May 2018 at 16:00 UTC (that's 36 hours). PlaidCTF is a yearly CTF run by Plaid Parliament ...
What to do about the [fingerprint] tags?
We have a number of different concepts related to "fingerprints" on this site: Physical fingerprints, e.g. for use in biometric authentication. Fingerprinting software (and hardware?), i.e. trying to ...
Spam, spam, [spammer] and [spam]
We currently have two tags for spam: spam, 316 questions spammer, 17 question While I understand the difference between the person who sends the spam and the spam itself, that is not a meaningful ...
Undeletion followed by lock -- communication denied
I deleted this answer over a year ago, for reasons I do not remember. I assume it was due to some hostility in the comments, but I don't know anymore. (The comments had been moved to chat, and ...
Should we recommend deletion of a low quality post if it has a comment suggesting how to improve it?
Sorry, I wasn't able to frame the question in a short and easy to understand format. I see that there are posts like this in the review queue. They are marked as low quality posts and have comments ...
WPICTF 2018, Fri 13 April 2018 at 19:00 UTC, lasts 48 hours
Let's participate in WPICTF 2018. WPICTF is a Jeopardy-style CTF and lasts 48 hours. According to their website: The CTF should be "beginner friendly". Most challenges were made by WPI students, so ...
Soften "how to ask" restrictions for CTF write-ups and allow them on main site
While I was writing this, it became to clear me, that I'm not even sure if CTF write-ups are off-topic or prohibited on the main site or if there was ever an agreement to post them here on Meta. If it'...
Is this Q as fishy as it looks to me?
I am talking about Image upload vulnerability checking in php script How do we know that this is really OP`s server? Do we support such questions at all?
What is our definition of an IT Professional?
I recently came across this answer: What should you do if you catch encryption ransomware mid-operation? And instantly had an issue with the choice of words: We are professionals and will help you ...
What did happen to my suggested edit?
Yesterday, I saw a post containing BS words. So, I suggested an edit with these words removed and appropriate words used. Here is the link for that suggested edit. And here is the link of that post. ...
Would questions about fictional encyption processes be on-topic here?
I was considering asking a question about designing an encryption process for a science fiction/alternative history piece that I'm working on, but I'm not too sure if it would belong here or on ...
Write-ups: SwampCTF 2018, Thu 29 March 2018 at 22:00 UTC, lasts 48 hours
Let's participate in SwampCTF 2018. SwampCTF is a Jeopardy-style CTF and lasts 48 hours. Challenges are from a range of categories like Cryptography, Forensics, Reverse Engineering, Binary ...
Is it OK to ask about experiences where users were targeted?
I recently read about the distinction between generic vs targeted attacks, where generic attacks are ones where an attacker casts a wide net and makes a catch, while targeted attacks are those that ...
Handling "how can I do [absurdly dangerous thing]" from someone missing a lot of background knowledge?
There's a question currently about doing something rather dangerous (running PHP code, though possibly trusted), and the asker appears to be missing a lot of background knowledge (e.g., referring to "...
Merge [polp] and [least-privilege]?
These two tags looks like duplicates to me: least-privilege: 3 questions, no wiki polp: 1 question, good wiki I think the general rule is to avoid abbreviations in tag names unless they are more ...
Are all "Is this a phishing mail?" questions off topic or just a duplicate to this question?
The help center defines questions on phishing as on topic here and I personally would agree to that, if this follows the same logic as given by AviD here. Quote from AviD: If the question is based ...
Is this question SPAM?
I get the feeling this question is only asked to place a lot of links. I cannot read czech but it seems to me that many of the links are commercial ones. The user has only asked this question and ...
Is a question on how to evaluate anomalies in SOC reports on topic for this site?
I work in InfoSec as an IT auditor and have asked this question on The Workplace SE site some weeks back on how to evaluate anomalies in SOC 2 audit reports. Despite me editing it several times, I am ...
Do we need to disclose affiliation in every answer?
Since I've worked at PortSwigger support I've answered questions relating to Burp on here. Someone commented that affiliation should be declared. Doing this on every question seems a bit unnecessary ...
Pragyan CTF 2018, 2 March 2018 at 07:30 UTC, lasts 48 hours
Let's participate in Pragyan CTF 2018. Pragyan CTF is a Jeopardy-style CTF and lasts 48 hours. Challenges are from a range of categories like Cryptography, Web, Forensics, Steganography, Reverse ...
Appeal for my closed question
My question was closed for a reason, but I have since then edited the question and added an answer, that I consider quite valuable. So I wanted to give it a last chance of getting the spotlight before ...
Limit the [owasp] and [owasp-top-ten] tags?
We have the following two tags: owasp, 142 questions owasp-top-ten, 57 questions Questions tagged with one or both of these falls in a number of categories: They are about OWASP products, e.g. Zap. ...
NeverLAN CTF 2018, 23 February 2018 at 19:00 UTC, lasts 77 hours
Let's participate in NeverLAN CTF 2018. NeverLAN CTF is a Jeopardy-style CTF and lasts 77 hours. You can find additional details on the CTFtime event page and study the write-ups of the 2017 edition ...
Xiomara CTF 2018, 23 February 2018 at 17:00 UTC, lasts 24 hours
Let's participate in Xiomara CTF 2018. Xiomara is a Jeopardy-style CTF and lasts 24 hours. You can find additional details on the CTFtime event page and study the write-ups of the 2017 edition here. ...
Unregistered users and accepted answers
More than half of the answers I have with many positive votes that are not accepted are answers to questions made by unregistered users. While I am not disputing the general conclusion from here (...
Request for comment: Stack Overflow is hiring a Director of Information Security
This is a bit unorthodox, but also extra meta: we (Stack Overflow, the folks behind this here site), are looking to hire our first Director of Information Security and I'd appreciate any feedback you ...