Questions tagged [discussion]

The question you're asking is designed to solicit opinions or best-practices on a particular topic, with the goal of reaching community consensus.

Filter by
Sorted by
Tagged with
4
votes
1answer
157 views

What did happen to my suggested edit?

Yesterday, I saw a post containing BS words. So, I suggested an edit with these words removed and appropriate words used. Here is the link for that suggested edit. And here is the link of that post. ...
1
vote
2answers
68 views

Would questions about fictional encyption processes be on-topic here?

I was considering asking a question about designing an encryption process for a science fiction/alternative history piece that I'm working on, but I'm not too sure if it would belong here or on ...
9
votes
5answers
388 views

Write-ups: SwampCTF 2018, Thu 29 March 2018 at 22:00 UTC, lasts 48 hours

Let's participate in SwampCTF 2018. SwampCTF is a Jeopardy-style CTF and lasts 48 hours. Challenges are from a range of categories like Cryptography, Forensics, Reverse Engineering, Binary ...
0
votes
1answer
37 views

Is it OK to ask about experiences where users were targeted?

I recently read about the distinction between generic vs targeted attacks, where generic attacks are ones where an attacker casts a wide net and makes a catch, while targeted attacks are those that ...
15
votes
3answers
348 views

Handling “how can I do [absurdly dangerous thing]” from someone missing a lot of background knowledge?

There's a question currently about doing something rather dangerous (running PHP code, though possibly trusted), and the asker appears to be missing a lot of background knowledge (e.g., referring to "...
4
votes
1answer
68 views

Merge [polp] and [least-privilege]?

These two tags looks like duplicates to me: least-privilege: 3 questions, no wiki polp: 1 question, good wiki I think the general rule is to avoid abbreviations in tag names unless they are more ...
5
votes
2answers
156 views

Are all “Is this a phishing mail?” questions off topic or just a duplicate to this question?

The help center defines questions on phishing as on topic here and I personally would agree to that, if this follows the same logic as given by AviD here. Quote from AviD: If the question is based ...
1
vote
1answer
60 views

Is this question SPAM?

I get the feeling this question is only asked to place a lot of links. I cannot read czech but it seems to me that many of the links are commercial ones. The user has only asked this question and ...
0
votes
1answer
32 views

Is a question on how to evaluate anomalies in SOC reports on topic for this site?

I work in InfoSec as an IT auditor and have asked this question on The Workplace SE site some weeks back on how to evaluate anomalies in SOC 2 audit reports. Despite me editing it several times, I am ...
17
votes
1answer
209 views

Do we need to disclose affiliation in every answer?

Since I've worked at PortSwigger support I've answered questions relating to Burp on here. Someone commented that affiliation should be declared. Doing this on every question seems a bit unnecessary ...
6
votes
0answers
164 views

Pragyan CTF 2018, 2 March 2018 at 07:30 UTC, lasts 48 hours

Let's participate in Pragyan CTF 2018. Pragyan CTF is a Jeopardy-style CTF and lasts 48 hours. Challenges are from a range of categories like Cryptography, Web, Forensics, Steganography, Reverse ...
-3
votes
2answers
46 views

Appeal for my closed question

My question was closed for a reason, but I have since then edited the question and added an answer, that I consider quite valuable. So I wanted to give it a last chance of getting the spotlight before ...
5
votes
2answers
87 views

Limit the [owasp] and [owasp-top-ten] tags?

We have the following two tags: owasp, 142 questions owasp-top-ten, 57 questions Questions tagged with one or both of these falls in a number of categories: They are about OWASP products, e.g. Zap. ...
11
votes
1answer
270 views

NeverLAN CTF 2018, 23 February 2018 at 19:00 UTC, lasts 77 hours

Let's participate in NeverLAN CTF 2018. NeverLAN CTF is a Jeopardy-style CTF and lasts 77 hours. You can find additional details on the CTFtime event page and study the write-ups of the 2017 edition ...
6
votes
0answers
117 views

Xiomara CTF 2018, 23 February 2018 at 17:00 UTC, lasts 24 hours

Let's participate in Xiomara CTF 2018. Xiomara is a Jeopardy-style CTF and lasts 24 hours. You can find additional details on the CTFtime event page and study the write-ups of the 2017 edition here. ...
1
vote
2answers
89 views

Unregistered users and accepted answers

More than half of the answers I have with many positive votes that are not accepted are answers to questions made by unregistered users. While I am not disputing the general conclusion from here (...
46
votes
8answers
975 views

Request for comment: Stack Overflow is hiring a Director of Information Security

This is a bit unorthodox, but also extra meta: we (Stack Overflow, the folks behind this here site), are looking to hire our first Director of Information Security and I'd appreciate any feedback you ...
9
votes
1answer
128 views

How could we make it easier to find common questions and duplicate targets?

Like any SE site, we have typical recurring questions ("What's a secure password pattern?", "What can my employer see if I use HTTPS?", etc.). But sometimes it's hard to discover the right duplicate ...
11
votes
1answer
187 views

Are [ssl-interception] and [tls-intercept] the same thing?

The following tags looks like duplicates to me: ssl-interception (62 questions) SSL Interception is a technique that can be used to intercept SSL sessions in order to inspect the encrypted traffic....
6
votes
3answers
361 views

We have more users who vote lots but don't ever really post. How can we fix it?

While looking at some user statistics on SEDE I noticed a disturbing trend: the average downvote on Security SE comes from users with much less contribution on this site compared to other SE sites. ...
-6
votes
2answers
66 views

Is there a way to upload a virus to find out what it does?

Is there anywhere on the stackexchange network we can upload a (new) virus to have it analyzed? I just received an extremely legitimate looking email which had a link to a .zip file which had ...
13
votes
1answer
277 views

Canonical question for “where should I store my server side secrets”?

There are lots of questions about where/how to store encryption keyes, peppers, authentication tokens and what not on a server. They usually get half hearted answers or get closed as duplicate of some ...
2
votes
7answers
109 views

Community Promotion Ads - 2018 [duplicate]

It's almost February in 2018, which isn't supposed to be the proper time to cycle these, but for this year it'll be once again, so we'll be refreshing the Community Promotion Ads for this year now! ...
6
votes
1answer
93 views

Is adding data on behalf of the original author fine?

Q: Entropy on native memorable password on macosX keychain The author of the question seems to be happy with my answer, yet she or he added some calculations based on my answer to his question and ...
0
votes
2answers
45 views

Question about resources for development in scope?

I want to ask question explaining my project which is based on information security and ask for advises and resources to learn from. Is it in scope or will be closed ?
2
votes
1answer
35 views

Tags inquiry : [tag:known-vulnerabilities] and [tag:vulnerability]

I was wondering if there was a reason to keep known-vulnerabilities and vulnerability distinct. known-vulnerabilities A vulnerability which is known to the designers, implementers, or operators ...
9
votes
1answer
169 views

User rolls back all edits to his question — leave it alone?

I can understand that users might feel a little defensive about their posts and not understand edits that are made to it. In the case of this question, the OP has rolled back edits to his question ...
1
vote
1answer
72 views

Rename [csrf] → [cross-site-request-forgery]

I would like to propose renaming the csrf tag to cross-site-request-forgery. a cross site request forgery attack causes a visitor of a malicious website to send a request to a legit website to ...
1
vote
1answer
44 views

Why is this question a bad one?

How difficult is it to determine whether an account got hacked or why do games allow account recovery while refusing to lift bans for hackers' deeds? Ppl want to close this question as off-topic. ...
-3
votes
3answers
122 views

New tag request: Insecurity-Questions and Security-Questions

I propose that we have new tags for insecurity-questions with a synonym of security-questions to be used for questions about those annoying favorite-pet or mother-maiden-name kind of questions that ...
16
votes
1answer
259 views

Let's see if we can reduce the number of Unanswered Questions before New Year!

We currently have over 3500 unanswered questions on Security.SE. Whether or not you are after some hats for Winterbash, or just want to find some posts you could provide answers to and gain rep, ...
16
votes
3answers
558 views

How to deal with popular questions that get filled with wrong answers?

I believe this is related to Are the wrong questions and answers getting too many upvotes?. I am wondering what should be done when a popular question is getting answers that are downright incorrect, ...
-2
votes
1answer
40 views

Are questions about literature in this site's scope?

Can we ask questions that are a little more theoretical, about where to found scientific articles, or about literature in information security? Will they be accepted by the community? I would like ...
10
votes
2answers
240 views

Where do we want to stand on GDPR questions?

I know that GDPR does not technically introduce any new controls that do not already exist in other existing regulations, but where do we want to draw the boundaries, if any, on GDPR questions? We ...
-3
votes
1answer
31 views

Ask about bandwidth consumption tracking is on-topic or off-topic?

I would like know if ask about bandwidth consumption tracking does part content of community
1
vote
1answer
39 views

Impediment of new questions

After I asked my first question, it was put [on hold], this is ok, but when I was trying to ask another one, the "Post Your Question" button did not work, nothing happened. Is it normal to be unable ...
1
vote
1answer
43 views

Is this cross-posting?

I realize cross-posting is frowned upon, and that's not my intent. The other question is concerned with specifics of creating a business application. I'm more interested with the security theory ...
1
vote
1answer
42 views

Would security.stackexchange.com be a good place to ask this question

I had earlier posted this question to superuser. Got a comment suggesting that I ask the question here. What I want to know is, where can I find trusted and open (in the foss sense) security reviews ...
14
votes
2answers
297 views

Can we redirect all pattern- or trick- based password selection policies to the same wakeup call post?

It seems like there will be no end of Can I use this dumb trick to generate my password? questions. They basically all suffer from the same wrong approach, that ignores Kerckhoffs' Principle, refuses ...
5
votes
2answers
334 views

I Misunderstood the question and answered the completely wrong question: should I delete?

Here is the answer: https://security.stackexchange.com/a/172951/149676 After the user updated his question, it became clear that I completely misunderstood. He was asking about email validation on ...
-9
votes
4answers
171 views

Being repeatedly targeted and harassed with disputable/arbitrary deletions of answers by a specific moderator

There's a specific moderator who keeps following me around on this forum and unilaterally deleting my useful answers, writing them off as "rants" within minutes of posting with no consideration of the ...
6
votes
1answer
129 views

Recent surge in low quality Kali-questions / canonical answer?

Given that there are recently popping up a lot of questions exhibiting poor understanding of unix basics that seem to be about Kali Linux and then are about reading error messages of any arbitrary ...
1
vote
1answer
40 views

Is [evil-twin] an evil twin of [rogue-ap]?

I suspect these two tags might be duplicates? rogue-ap: Three questions, all about "fake" copies of Wi-Fi access points. evil-twin: Seven questions, all about "fake" copies of Wi-Fi access points (...
5
votes
1answer
120 views

Is not having an answer publicly available a good reason to close a question?

I asked this question, which was put [on hold] with the following comment: I'm voting to close this question as off-topic because only the internal dev teams of these products can speak to their ...
1
vote
0answers
48 views

OP's name not a link in some places on the page

I was looking at this question, and noticed that the OP's name in the comments is inconsistent (the style of the name, not the name itself). OP has two comments on the top answer which are displayed ...
1
vote
1answer
64 views

We may all be paranoid - but for real reasons, not [advanced-delusionary-schizophrenia]

As a (not bad) joke, the following tags were added to the now deleted question at https://security.stackexchange.com/questions/172515/traffic-being-routed-to-uk-ministry-of-defense advanced-...
10
votes
0answers
190 views

Where do all the oracle 11g Qs come from?

It seems like in the last weeks, a lot of low quality questions regarding Oracle 11g are popping up where most users asking them show scriptkiddie understanding of the matter at most. Here are some ...
1
vote
1answer
18 views

Do questions about YARA rules syntax belong here?

A few weeks ago I had a question related to YARA rules syntax where YARA was used in VirusTotal. I asked it here first, because YARA is a tool made firstly for security researchers, and got no replies....
2
votes
0answers
48 views

Burninate the [comments] tag?

The comments tag has only been used once to ask a question about social networks comments for botnet C&C. I can't think of a reason why comments should have their own tag. Since comments are ...
16
votes
2answers
198 views

Can we kill the [data-security] tag?

There is a data-security tag, with five questions: Data Security includes protecting data from unauthorized disclosure plus protecting the integrity of the data so it cannot be lost or altered ...

1 2 3
4
5
18