As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [discussion]

The question you're asking is designed to solicit opinions or best-practices on a particular topic, with the goal of reaching community consensus.

Filter by
Sorted by
Tagged with
4 votes
2 answers
331 views

Is this bordering on "helping you break the security of a system"?

This high-traffic question from two days ago, many comments and answers: How could a public DNS server return bad results? The question comes in two parts: How is the ISP achieving this? Are ...
Mike Ounsworth's user avatar
13 votes
2 answers
173 views

Should we transcribe screenshots of text?

In this question: How a public dns server could return wrong results A good Samaritan user @Michael lovingly transcribed out the screenshot of a terminal in a suggested edit. Certainly text in a ...
Mike Ounsworth's user avatar
2 votes
3 answers
205 views

Merge [checksum] and [hash]?

I propose that checksum be marked as a synonym of hash. Checksums are not always hashes, for example parity bits on network packets, but I think that for security purposes, people use "checksum" as a ...
Mike Ounsworth's user avatar
8 votes
0 answers
114 views

New tag suggestion - OSINT

I find it curious that there aren't any tags for open source intelligence (OSINT) or even threat intelligence (TI). There do seem to be multiple questions that could make use of an OSINT tag, ...
freginold's user avatar
  • 165
4 votes
2 answers
122 views

Is banhammer the best way to handle link only answers?

I recently answered a question about a very specific piece of code the other day (PHP eval code sandbox break). Since I was on my mobile device I only posted a link rather than try to copy/format a ...
wireghoul's user avatar
  • 5,809
-2 votes
1 answer
175 views

Tamper data in Chrome question closed

Tamper data Chrome not working Could you please explain to me how a question about an extension, used for tampering data by many of security experts, is not related to a QA site on Information ...
bonugoso's user avatar
9 votes
1 answer
113 views

When is it appropriate to unprotect a question?

I have enough rep to protect and unprotect questions. Sometimes I come across a question that has been protected years ago, and I believe it should no longer be protected. In these cases, when should ...
forest's user avatar
  • 65.8k
4 votes
1 answer
377 views

Is this joke answer really an answer?

This answer on the Bypass MAC address internet time filtering question seems to be a joke answer, half-answering the question using specific terminology (re: timing attack, side channel attack). ...
Chris Cirefice's user avatar
3 votes
2 answers
84 views

Should I restrain from excessive using of headers in my answers?

Normally I use the "Smaller Subheader" formatting to make my paragraphs easier to read. To my opinion, it works like a summary and helps readers to get the main idea by a quick glance. This is how my ...
enkryptor's user avatar
  • 313
1 vote
3 answers
73 views

Are mods have been assigned a specific job in moderating the site?

I am member of sec.se for about 8-9 months and since we have 3 mods schroeder , Rory Alosp and AviD . But what I observed generally is that schroeder is highly active on main site, Rory Alosp is ...
daya's user avatar
  • 177
2 votes
1 answer
35 views

How to identify if a question is a security / cryptography / reverse engineering question?

Sometimes I have doubts while asking question or answering question, if the question is really about information security. Especially when they seem as a cryptography or malware analysis, or computer ...
Pilfility's user avatar
  • 462
8 votes
2 answers
287 views

Writeup: Meepwn CTF Quals 2018: starts 13 July 19:00 UTC — ends 15 July 2018, 19:00 UTC, lasts 48 hours

Let's participate in the Meepwn CTF Qualifier 2018! The CTF runs Fr, 13 July 2018, 19:00 UTC — Sun, 15 July 2018, 19:00 UTC. You can find additional details on the CTFtime event page. Links to ...
Tom K.'s user avatar
  • 7,945
41 votes
0 answers
497 views

Congratulations to our third 100k member of Sec.SE (first human member...)

Congratulations to Steffen Ullrich who has just passed 100k! Like the Great and Little Bears before him, this is no small feat! With over 2000 answers, one with 431 upvotes, and four with over 100 ...
Rory Alsop's user avatar
  • 61.5k
7 votes
1 answer
179 views

Can we get InfoSec Ex hoodies?

This has probably already been asked and I don't know how possible this is, but... Can we get InfoSec Ex hoodies? I know StackEx used to have a shop a long time ago and it closed due to the reasons ...
user avatar
0 votes
1 answer
54 views

Reputation cap and Process of applying cap

I've noticed there is a reputation cap of 200 per day max. Let's assume a question/answer gaining reputation more than 200 in a day, then believe the cap will limit the reputation to 200. And let's ...
Sayan's user avatar
  • 2,033
14 votes
1 answer
536 views

Is this type of behaviour acceptable?

A question appeared on the site this afternoon which is explicitly off-topic for the site as per the scope. All that question would do is cause opinionated answers and comments filled to the brim with ...
user avatar
0 votes
0 answers
47 views

Upvoting answers on opinion-based questions?

TL;DR - Should answers to opinion-based questions be upvoted? Afternoon, I am a little concerned with the number of off-topic questions that slip through currently, obviously, this is a growing ...
user avatar
9 votes
1 answer
196 views

InfoSec Ex Badges

One thing I've wondered since I've started contributing here is - how come the badges (That being the bronze, silver & gold) don't feature the lion as per the official logo? I realise there ...
user avatar
3 votes
2 answers
81 views

Concern: Can users post any image or link while asking questions on site?

It's a serious concern that while asking questions anybody can post any link or image(may be malicious). What would happen if any user open that malicious link or image file? So my question is : Is ...
daya's user avatar
  • 177
1 vote
1 answer
57 views

Should we have a canonical question tag?

I posted a canonical question and was wondering why there wasn't a tag for canonical questions? Shouldn't we have a tag for this? Right now the only way to know for sure that the question is intended ...
user avatar
2 votes
2 answers
65 views

Is it acceptable to ask for software recommendations?

I'm searching for an Online Password Manager to move all my passwords to, and I'd like to ask to the community their choices and preferences. Is it acceptable to ask for the "top" Password Managers, ...
Peanuts's user avatar
  • 385
5 votes
1 answer
112 views

What to do if OP edits their question from a different account?

In the edit review queue, I sometimes encounter edits by someone who writes as if they were the OP, or even claim to be the OP, even though they are using a different account. The OP account is ...
Anders's user avatar
  • 65.1k
6 votes
2 answers
139 views

How should questions be handled that are part on-topic and part off-topic?

If I encounter a question in the Review Queue for Close Votes that is partly off-topic and partly on-topic, how should I proceed? Vote to close? Leave Open? Suggest edits to the author to make it on-...
Tom K.'s user avatar
  • 7,945
9 votes
5 answers
649 views

Write-ups: DEF CON CTF 2018 qualifiers: starts 12 May 00:00 UTC, lasts 48 hours

Let's participate in the DEF CON CTF Qualifier 2018! The CTF runs Sat, 12 May 2018, 00:00 UTC — Mon, 14 May 2018, 00:00 UTC. You can find additional details on the CTFtime event page. Links to ...
Gilles 'SO- stop being evil''s user avatar
9 votes
3 answers
274 views

Writeups: PlaidCTF 2018 - Sat, 05 May 2018 at 04:00 UTC, lasts for 36 hours

Let's participate at PlaidCTF 2018! The CTF will begin on Sat, 05 May 2018 at 04:00 UTC, and end on Sun, 06 May 2018 at 16:00 UTC (that's 36 hours). PlaidCTF is a yearly CTF run by Plaid Parliament ...
thel3l's user avatar
  • 3,394
5 votes
2 answers
166 views

What to do about the [fingerprint] tags?

We have a number of different concepts related to "fingerprints" on this site: Physical fingerprints, e.g. for use in biometric authentication. Fingerprinting software (and hardware?), i.e. trying to ...
Anders's user avatar
  • 65.1k
19 votes
1 answer
224 views

Spam, spam, [spammer] and [spam]

We currently have two tags for spam: spam, 316 questions spammer, 17 question While I understand the difference between the person who sends the spam and the spam itself, that is not a meaningful ...
Anders's user avatar
  • 65.1k
6 votes
1 answer
158 views

Undeletion followed by lock -- communication denied

I deleted this answer over a year ago, for reasons I do not remember. I assume it was due to some hostility in the comments, but I don't know anymore. (The comments had been moved to chat, and ...
DevSolar's user avatar
  • 911
7 votes
2 answers
161 views

Should we recommend deletion of a low quality post if it has a comment suggesting how to improve it?

Sorry, I wasn't able to frame the question in a short and easy to understand format. I see that there are posts like this in the review queue. They are marked as low quality posts and have comments ...
Limit's user avatar
  • 3,256
7 votes
0 answers
206 views

WPICTF 2018, Fri 13 April 2018 at 19:00 UTC, lasts 48 hours

Let's participate in WPICTF 2018. WPICTF is a Jeopardy-style CTF and lasts 48 hours. According to their website: The CTF should be "beginner friendly". Most challenges were made by WPI students, so ...
HamZa's user avatar
  • 1,371
-2 votes
1 answer
80 views

Soften "how to ask" restrictions for CTF write-ups and allow them on main site

While I was writing this, it became to clear me, that I'm not even sure if CTF write-ups are off-topic or prohibited on the main site or if there was ever an agreement to post them here on Meta. If it'...
Tom K.'s user avatar
  • 7,945
1 vote
2 answers
119 views

Is this Q as fishy as it looks to me?

I am talking about Image upload vulnerability checking in php script How do we know that this is really OP`s server? Do we support such questions at all?
guntbert's user avatar
  • 1,893
-6 votes
2 answers
173 views

What is our definition of an IT Professional?

I recently came across this answer: What should you do if you catch encryption ransomware mid-operation? And instantly had an issue with the choice of words: We are professionals and will help you ...
Stephen King's user avatar
5 votes
1 answer
159 views

What did happen to my suggested edit?

Yesterday, I saw a post containing BS words. So, I suggested an edit with these words removed and appropriate words used. Here is the link for that suggested edit. And here is the link of that post. ...
A J's user avatar
  • 175
1 vote
2 answers
71 views

Would questions about fictional encyption processes be on-topic here?

I was considering asking a question about designing an encryption process for a science fiction/alternative history piece that I'm working on, but I'm not too sure if it would belong here or on ...
Philip Rowlands's user avatar
10 votes
5 answers
400 views

Write-ups: SwampCTF 2018, Thu 29 March 2018 at 22:00 UTC, lasts 48 hours

Let's participate in SwampCTF 2018. SwampCTF is a Jeopardy-style CTF and lasts 48 hours. Challenges are from a range of categories like Cryptography, Forensics, Reverse Engineering, Binary ...
HamZa's user avatar
  • 1,371
0 votes
1 answer
37 views

Is it OK to ask about experiences where users were targeted?

I recently read about the distinction between generic vs targeted attacks, where generic attacks are ones where an attacker casts a wide net and makes a catch, while targeted attacks are those that ...
user avatar
15 votes
3 answers
355 views

Handling "how can I do [absurdly dangerous thing]" from someone missing a lot of background knowledge?

There's a question currently about doing something rather dangerous (running PHP code, though possibly trusted), and the asker appears to be missing a lot of background knowledge (e.g., referring to "...
Soron's user avatar
  • 2,809
4 votes
1 answer
73 views

Merge [polp] and [least-privilege]?

These two tags looks like duplicates to me: least-privilege: 3 questions, no wiki polp: 1 question, good wiki I think the general rule is to avoid abbreviations in tag names unless they are more ...
Anders's user avatar
  • 65.1k
5 votes
2 answers
159 views

Are all "Is this a phishing mail?" questions off topic or just a duplicate to this question?

The help center defines questions on phishing as on topic here and I personally would agree to that, if this follows the same logic as given by AviD here. Quote from AviD: If the question is based ...
Tom K.'s user avatar
  • 7,945
1 vote
1 answer
62 views

Is this question SPAM?

I get the feeling this question is only asked to place a lot of links. I cannot read czech but it seems to me that many of the links are commercial ones. The user has only asked this question and ...
allo's user avatar
  • 3,372
0 votes
1 answer
32 views

Is a question on how to evaluate anomalies in SOC reports on topic for this site?

I work in InfoSec as an IT auditor and have asked this question on The Workplace SE site some weeks back on how to evaluate anomalies in SOC 2 audit reports. Despite me editing it several times, I am ...
Anthony's user avatar
  • 1,766
18 votes
1 answer
239 views

Do we need to disclose affiliation in every answer?

Since I've worked at PortSwigger support I've answered questions relating to Burp on here. Someone commented that affiliation should be declared. Doing this on every question seems a bit unnecessary ...
PortSwigger's user avatar
7 votes
0 answers
170 views

Pragyan CTF 2018, 2 March 2018 at 07:30 UTC, lasts 48 hours

Let's participate in Pragyan CTF 2018. Pragyan CTF is a Jeopardy-style CTF and lasts 48 hours. Challenges are from a range of categories like Cryptography, Web, Forensics, Steganography, Reverse ...
Benoit Esnard's user avatar
-3 votes
2 answers
46 views

Appeal for my closed question

My question was closed for a reason, but I have since then edited the question and added an answer, that I consider quite valuable. So I wanted to give it a last chance of getting the spotlight before ...
michelemarcon's user avatar
5 votes
2 answers
89 views

Limit the [owasp] and [owasp-top-ten] tags?

We have the following two tags: owasp, 142 questions owasp-top-ten, 57 questions Questions tagged with one or both of these falls in a number of categories: They are about OWASP products, e.g. Zap. ...
Anders's user avatar
  • 65.1k
11 votes
1 answer
284 views

NeverLAN CTF 2018, 23 February 2018 at 19:00 UTC, lasts 77 hours

Let's participate in NeverLAN CTF 2018. NeverLAN CTF is a Jeopardy-style CTF and lasts 77 hours. You can find additional details on the CTFtime event page and study the write-ups of the 2017 edition ...
Benoit Esnard's user avatar
6 votes
0 answers
123 views

Xiomara CTF 2018, 23 February 2018 at 17:00 UTC, lasts 24 hours

Let's participate in Xiomara CTF 2018. Xiomara is a Jeopardy-style CTF and lasts 24 hours. You can find additional details on the CTFtime event page and study the write-ups of the 2017 edition here. ...
Benoit Esnard's user avatar
2 votes
2 answers
97 views

Unregistered users and accepted answers

More than half of the answers I have with many positive votes that are not accepted are answers to questions made by unregistered users. While I am not disputing the general conclusion from here (...
forest's user avatar
  • 65.8k
47 votes
8 answers
1k views

Request for comment: Stack Overflow is hiring a Director of Information Security

This is a bit unorthodox, but also extra meta: we (Stack Overflow, the folks behind this here site), are looking to hire our first Director of Information Security and I'd appreciate any feedback you ...
David Fullerton's user avatar

1 2 3
4
5
18