As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [discussion]

The question you're asking is designed to solicit opinions or best-practices on a particular topic, with the goal of reaching community consensus.

Filter by
Sorted by
Tagged with
9 votes
1 answer
135 views

How could we make it easier to find common questions and duplicate targets?

Like any SE site, we have typical recurring questions ("What's a secure password pattern?", "What can my employer see if I use HTTPS?", etc.). But sometimes it's hard to discover the right duplicate ...
Arminius's user avatar
  • 44.4k
11 votes
1 answer
199 views

Are [ssl-interception] and [tls-intercept] the same thing?

The following tags looks like duplicates to me: ssl-interception (62 questions) SSL Interception is a technique that can be used to intercept SSL sessions in order to inspect the encrypted traffic....
Anders's user avatar
  • 65.1k
6 votes
3 answers
369 views

We have more users who vote lots but don't ever really post. How can we fix it?

While looking at some user statistics on SEDE I noticed a disturbing trend: the average downvote on Security SE comes from users with much less contribution on this site compared to other SE sites. ...
Cody P's user avatar
  • 1,148
-6 votes
2 answers
67 views

Is there a way to upload a virus to find out what it does?

Is there anywhere on the stackexchange network we can upload a (new) virus to have it analyzed? I just received an extremely legitimate looking email which had a link to a .zip file which had ...
JohnD's user avatar
  • 431
12 votes
1 answer
281 views

Canonical question for "where should I store my server side secrets"?

There are lots of questions about where/how to store encryption keyes, peppers, authentication tokens and what not on a server. They usually get half hearted answers or get closed as duplicate of some ...
Anders's user avatar
  • 65.1k
2 votes
7 answers
110 views

Community Promotion Ads - 2018 [duplicate]

It's almost February in 2018, which isn't supposed to be the proper time to cycle these, but for this year it'll be once again, so we'll be refreshing the Community Promotion Ads for this year now! ...
Grace Note's user avatar
  • 101
6 votes
1 answer
99 views

Is adding data on behalf of the original author fine?

Q: Entropy on native memorable password on macosX keychain The author of the question seems to be happy with my answer, yet she or he added some calculations based on my answer to his question and ...
ximaera's user avatar
  • 3,445
0 votes
2 answers
45 views

Question about resources for development in scope?

I want to ask question explaining my project which is based on information security and ask for advises and resources to learn from. Is it in scope or will be closed ?
Rahul's user avatar
  • 383
3 votes
1 answer
36 views

Tags inquiry : [tag:known-vulnerabilities] and [tag:vulnerability]

I was wondering if there was a reason to keep known-vulnerabilities and vulnerability distinct. known-vulnerabilities A vulnerability which is known to the designers, implementers, or operators ...
M'vy's user avatar
  • 13k
9 votes
1 answer
170 views

User rolls back all edits to his question -- leave it alone?

I can understand that users might feel a little defensive about their posts and not understand edits that are made to it. In the case of this question, the OP has rolled back edits to his question ...
David's user avatar
  • 16k
2 votes
1 answer
79 views

Rename [csrf] → [cross-site-request-forgery]

I would like to propose renaming the csrf tag to cross-site-request-forgery. a cross site request forgery attack causes a visitor of a malicious website to send a request to a legit website to ...
Stevoisiak's user avatar
  • 1,535
1 vote
1 answer
44 views

Why is this question a bad one?

How difficult is it to determine whether an account got hacked or why do games allow account recovery while refusing to lift bans for hackers' deeds? Ppl want to close this question as off-topic. ...
gaazkam's user avatar
  • 5,667
-3 votes
3 answers
126 views

New tag request: Insecurity-Questions and Security-Questions

I propose that we have new tags for insecurity-questions with a synonym of security-questions to be used for questions about those annoying favorite-pet or mother-maiden-name kind of questions that ...
NH.'s user avatar
  • 1,014
16 votes
1 answer
266 views

Let's see if we can reduce the number of Unanswered Questions before New Year!

We currently have over 3500 unanswered questions on Security.SE. Whether or not you are after some hats for Winterbash, or just want to find some posts you could provide answers to and gain rep, ...
Rory Alsop's user avatar
  • 61.5k
15 votes
3 answers
598 views

How to deal with popular questions that get filled with wrong answers?

I believe this is related to Are the wrong questions and answers getting too many upvotes?. I am wondering what should be done when a popular question is getting answers that are downright incorrect, ...
forest's user avatar
  • 65.8k
-2 votes
1 answer
40 views

Are questions about literature in this site's scope?

Can we ask questions that are a little more theoretical, about where to found scientific articles, or about literature in information security? Will they be accepted by the community? I would like ...
jonathasborges1's user avatar
10 votes
2 answers
246 views

Where do we want to stand on GDPR questions?

I know that GDPR does not technically introduce any new controls that do not already exist in other existing regulations, but where do we want to draw the boundaries, if any, on GDPR questions? We ...
schroeder's user avatar
  • 127k
-3 votes
1 answer
31 views

Ask about bandwidth consumption tracking is on-topic or off-topic?

I would like know if ask about bandwidth consumption tracking does part content of community
jonathasborges1's user avatar
1 vote
1 answer
39 views

Impediment of new questions

After I asked my first question, it was put [on hold], this is ok, but when I was trying to ask another one, the "Post Your Question" button did not work, nothing happened. Is it normal to be unable ...
jonathasborges1's user avatar
1 vote
1 answer
46 views

Is this cross-posting?

I realize cross-posting is frowned upon, and that's not my intent. The other question is concerned with specifics of creating a business application. I'm more interested with the security theory ...
user8675309's user avatar
1 vote
1 answer
43 views

Would security.stackexchange.com be a good place to ask this question

I had earlier posted this question to superuser. Got a comment suggesting that I ask the question here. What I want to know is, where can I find trusted and open (in the foss sense) security reviews ...
kapad's user avatar
  • 101
14 votes
2 answers
304 views

Can we redirect all pattern- or trick- based password selection policies to the same wakeup call post?

It seems like there will be no end of Can I use this dumb trick to generate my password? questions. They basically all suffer from the same wrong approach, that ignores Kerckhoffs' Principle, refuses ...
NH.'s user avatar
  • 1,014
5 votes
2 answers
396 views

I Misunderstood the question and answered the completely wrong question: should I delete?

Here is the answer: https://security.stackexchange.com/a/172951/149676 After the user updated his question, it became clear that I completely misunderstood. He was asking about email validation on ...
Conor Mancone's user avatar
-9 votes
4 answers
186 views

Being repeatedly targeted and harassed with disputable/arbitrary deletions of answers by a specific moderator

There's a specific moderator who keeps following me around on this forum and unilaterally deleting my useful answers, writing them off as "rants" within minutes of posting with no consideration of the ...
user1258361's user avatar
6 votes
1 answer
140 views

Recent surge in low quality Kali-questions / canonical answer?

Given that there are recently popping up a lot of questions exhibiting poor understanding of unix basics that seem to be about Kali Linux and then are about reading error messages of any arbitrary ...
Tobi Nary's user avatar
  • 14.4k
1 vote
1 answer
43 views

Is [evil-twin] an evil twin of [rogue-ap]?

I suspect these two tags might be duplicates? rogue-ap: Three questions, all about "fake" copies of Wi-Fi access points. evil-twin: Seven questions, all about "fake" copies of Wi-Fi access points (...
Anders's user avatar
  • 65.1k
5 votes
1 answer
130 views

Is not having an answer publicly available a good reason to close a question?

I asked this question, which was put [on hold] with the following comment: I'm voting to close this question as off-topic because only the internal dev teams of these products can speak to their ...
oɔɯǝɹ's user avatar
  • 548
1 vote
0 answers
48 views

OP's name not a link in some places on the page

I was looking at this question, and noticed that the OP's name in the comments is inconsistent (the style of the name, not the name itself). OP has two comments on the top answer which are displayed ...
Lord Farquaad's user avatar
1 vote
1 answer
69 views

We may all be paranoid - but for real reasons, not [advanced-delusionary-schizophrenia]

As a (not bad) joke, the following tags were added to the now deleted question at https://security.stackexchange.com/questions/172515/traffic-being-routed-to-uk-ministry-of-defense advanced-...
Numeron's user avatar
  • 2,485
10 votes
0 answers
190 views

Where do all the oracle 11g Qs come from?

It seems like in the last weeks, a lot of low quality questions regarding Oracle 11g are popping up where most users asking them show scriptkiddie understanding of the matter at most. Here are some ...
Tobi Nary's user avatar
  • 14.4k
1 vote
1 answer
24 views

Do questions about YARA rules syntax belong here?

A few weeks ago I had a question related to YARA rules syntax where YARA was used in VirusTotal. I asked it here first, because YARA is a tool made firstly for security researchers, and got no replies....
skooog's user avatar
  • 1,008
2 votes
0 answers
49 views

Burninate the [comments] tag?

The comments tag has only been used once to ask a question about social networks comments for botnet C&C. I can't think of a reason why comments should have their own tag. Since comments are ...
A. Darwin's user avatar
  • 3,592
16 votes
2 answers
203 views

Can we kill the [data-security] tag?

There is a data-security tag, with five questions: Data Security includes protecting data from unauthorized disclosure plus protecting the integrity of the data so it cannot be lost or altered ...
Anders's user avatar
  • 65.1k
11 votes
1 answer
110 views

What to do about [tag:nfc] and [tag:near-field-communication]?

Currently we have two tags for NFC: nfc, 44 questions and no excerpt near-field-communication, 27 questions and this excerpt: NFC is a short-range wireless technology, typically requiring a ...
Anders's user avatar
  • 65.1k
0 votes
1 answer
47 views

How to revive an old question

So let’s say I post a question and it doesn’t get answered, drifting into oblivion. Is there a way to pump some new life into it, or do I have to delete it and post it again?
Bashtheparty's user avatar
-3 votes
1 answer
89 views

Is trying to understand spammer behavior on topic?

I would like to ask a question "Why would spammers make fake accounts?", asking why spammers appear to be dedicated to making accounts on a site where accounts are private. Would a question like this ...
Goose's user avatar
  • 1,384
7 votes
2 answers
97 views

Can we authoritatively merge [certificates] and [x.509]?

We have a tag certificates and a pair of tags x509 and x.509. The latter two should obviously be synonyms. What about certificates? In theory X.509 could be about side topics such as CSR or CRL, but ...
Gilles 'SO- stop being evil''s user avatar
12 votes
1 answer
210 views

Re-opening the MathML Latex discussion

In August 2012, @Polynomial asked if we could get the MathML plugin enabled on this site. It allows the use of latex style markdown in questions, answers, and comments. Admittedly we have very few ...
Mike Ounsworth's user avatar
-2 votes
1 answer
337 views

Can I create a new question about recommended password length?

I was looking for a question on recommended password length for a typical usage case for users. Say, a good password length that would guard against realistic threats, like a password cracker with an ...
Cody P's user avatar
  • 1,148
0 votes
1 answer
30 views

Can I ask a question about a bash script I made

I have made a bash script to automate dirb and open the found directories in new tabs in firefox one by one, but it is does not work the way I want it to. Can I ask my problem in script over here ?
GypsyCosmonaut's user avatar
10 votes
0 answers
287 views

HackIT CTF 2017 | Fri, 25 Aug, 14:00 – Sun, 27 Aug, 14:00 UTC

Let's participate in the HackIT CTF 2017! HackIT is a Jeopardy-style CTF and lasts 48 hours with 100+ participating teams announced. You can find additional details on the CTFtime event page and ...
Arminius's user avatar
  • 44.4k
3 votes
1 answer
59 views

Why don't links made to questions from meta show up for meta users at the actual question?

I've noticed that often meta questions refer to specific questions and include links to them, asking 'is this question/answer junk?' for one reason or another. Wouldn't it make things easier if the ...
flerb's user avatar
  • 450
12 votes
1 answer
952 views

SHA2017 CTF | Sat, 05 Aug, 10:00 – Sun, 06 Aug, 22:00 UTC

Let's participate in the SHA2017 CTF! SHA2017 a Jeopardy-style CTF running in the context of the SHA2017 hacker camp and lasts 36 hours. There are currently 100+ participating teams announced on ...
Arminius's user avatar
  • 44.4k
11 votes
2 answers
273 views

"Re-asking" a well-established question with an established answer, because both question and answer are wrong and more discussion is needed

I ended up researching CSRF protection on Rest API endpoints, and whether or not they are required. This lead me to this old question: CSRF protection with custom headers (and without validating ...
Conor Mancone's user avatar
7 votes
1 answer
143 views

How to nicely incorporate a comment into your answer?

When answering questions, I often receive a comment that makes an important point which should be incorporated into the post. But I'm always a bit unsure how to credit the comment author. I've seen ...
Arminius's user avatar
  • 44.4k
3 votes
2 answers
56 views

Language ambiguities, flawed questions and technically correct answers combine to mislead?

Example: Is it possible to recreate a file using only its hash Here the question is clear. OP wants to "recreate" a file. Using only its hash and an algorithm. Logical Flaw: Wants to ignore the fact ...
Sas3's user avatar
  • 2,638
2 votes
1 answer
65 views

What constitutes a spammy product recommendation and what can be done to avoid it?

Disclaimer: My answer was removed as spam. So, what constitutes spam, and how can recommending software avoid being classified as spam? I can't find anything in help about what is viewed as spam. ...
flerb's user avatar
  • 450
15 votes
1 answer
148 views

Are closed questions valid Duplicate Targets?

When voting to close as duplicate, should I consider closed questions?
Mindwin Remember Monica's user avatar
1 vote
1 answer
76 views

May I use the logo here (on the top bar) with citation?

I really like the logo for this website and would like to use it as a profile picture for my SE account. I will cite the picture in my bio. Is that OK?
Christopher's user avatar
1 vote
1 answer
49 views

Marked as duplicate even if I explained that it was not a duplicate?

I posted this question here and of course got the eternal couple of comments suggesting that it was a duplicate. I clarified things saying that I asked a totally different question (namely, are the ...
Ryan B.'s user avatar
  • 101

1
3 4
5
6 7
18