Questions tagged [discussion]
The question you're asking is designed to solicit opinions or best-practices on a particular topic, with the goal of reaching community consensus.
897
questions
9
votes
1
answer
135
views
How could we make it easier to find common questions and duplicate targets?
Like any SE site, we have typical recurring questions ("What's a secure password pattern?", "What can my employer see if I use HTTPS?", etc.). But sometimes it's hard to discover the right duplicate ...
11
votes
1
answer
199
views
Are [ssl-interception] and [tls-intercept] the same thing?
The following tags looks like duplicates to me:
ssl-interception (62 questions)
SSL Interception is a technique that can be used to intercept SSL sessions in order to inspect the encrypted traffic....
6
votes
3
answers
369
views
We have more users who vote lots but don't ever really post. How can we fix it?
While looking at some user statistics on SEDE I noticed a disturbing trend: the average downvote on Security SE comes from users with much less contribution on this site compared to other SE sites. ...
-6
votes
2
answers
67
views
Is there a way to upload a virus to find out what it does?
Is there anywhere on the stackexchange network we can upload a (new) virus to have it analyzed? I just received an extremely legitimate looking email which had a link to a .zip file which had ...
12
votes
1
answer
281
views
Canonical question for "where should I store my server side secrets"?
There are lots of questions about where/how to store encryption keyes, peppers, authentication tokens and what not on a server. They usually get half hearted answers or get closed as duplicate of some ...
2
votes
7
answers
110
views
Community Promotion Ads - 2018 [duplicate]
It's almost February in 2018, which isn't supposed to be the proper time to cycle these, but for this year it'll be once again, so we'll be refreshing the Community Promotion Ads for this year now!
...
6
votes
1
answer
99
views
Is adding data on behalf of the original author fine?
Q: Entropy on native memorable password on macosX keychain
The author of the question seems to be happy with my answer, yet she or he added some calculations based on my answer to his question and ...
0
votes
2
answers
45
views
Question about resources for development in scope?
I want to ask question explaining my project which is based on information security and ask for advises and resources to learn from.
Is it in scope or will be closed ?
3
votes
1
answer
36
views
Tags inquiry : [tag:known-vulnerabilities] and [tag:vulnerability]
I was wondering if there was a reason to keep
known-vulnerabilities and vulnerability distinct.
known-vulnerabilities
A vulnerability which is known to the designers, implementers, or operators ...
9
votes
1
answer
170
views
User rolls back all edits to his question -- leave it alone?
I can understand that users might feel a little defensive about their posts and not understand edits that are made to it. In the case of this question, the OP has rolled back edits to his question ...
2
votes
1
answer
79
views
Rename [csrf] → [cross-site-request-forgery]
I would like to propose renaming the csrf tag to cross-site-request-forgery.
a cross site request forgery attack causes a visitor of a malicious website to send a request to a legit website to ...
1
vote
1
answer
44
views
Why is this question a bad one?
How difficult is it to determine whether an account got hacked or why do games allow account recovery while refusing to lift bans for hackers' deeds?
Ppl want to close this question as off-topic.
...
-3
votes
3
answers
126
views
New tag request: Insecurity-Questions and Security-Questions
I propose that we have new tags for insecurity-questions with a synonym of security-questions to be used for questions about those annoying favorite-pet or mother-maiden-name kind of questions that ...
16
votes
1
answer
266
views
Let's see if we can reduce the number of Unanswered Questions before New Year!
We currently have over 3500 unanswered questions on Security.SE.
Whether or not you are after some hats for Winterbash, or just want to find some posts you could provide answers to and gain rep, ...
15
votes
3
answers
598
views
How to deal with popular questions that get filled with wrong answers?
I believe this is related to Are the wrong questions and answers getting too many upvotes?.
I am wondering what should be done when a popular question is getting answers that are downright incorrect, ...
-2
votes
1
answer
40
views
Are questions about literature in this site's scope?
Can we ask questions that are a little more theoretical, about where to found scientific articles, or about literature in information security? Will they be accepted by the community?
I would like ...
10
votes
2
answers
246
views
Where do we want to stand on GDPR questions?
I know that GDPR does not technically introduce any new controls that do not already exist in other existing regulations, but where do we want to draw the boundaries, if any, on GDPR questions?
We ...
-3
votes
1
answer
31
views
Ask about bandwidth consumption tracking is on-topic or off-topic?
I would like know if ask about bandwidth consumption tracking does part content of community
1
vote
1
answer
39
views
Impediment of new questions
After I asked my first question, it was put [on hold], this is ok, but when I was trying to ask another one, the "Post Your Question" button did not work, nothing happened.
Is it normal to be unable ...
1
vote
1
answer
46
views
Is this cross-posting?
I realize cross-posting is frowned upon, and that's not my intent. The other question is concerned with specifics of creating a business application. I'm more interested with the security theory ...
1
vote
1
answer
43
views
Would security.stackexchange.com be a good place to ask this question
I had earlier posted this question to superuser. Got a comment suggesting that I ask the question here.
What I want to know is, where can I find trusted and open (in the foss sense) security reviews ...
14
votes
2
answers
304
views
Can we redirect all pattern- or trick- based password selection policies to the same wakeup call post?
It seems like there will be no end of Can I use this dumb trick to generate my password? questions.
They basically all suffer from the same wrong approach, that ignores Kerckhoffs' Principle, refuses ...
5
votes
2
answers
396
views
I Misunderstood the question and answered the completely wrong question: should I delete?
Here is the answer:
https://security.stackexchange.com/a/172951/149676
After the user updated his question, it became clear that I completely misunderstood. He was asking about email validation on ...
-9
votes
4
answers
186
views
Being repeatedly targeted and harassed with disputable/arbitrary deletions of answers by a specific moderator
There's a specific moderator who keeps following me around on this forum and unilaterally deleting my useful answers, writing them off as "rants" within minutes of posting with no consideration of the ...
6
votes
1
answer
140
views
Recent surge in low quality Kali-questions / canonical answer?
Given that there are recently popping up a lot of questions exhibiting poor understanding of unix basics that seem to be about Kali Linux and then are about reading error messages of any arbitrary ...
1
vote
1
answer
43
views
Is [evil-twin] an evil twin of [rogue-ap]?
I suspect these two tags might be duplicates?
rogue-ap: Three questions, all about "fake" copies of Wi-Fi access points.
evil-twin: Seven questions, all about "fake" copies of Wi-Fi access points (...
5
votes
1
answer
130
views
Is not having an answer publicly available a good reason to close a question?
I asked this question, which was put [on hold] with the following comment:
I'm voting to close this question as off-topic because only the internal dev teams of these products can speak to their ...
1
vote
0
answers
48
views
OP's name not a link in some places on the page
I was looking at this question, and noticed that the OP's name in the comments is inconsistent (the style of the name, not the name itself).
OP has two comments on the top answer which are displayed ...
1
vote
1
answer
69
views
We may all be paranoid - but for real reasons, not [advanced-delusionary-schizophrenia]
As a (not bad) joke, the following tags were added to the now deleted question at https://security.stackexchange.com/questions/172515/traffic-being-routed-to-uk-ministry-of-defense
advanced-...
10
votes
0
answers
190
views
Where do all the oracle 11g Qs come from?
It seems like in the last weeks, a lot of low quality questions regarding Oracle 11g are popping up where most users asking them show scriptkiddie understanding of the matter at most.
Here are some ...
1
vote
1
answer
24
views
Do questions about YARA rules syntax belong here?
A few weeks ago I had a question related to YARA rules syntax where YARA was used in VirusTotal. I asked it here first, because YARA is a tool made firstly for security researchers, and got no replies....
2
votes
0
answers
49
views
Burninate the [comments] tag?
The comments tag has only been used once to ask a question about social networks comments for botnet C&C. I can't think of a reason why comments should have their own tag. Since comments are ...
16
votes
2
answers
203
views
Can we kill the [data-security] tag?
There is a data-security tag, with five questions:
Data Security includes protecting data from unauthorized disclosure plus protecting the integrity of the data so it cannot be lost or altered ...
11
votes
1
answer
110
views
What to do about [tag:nfc] and [tag:near-field-communication]?
Currently we have two tags for NFC:
nfc, 44 questions and no excerpt
near-field-communication, 27 questions and this excerpt:
NFC is a short-range wireless technology, typically requiring a ...
0
votes
1
answer
47
views
How to revive an old question
So let’s say I post a question and it doesn’t get answered, drifting into oblivion.
Is there a way to pump some new life into it, or do I have to delete it and post it again?
-3
votes
1
answer
89
views
Is trying to understand spammer behavior on topic?
I would like to ask a question "Why would spammers make fake accounts?", asking why spammers appear to be dedicated to making accounts on a site where accounts are private.
Would a question like this ...
7
votes
2
answers
97
views
Can we authoritatively merge [certificates] and [x.509]?
We have a tag certificates and a pair of tags x509 and x.509. The latter two should obviously be synonyms. What about certificates?
In theory X.509 could be about side topics such as CSR or CRL, but ...
12
votes
1
answer
210
views
Re-opening the MathML Latex discussion
In August 2012, @Polynomial asked if we could get the MathML plugin enabled on this site. It allows the use of latex style markdown in questions, answers, and comments.
Admittedly we have very few ...
-2
votes
1
answer
337
views
Can I create a new question about recommended password length?
I was looking for a question on recommended password length for a typical usage case for users. Say, a good password length that would guard against realistic threats, like a password cracker with an ...
0
votes
1
answer
30
views
Can I ask a question about a bash script I made
I have made a bash script to automate dirb and open the found directories in new tabs in firefox one by one, but it is does not work the way I want it to. Can I ask my problem in script over here ?
10
votes
0
answers
287
views
HackIT CTF 2017 | Fri, 25 Aug, 14:00 – Sun, 27 Aug, 14:00 UTC
Let's participate in the HackIT CTF 2017!
HackIT is a Jeopardy-style CTF and lasts 48 hours with 100+ participating teams announced. You can find additional details on the CTFtime event page and ...
3
votes
1
answer
59
views
Why don't links made to questions from meta show up for meta users at the actual question?
I've noticed that often meta questions refer to specific questions and include links to them, asking 'is this question/answer junk?' for one reason or another. Wouldn't it make things easier if the ...
12
votes
1
answer
952
views
SHA2017 CTF | Sat, 05 Aug, 10:00 – Sun, 06 Aug, 22:00 UTC
Let's participate in the SHA2017 CTF!
SHA2017 a Jeopardy-style CTF running in the context of the SHA2017 hacker camp and lasts 36 hours. There are currently 100+ participating teams announced on ...
11
votes
2
answers
273
views
"Re-asking" a well-established question with an established answer, because both question and answer are wrong and more discussion is needed
I ended up researching CSRF protection on Rest API endpoints, and whether or not they are required. This lead me to this old question:
CSRF protection with custom headers (and without validating ...
7
votes
1
answer
143
views
How to nicely incorporate a comment into your answer?
When answering questions, I often receive a comment that makes an important point which should be incorporated into the post.
But I'm always a bit unsure how to credit the comment author. I've seen ...
3
votes
2
answers
56
views
Language ambiguities, flawed questions and technically correct answers combine to mislead?
Example: Is it possible to recreate a file using only its hash
Here the question is clear. OP wants to "recreate" a file. Using only its hash and an algorithm.
Logical Flaw: Wants to ignore the fact ...
2
votes
1
answer
65
views
What constitutes a spammy product recommendation and what can be done to avoid it?
Disclaimer: My answer was removed as spam. So, what constitutes spam, and how can recommending software avoid being classified as spam? I can't find anything in
help
about what is viewed as spam.
...
15
votes
1
answer
148
views
Are closed questions valid Duplicate Targets?
When voting to close as duplicate, should I consider closed questions?
1
vote
1
answer
76
views
May I use the logo here (on the top bar) with citation?
I really like the logo for this website and would like to use it as a profile picture for my SE account. I will cite the picture in my bio. Is that OK?
1
vote
1
answer
49
views
Marked as duplicate even if I explained that it was not a duplicate?
I posted this question here and of course got the eternal couple of comments suggesting that it was a duplicate. I clarified things saying that I asked a totally different question (namely, are the ...