All Questions

Filter by
Sorted by
Tagged with
3
votes
2answers
81 views

Concern: Can users post any image or link while asking questions on site?

It's a serious concern that while asking questions anybody can post any link or image(may be malicious). What would happen if any user open that malicious link or image file? So my question is : Is ...
1
vote
1answer
54 views

Should we have a canonical question tag?

I posted a canonical question and was wondering why there wasn't a tag for canonical questions? Shouldn't we have a tag for this? Right now the only way to know for sure that the question is intended ...
2
votes
2answers
65 views

Is it acceptable to ask for software recommendations?

I'm searching for an Online Password Manager to move all my passwords to, and I'd like to ask to the community their choices and preferences. Is it acceptable to ask for the "top" Password Managers, ...
5
votes
1answer
107 views

What to do if OP edits their question from a different account?

In the edit review queue, I sometimes encounter edits by someone who writes as if they were the OP, or even claim to be the OP, even though they are using a different account. The OP account is ...
7
votes
2answers
129 views

How should questions be handled that are part on-topic and part off-topic?

If I encounter a question in the Review Queue for Close Votes that is partly off-topic and partly on-topic, how should I proceed? Vote to close? Leave Open? Suggest edits to the author to make it on-...
2
votes
1answer
43 views

What caused this post to bump to the front page?

I was browsing the front page and this post showed up as "Modified 1 hour ago". I almost replied thinking it was an active post, but it's from 2016 and there doesn't seem to be anything new on it. ...
9
votes
5answers
561 views

Write-ups: DEF CON CTF 2018 qualifiers: starts 12 May 00:00 UTC, lasts 48 hours

Let's participate in the DEF CON CTF Qualifier 2018! The CTF runs Sat, 12 May 2018, 00:00 UTC — Mon, 14 May 2018, 00:00 UTC. You can find additional details on the CTFtime event page. Links to ...
9
votes
3answers
242 views

Writeups: PlaidCTF 2018 - Sat, 05 May 2018 at 04:00 UTC, lasts for 36 hours

Let's participate at PlaidCTF 2018! The CTF will begin on Sat, 05 May 2018 at 04:00 UTC, and end on Sun, 06 May 2018 at 16:00 UTC (that's 36 hours). PlaidCTF is a yearly CTF run by Plaid Parliament ...
5
votes
2answers
157 views

What to do about the [fingerprint] tags?

We have a number of different concepts related to "fingerprints" on this site: Physical fingerprints, e.g. for use in biometric authentication. Fingerprinting software (and hardware?), i.e. trying to ...
5
votes
1answer
39 views

How to migrate to Ask Ubuntu?

There's a new question which is asking how to run sudo ./some-script.sh on Ubuntu. It's off-topic here, but Ask Ubuntu seems like a perfect fit. However, when I go to flag it for a close vote, I don'...
19
votes
1answer
216 views

Spam, spam, [spammer] and [spam]

We currently have two tags for spam: spam, 316 questions spammer, 17 question While I understand the difference between the person who sends the spam and the spam itself, that is not a meaningful ...
6
votes
1answer
153 views

Undeletion followed by lock — communication denied

I deleted this answer over a year ago, for reasons I do not remember. I assume it was due to some hostility in the comments, but I don't know anymore. (The comments had been moved to chat, and ...
6
votes
2answers
159 views

Should we recommend deletion of a low quality post if it has a comment suggesting how to improve it?

Sorry, I wasn't able to frame the question in a short and easy to understand format. I see that there are posts like this in the review queue. They are marked as low quality posts and have comments ...
5
votes
0answers
195 views

WPICTF 2018, Fri 13 April 2018 at 19:00 UTC, lasts 48 hours

Let's participate in WPICTF 2018. WPICTF is a Jeopardy-style CTF and lasts 48 hours. According to their website: The CTF should be "beginner friendly". Most challenges were made by WPI students, so ...
-2
votes
1answer
71 views

Soften “how to ask” restrictions for CTF write-ups and allow them on main site

While I was writing this, it became to clear me, that I'm not even sure if CTF write-ups are off-topic or prohibited on the main site or if there was ever an agreement to post them here on Meta. If it'...
1
vote
2answers
110 views

Is this Q as fishy as it looks to me?

I am talking about Image upload vulnerability checking in php script How do we know that this is really OP`s server? Do we support such questions at all?
-5
votes
2answers
167 views

What is our definition of an IT Professional?

I recently came across this answer: What should you do if you catch encryption ransomware mid-operation? And instantly had an issue with the choice of words: We are professionals and will help you ...
4
votes
1answer
157 views

What did happen to my suggested edit?

Yesterday, I saw a post containing BS words. So, I suggested an edit with these words removed and appropriate words used. Here is the link for that suggested edit. And here is the link of that post. ...
1
vote
2answers
68 views

Would questions about fictional encyption processes be on-topic here?

I was considering asking a question about designing an encryption process for a science fiction/alternative history piece that I'm working on, but I'm not too sure if it would belong here or on ...
4
votes
1answer
148 views

What is up with these answers? Are these all the same people?

A question was asked by a new user two hours ago asking if the strange SMS he received was evidence of the DoD attacking him (the message was of an IP address which is linked to the DoD, along with a ...
9
votes
5answers
374 views

Write-ups: SwampCTF 2018, Thu 29 March 2018 at 22:00 UTC, lasts 48 hours

Let's participate in SwampCTF 2018. SwampCTF is a Jeopardy-style CTF and lasts 48 hours. Challenges are from a range of categories like Cryptography, Forensics, Reverse Engineering, Binary ...
0
votes
1answer
37 views

Is it OK to ask about experiences where users were targeted?

I recently read about the distinction between generic vs targeted attacks, where generic attacks are ones where an attacker casts a wide net and makes a catch, while targeted attacks are those that ...
2
votes
1answer
43 views

Why was this post auto-flagged?

https://security.stackexchange.com/review/low-quality-posts/116392 It says it was flagged because of length and content, but I doubt that: the post has seven downvotes (fairly unusual here) and the ...
15
votes
3answers
348 views

Handling “how can I do [absurdly dangerous thing]” from someone missing a lot of background knowledge?

There's a question currently about doing something rather dangerous (running PHP code, though possibly trusted), and the asker appears to be missing a lot of background knowledge (e.g., referring to "...
4
votes
1answer
67 views

Merge [polp] and [least-privilege]?

These two tags looks like duplicates to me: least-privilege: 3 questions, no wiki polp: 1 question, good wiki I think the general rule is to avoid abbreviations in tag names unless they are more ...
4
votes
1answer
65 views

Why is the accepted answer only sometimes at the top?

From what I remember, Sec.SE sorts answers based on the net vote score. If an answer is accepted, it is moved to the top automatically. In fact a question I asked became a hot network question. I ...
4
votes
1answer
44 views

Is the security.SE blog still alive or not? Is BlogOverflow itself dead?

It looks like there is a Security blog with great articles, but it has a banner at the top that says it is an archive. When you click on the banner, however, the About page it leads to has nothing to ...
5
votes
2answers
156 views

Are all “Is this a phishing mail?” questions off topic or just a duplicate to this question?

The help center defines questions on phishing as on topic here and I personally would agree to that, if this follows the same logic as given by AviD here. Quote from AviD: If the question is based ...
1
vote
1answer
60 views

Is this question SPAM?

I get the feeling this question is only asked to place a lot of links. I cannot read czech but it seems to me that many of the links are commercial ones. The user has only asked this question and ...
0
votes
1answer
32 views

Is a question on how to evaluate anomalies in SOC reports on topic for this site?

I work in InfoSec as an IT auditor and have asked this question on The Workplace SE site some weeks back on how to evaluate anomalies in SOC 2 audit reports. Despite me editing it several times, I am ...
17
votes
1answer
203 views

Do we need to disclose affiliation in every answer?

Since I've worked at PortSwigger support I've answered questions relating to Burp on here. Someone commented that affiliation should be declared. Doing this on every question seems a bit unnecessary ...
6
votes
0answers
163 views

Pragyan CTF 2018, 2 March 2018 at 07:30 UTC, lasts 48 hours

Let's participate in Pragyan CTF 2018. Pragyan CTF is a Jeopardy-style CTF and lasts 48 hours. Challenges are from a range of categories like Cryptography, Web, Forensics, Steganography, Reverse ...
-3
votes
2answers
46 views

Appeal for my closed question

My question was closed for a reason, but I have since then edited the question and added an answer, that I consider quite valuable. So I wanted to give it a last chance of getting the spotlight before ...
5
votes
2answers
87 views

Limit the [owasp] and [owasp-top-ten] tags?

We have the following two tags: owasp, 142 questions owasp-top-ten, 57 questions Questions tagged with one or both of these falls in a number of categories: They are about OWASP products, e.g. Zap. ...
11
votes
1answer
265 views

NeverLAN CTF 2018, 23 February 2018 at 19:00 UTC, lasts 77 hours

Let's participate in NeverLAN CTF 2018. NeverLAN CTF is a Jeopardy-style CTF and lasts 77 hours. You can find additional details on the CTFtime event page and study the write-ups of the 2017 edition ...
6
votes
0answers
117 views

Xiomara CTF 2018, 23 February 2018 at 17:00 UTC, lasts 24 hours

Let's participate in Xiomara CTF 2018. Xiomara is a Jeopardy-style CTF and lasts 24 hours. You can find additional details on the CTFtime event page and study the write-ups of the 2017 edition here. ...
1
vote
2answers
86 views

Unregistered users and accepted answers

More than half of the answers I have with many positive votes that are not accepted are answers to questions made by unregistered users. While I am not disputing the general conclusion from here (...
46
votes
8answers
964 views

Request for comment: Stack Overflow is hiring a Director of Information Security

This is a bit unorthodox, but also extra meta: we (Stack Overflow, the folks behind this here site), are looking to hire our first Director of Information Security and I'd appreciate any feedback you ...
9
votes
1answer
128 views

How could we make it easier to find common questions and duplicate targets?

Like any SE site, we have typical recurring questions ("What's a secure password pattern?", "What can my employer see if I use HTTPS?", etc.). But sometimes it's hard to discover the right duplicate ...
11
votes
1answer
168 views

Are [ssl-interception] and [tls-intercept] the same thing?

The following tags looks like duplicates to me: ssl-interception (62 questions) SSL Interception is a technique that can be used to intercept SSL sessions in order to inspect the encrypted traffic....
5
votes
3answers
352 views

We have more users who vote lots but don't ever really post. How can we fix it?

While looking at some user statistics on SEDE I noticed a disturbing trend: the average downvote on Security SE comes from users with much less contribution on this site compared to other SE sites. ...
-6
votes
2answers
66 views

Is there a way to upload a virus to find out what it does?

Is there anywhere on the stackexchange network we can upload a (new) virus to have it analyzed? I just received an extremely legitimate looking email which had a link to a .zip file which had ...
2
votes
1answer
39 views

Bounty not awarded?

For reference, this is the question, in well, question. The originally poster of the question created the bounty about a week ago. I quickly saw it and put some effort into the answer since a.) I ...
13
votes
1answer
275 views

Canonical question for “where should I store my server side secrets”?

There are lots of questions about where/how to store encryption keyes, peppers, authentication tokens and what not on a server. They usually get half hearted answers or get closed as duplicate of some ...
2
votes
7answers
109 views

Community Promotion Ads - 2018 [duplicate]

It's almost February in 2018, which isn't supposed to be the proper time to cycle these, but for this year it'll be once again, so we'll be refreshing the Community Promotion Ads for this year now! ...
3
votes
1answer
24 views

Can't give bounty for a question when having enough rep points and after deleting my own answer

I can't give bounty for this question when having enough rep points and after deleting my own answer to it... I tried to fully refresh the browser after deleting the answer (CTRL+F5), after much time ...
6
votes
1answer
93 views

Is adding data on behalf of the original author fine?

Q: Entropy on native memorable password on macosX keychain The author of the question seems to be happy with my answer, yet she or he added some calculations based on my answer to his question and ...
0
votes
2answers
44 views

Question about resources for development in scope?

I want to ask question explaining my project which is based on information security and ask for advises and resources to learn from. Is it in scope or will be closed ?
2
votes
1answer
34 views

Tags inquiry : [tag:known-vulnerabilities] and [tag:vulnerability]

I was wondering if there was a reason to keep known-vulnerabilities and vulnerability distinct. known-vulnerabilities A vulnerability which is known to the designers, implementers, or operators ...
9
votes
1answer
167 views

User rolls back all edits to his question — leave it alone?

I can understand that users might feel a little defensive about their posts and not understand edits that are made to it. In the case of this question, the OP has rolled back edits to his question ...

15 30 50 per page
1 2 3
4
5
22