All Questions

Filter by
Sorted by
Tagged with
1
vote
1answer
60 views

Is this question SPAM?

I get the feeling this question is only asked to place a lot of links. I cannot read czech but it seems to me that many of the links are commercial ones. The user has only asked this question and ...
0
votes
1answer
31 views

Is a question on how to evaluate anomalies in SOC reports on topic for this site?

I work in InfoSec as an IT auditor and have asked this question on The Workplace SE site some weeks back on how to evaluate anomalies in SOC 2 audit reports. Despite me editing it several times, I am ...
17
votes
1answer
201 views

Do we need to disclose affiliation in every answer?

Since I've worked at PortSwigger support I've answered questions relating to Burp on here. Someone commented that affiliation should be declared. Doing this on every question seems a bit unnecessary ...
6
votes
0answers
162 views

Pragyan CTF 2018, 2 March 2018 at 07:30 UTC, lasts 48 hours

Let's participate in Pragyan CTF 2018. Pragyan CTF is a Jeopardy-style CTF and lasts 48 hours. Challenges are from a range of categories like Cryptography, Web, Forensics, Steganography, Reverse ...
-3
votes
2answers
45 views

Appeal for my closed question

My question was closed for a reason, but I have since then edited the question and added an answer, that I consider quite valuable. So I wanted to give it a last chance of getting the spotlight before ...
5
votes
2answers
86 views

Limit the [owasp] and [owasp-top-ten] tags?

We have the following two tags: owasp, 142 questions owasp-top-ten, 57 questions Questions tagged with one or both of these falls in a number of categories: They are about OWASP products, e.g. Zap. ...
11
votes
1answer
258 views

NeverLAN CTF 2018, 23 February 2018 at 19:00 UTC, lasts 77 hours

Let's participate in NeverLAN CTF 2018. NeverLAN CTF is a Jeopardy-style CTF and lasts 77 hours. You can find additional details on the CTFtime event page and study the write-ups of the 2017 edition ...
6
votes
0answers
117 views

Xiomara CTF 2018, 23 February 2018 at 17:00 UTC, lasts 24 hours

Let's participate in Xiomara CTF 2018. Xiomara is a Jeopardy-style CTF and lasts 24 hours. You can find additional details on the CTFtime event page and study the write-ups of the 2017 edition here. ...
1
vote
2answers
84 views

Unregistered users and accepted answers

More than half of the answers I have with many positive votes that are not accepted are answers to questions made by unregistered users. While I am not disputing the general conclusion from here (...
46
votes
8answers
952 views

Request for comment: Stack Overflow is hiring a Director of Information Security

This is a bit unorthodox, but also extra meta: we (Stack Overflow, the folks behind this here site), are looking to hire our first Director of Information Security and I'd appreciate any feedback you ...
9
votes
1answer
128 views

How could we make it easier to find common questions and duplicate targets?

Like any SE site, we have typical recurring questions ("What's a secure password pattern?", "What can my employer see if I use HTTPS?", etc.). But sometimes it's hard to discover the right duplicate ...
10
votes
1answer
151 views

Are [ssl-interception] and [tls-intercept] the same thing?

The following tags looks like duplicates to me: ssl-interception (62 questions) SSL Interception is a technique that can be used to intercept SSL sessions in order to inspect the encrypted traffic....
5
votes
3answers
350 views

We have more users who vote lots but don't ever really post. How can we fix it?

While looking at some user statistics on SEDE I noticed a disturbing trend: the average downvote on Security SE comes from users with much less contribution on this site compared to other SE sites. ...
-6
votes
2answers
64 views

Is there a way to upload a virus to find out what it does?

Is there anywhere on the stackexchange network we can upload a (new) virus to have it analyzed? I just received an extremely legitimate looking email which had a link to a .zip file which had ...
2
votes
1answer
39 views

Bounty not awarded?

For reference, this is the question, in well, question. The originally poster of the question created the bounty about a week ago. I quickly saw it and put some effort into the answer since a.) I ...
13
votes
1answer
270 views

Canonical question for “where should I store my server side secrets”?

There are lots of questions about where/how to store encryption keyes, peppers, authentication tokens and what not on a server. They usually get half hearted answers or get closed as duplicate of some ...
2
votes
7answers
107 views

Community Promotion Ads - 2018 [duplicate]

It's almost February in 2018, which isn't supposed to be the proper time to cycle these, but for this year it'll be once again, so we'll be refreshing the Community Promotion Ads for this year now! ...
3
votes
1answer
24 views

Can't give bounty for a question when having enough rep points and after deleting my own answer

I can't give bounty for this question when having enough rep points and after deleting my own answer to it... I tried to fully refresh the browser after deleting the answer (CTRL+F5), after much time ...
6
votes
1answer
93 views

Is adding data on behalf of the original author fine?

Q: Entropy on native memorable password on macosX keychain The author of the question seems to be happy with my answer, yet she or he added some calculations based on my answer to his question and ...
0
votes
2answers
44 views

Question about resources for development in scope?

I want to ask question explaining my project which is based on information security and ask for advises and resources to learn from. Is it in scope or will be closed ?
2
votes
1answer
34 views

Tags inquiry : [tag:known-vulnerabilities] and [tag:vulnerability]

I was wondering if there was a reason to keep known-vulnerabilities and vulnerability distinct. known-vulnerabilities A vulnerability which is known to the designers, implementers, or operators ...
9
votes
1answer
167 views

User rolls back all edits to his question — leave it alone?

I can understand that users might feel a little defensive about their posts and not understand edits that are made to it. In the case of this question, the OP has rolled back edits to his question ...
1
vote
1answer
71 views

Rename [csrf] → [cross-site-request-forgery]

I would like to propose renaming the csrf tag to cross-site-request-forgery. a cross site request forgery attack causes a visitor of a malicious website to send a request to a legit website to ...
1
vote
1answer
44 views

Why is this question a bad one?

How difficult is it to determine whether an account got hacked or why do games allow account recovery while refusing to lift bans for hackers' deeds? Ppl want to close this question as off-topic. ...
-3
votes
3answers
122 views

New tag request: Insecurity-Questions and Security-Questions

I propose that we have new tags for insecurity-questions with a synonym of security-questions to be used for questions about those annoying favorite-pet or mother-maiden-name kind of questions that ...
16
votes
1answer
259 views

Let's see if we can reduce the number of Unanswered Questions before New Year!

We currently have over 3500 unanswered questions on Security.SE. Whether or not you are after some hats for Winterbash, or just want to find some posts you could provide answers to and gain rep, ...
2
votes
0answers
76 views

Sec.SE is difficult to navigate with SVG disabled

I use Tor for browsing the internet. Tor comes with a Firefox-based browser specifically designed to enhance security and anonymity. One of its features is the security slider, which has three presets ...
16
votes
3answers
522 views

How to deal with popular questions that get filled with wrong answers?

I believe this is related to Are the wrong questions and answers getting too many upvotes?. I am wondering what should be done when a popular question is getting answers that are downright incorrect, ...
-2
votes
1answer
40 views

Are questions about literature in this site's scope?

Can we ask questions that are a little more theoretical, about where to found scientific articles, or about literature in information security? Will they be accepted by the community? I would like ...
10
votes
2answers
237 views

Where do we want to stand on GDPR questions?

I know that GDPR does not technically introduce any new controls that do not already exist in other existing regulations, but where do we want to draw the boundaries, if any, on GDPR questions? We ...
-3
votes
1answer
31 views

Ask about bandwidth consumption tracking is on-topic or off-topic?

I would like know if ask about bandwidth consumption tracking does part content of community
1
vote
1answer
39 views

Impediment of new questions

After I asked my first question, it was put [on hold], this is ok, but when I was trying to ask another one, the "Post Your Question" button did not work, nothing happened. Is it normal to be unable ...
2
votes
1answer
54 views

Active bounty advertisement bug

The active bounty community advertisement seems to be broken, displaying 2 bounty for a total of 550 rep, when the featured page shows 4 for a total of 700 rep
1
vote
1answer
41 views

Is this cross-posting?

I realize cross-posting is frowned upon, and that's not my intent. The other question is concerned with specifics of creating a business application. I'm more interested with the security theory ...
1
vote
1answer
41 views

Would security.stackexchange.com be a good place to ask this question

I had earlier posted this question to superuser. Got a comment suggesting that I ask the question here. What I want to know is, where can I find trusted and open (in the foss sense) security reviews ...
14
votes
2answers
292 views

Can we redirect all pattern- or trick- based password selection policies to the same wakeup call post?

It seems like there will be no end of Can I use this dumb trick to generate my password? questions. They basically all suffer from the same wrong approach, that ignores Kerckhoffs' Principle, refuses ...
5
votes
2answers
264 views

I Misunderstood the question and answered the completely wrong question: should I delete?

Here is the answer: https://security.stackexchange.com/a/172951/149676 After the user updated his question, it became clear that I completely misunderstood. He was asking about email validation on ...
-9
votes
4answers
158 views

Being repeatedly targeted and harassed with disputable/arbitrary deletions of answers by a specific moderator

There's a specific moderator who keeps following me around on this forum and unilaterally deleting my useful answers, writing them off as "rants" within minutes of posting with no consideration of the ...
6
votes
1answer
126 views

Recent surge in low quality Kali-questions / canonical answer?

Given that there are recently popping up a lot of questions exhibiting poor understanding of unix basics that seem to be about Kali Linux and then are about reading error messages of any arbitrary ...
1
vote
1answer
40 views

Is [evil-twin] an evil twin of [rogue-ap]?

I suspect these two tags might be duplicates? rogue-ap: Three questions, all about "fake" copies of Wi-Fi access points. evil-twin: Seven questions, all about "fake" copies of Wi-Fi access points (...
5
votes
1answer
117 views

Is not having an answer publicly available a good reason to close a question?

I asked this question, which was put [on hold] with the following comment: I'm voting to close this question as off-topic because only the internal dev teams of these products can speak to their ...
1
vote
0answers
48 views

OP's name not a link in some places on the page

I was looking at this question, and noticed that the OP's name in the comments is inconsistent (the style of the name, not the name itself). OP has two comments on the top answer which are displayed ...
1
vote
1answer
63 views

We may all be paranoid - but for real reasons, not [advanced-delusionary-schizophrenia]

As a (not bad) joke, the following tags were added to the now deleted question at https://security.stackexchange.com/questions/172515/traffic-being-routed-to-uk-ministry-of-defense advanced-...
11
votes
0answers
187 views

Where do all the oracle 11g Qs come from?

It seems like in the last weeks, a lot of low quality questions regarding Oracle 11g are popping up where most users asking them show scriptkiddie understanding of the matter at most. Here are some ...
1
vote
1answer
17 views

Do questions about YARA rules syntax belong here?

A few weeks ago I had a question related to YARA rules syntax where YARA was used in VirusTotal. I asked it here first, because YARA is a tool made firstly for security researchers, and got no replies....
2
votes
0answers
47 views

Burninate the [comments] tag?

The comments tag has only been used once to ask a question about social networks comments for botnet C&C. I can't think of a reason why comments should have their own tag. Since comments are ...
17
votes
2answers
196 views

Can we kill the [data-security] tag?

There is a data-security tag, with five questions: Data Security includes protecting data from unauthorized disclosure plus protecting the integrity of the data so it cannot be lost or altered ...
11
votes
1answer
108 views

What to do about [tag:nfc] and [tag:near-field-communication]?

Currently we have two tags for NFC: nfc, 44 questions and no excerpt near-field-communication, 27 questions and this excerpt: NFC is a short-range wireless technology, typically requiring a ...
0
votes
1answer
43 views

How to revive an old question

So let’s say I post a question and it doesn’t get answered, drifting into oblivion. Is there a way to pump some new life into it, or do I have to delete it and post it again?
2
votes
1answer
45 views

Username changed to Guid

Yesterday, after I posted a question, and replying in the comments, my username suddenly changed inti a Guid, while it was first nl-x. Now it suddenly is a25bedc5-3d09-41b8-82fb-ea6c353d75ae. Does ...

15 30 50 per page