23 votes
Accepted

Too aggressive with "off-topic" comments?

This questions did strike me as especially hard over on SO, where new and/or low rep users regulary get downvoted and closed very fast. Over here on Sec.SE, because there is way less traffic, the ...
Tobi Nary's user avatar
  • 14.4k
21 votes

Too aggressive with "off-topic" comments?

I agree. I think this is mostly a problem with close votes on questions, but I just noticed this deleted answer: The author is the lead of the OWASP Zap Project - one of the more significant open ...
paj28's user avatar
  • 33.4k
15 votes
Accepted

Is it ok to ask questions here which can be found easily by searching on Google?

If it's the sort of thing that pops out as the first result when you do a google search using the exact terms in the question, and the answer describes exactly what is needed, then we aren't exactly ...
Rory Alsop's user avatar
  • 61.5k
11 votes

Asking for help with a security challenge

Hacking challenges, just like homework, are there for people to learn. And just like homework, we should help them with their thought-processes and not do it for them. The standard, "tell us what you ...
schroeder's user avatar
  • 129k
11 votes

Too aggressive with "off-topic" comments?

This is a huge topic, and a legitimate one. The question at the heart of "topic-ness" is the quality of posts. Too much noise in the questions means that the high contributing people we could be ...
schroeder's user avatar
  • 129k
10 votes
Accepted

What is wrong with my question?

We recently had a post here called “Is (x) Secure” Question Anti-Pattern. I don't really agree with it, but the consensus is: yes, it's an anti-pattern. The answers there can likely help you. ...
tim's user avatar
  • 29.6k
9 votes
Accepted

If a user (me) has a fundamental misunderstanding, shouldn't it be corrected?

In some cases, I would say yes, a misunderstanding should be corrected by an answer. In the case of fundamental misunderstandings, or false assumptions that form the basis of a question, we certainly ...
Xander's user avatar
  • 35.8k
9 votes

What is wrong with my question?

I think there are many qualitative differences between your Splikity question and the referenced Telegram question. Before going into specifics, let's keep in mind the tooltip that is displayed when ...
Neil Smithline's user avatar
9 votes
Accepted

Would this question be accepted here?

Unfortunately, questions asking for resources, links, sources, etc. are off-topic because the answers would just keep growing without end. They are "open-ended" by default.
schroeder's user avatar
  • 129k
7 votes

Would the IS site be an appropriate place to ask for help in deciding between a Masters in Cyber Security vs a CISSP certification?

This is the type of question that we get a lot of, and they tend to get closed as opinion-based. Unless there is a very specific, factual question you want to ask. Without knowing what your question ...
schroeder's user avatar
  • 129k
7 votes
Accepted

Are questions about lock security on-topic?

We simply do not get many physical security type questions here at all. But we do not want to ban them as a rule (there is useful overlap). I think that questions that could help people make ...
schroeder's user avatar
  • 129k
6 votes
Accepted

Can I ask for help with identifying malware?

This type of question could be on-topic, but I have yet to see one that actually is. The problem is that without the binaries, we would never have enough data to say much. With the binaries, you can ...
schroeder's user avatar
  • 129k
6 votes

Is this question about allowing SSLv3 on topic?

From my perspective, the question is off-topic. It is actually more of a SuperUser-type question, as the answers indicate that the solution is found in a browser config. So, I can see your confusion. ...
schroeder's user avatar
  • 129k
6 votes

Where do we want to stand on GDPR questions?

I'm in two minds on this. From my own perspective, working in a heavily regulated industry, I know it doesn't materially change any of our privacy related work - it just increases the level of ...
Rory Alsop's user avatar
  • 61.5k
6 votes

Moderator believes hardening Chrome ciphers is not about "security", not relevant here [post on hold]

We can help you answer which ciphers you should enable or disable based on your stated threat model, but we cannot help you answer the question of how to select them. This would apply regardless of ...
forest's user avatar
  • 66.6k
5 votes
Accepted

Would (parts of) this question be on-topic at security.se?

The question is about turning high-level security requirements into a concrete workflow. That's a pretty typical type of question for Security.SE. Although the study of security protocols is on-topic ...
Gilles 'SO- stop being evil''s user avatar
5 votes

Too aggressive with "off-topic" comments?

This one bugged me recently, it was not "off-topic" but "Duplicate" How could online encryption ever work? The poster seems new, mentioned https once in their question, then got hit with "why not ...
mgjk's user avatar
  • 7,525
5 votes

Why is this question a bad one?

The "difficulty" is entirely up to how the application was designed and what resources they have to analyse player behavior. That makes the question too broad and up to interpretation. One game will ...
schroeder's user avatar
  • 129k
5 votes
Accepted

Are opinion-based questions allowed on meta?

Meta is about asking about questions, it's not for asking off-topic questions. Questions need to be able to have a chance at a single acceptable answer that is also going to be useful to others. ...
schroeder's user avatar
  • 129k
5 votes

Can anyone look into wireshark logs and say if anything suspicious?

Depends on the question. In general, I would say: "Here's a traffic dump. Notice anything strange?" Will be closed as "needs focus". "Here's some relevant subset of trafic. I ...
Anders's user avatar
  • 65.6k
5 votes

Can anyone look into wireshark logs and say if anything suspicious?

We are not a code/site/log/packet dump analysis site. As you can imagine, we'd be flooded with random stuff to wade through.
schroeder's user avatar
  • 129k
4 votes
Accepted

Is there any way to refocus a question in the question list?

The preferred mechanism for this is the Bounty. Once you have enough rep you can set a bounty on your question (or other people's questions.) This highlights the question, and generates interest. ...
Rory Alsop's user avatar
  • 61.5k
4 votes

Is asking for leaked data on topic here?

I don't think asking for leaked document is in the spirit of this site. We are a Q&A site, aiming to help people solve security problem. We're not here to spread data, especially personal data, ...
M'vy's user avatar
  • 13k
4 votes

Can I ask this question about Cyber Weapons?

This would not be a good question here, no. Cyber weapon can describe anything in the information security attack space - so the list could be as long as you want (ie it fails our answerability test) ...
Rory Alsop's user avatar
  • 61.5k
4 votes
Accepted

Is "Which tool can do X?" off-topic?

"What product/service can do X?" is off-topic for being both recommendation and a call for lists. The potential answers can be endless and it can be difficult to have a single acceptable answer. ...
schroeder's user avatar
  • 129k
4 votes

Can I ask for a Solution Manual of an Information Security Textbook?

Asking for books/resources is off-topic. Asking for recommendations for products/services is also off-topic. It's not about the subject matter, but it's a quirk of us being a Q&A site.
schroeder's user avatar
  • 129k
4 votes

Which question guidelines exist on security stackexchange?

You only got one down vote on your sqlmap question, and two upvotes, so I would not use that as an example of "downvotes" There is a lot of guidance written - it's actually pretty extensive. We haven'...
Rory Alsop's user avatar
  • 61.5k
4 votes
Accepted

Is a question asking if old answers to same/similar question are still valid acceptable?

No. The whole point of the site is to provide authoritative answers. If the answers need to change, then new answers need to be added, not new questions added. That way, even the historically-correct-...
schroeder's user avatar
  • 129k
3 votes

Asking for help with a security challenge

I think it is a little more gray. There are some questions I've seen in the past that are straight from the OSCP. Cheating on the OSCP (or SANS, or ...) has major consequences. I avoid those questions ...
h4ckNinja's user avatar
  • 3,056

Only top scored, non community-wiki answers of a minimum length are eligible