14

We currently allow discussions that involve bypassing government censorship, as well as avoiding government surveillance, and even attacking government systems, as long as they are legal to discuss and as long as the question is not off-topic for another reason. Below are a few example questions that are on-topic and still open which would need to be closed ...


13

DRM itself as a topic, absolutely is in scope here. Questions on DRM, however, may be difficult to ask here, as DRM itself is fundamentally useless for most implementations - such as preventing piracy - and if we exclude environments where every piece of hardware and every access is completely controlled, it just doesn't work. So most questions on it seem ...


13

"When will a vendor implement a new feature?" is not a great question, even if the answer has security implications. Until the information is made public, all we can do is opine. If there was a member of the vendor's dev staff willing to answer, they would either have to: break confidentiality (not something we would want to encourage) disclose something ...


10

I've been feeling the same way, too. It's not about the "too basic" questions (hey, those are great for newer members to practice composing good Answers!), but for me, it's about answers being found: in the top 5 Google hits using the Question title within a link/source included in the Question itself The answers are at their fingertips, but for some ...


8

This website is not meant to be reserved to IT Security professionals. Therefore, I think it would be difficult to close a post simply as being a "too basic IT security question". What may be basic for one may not be for another: sometimes, people just need a keyword, the name of a concept, or something like that so they can engage their own researches. ...


8

I disagree with the characterization this the question is about DRM. I agree that the question is tangentially related to DRM, and hence security and therefore on topic, but the question as asked is about how it would be possible to implement a feature over USB, which is a function of the USB drivers, the OS, and then a programming question of how to ...


8

Questions about malicious scripts can be on-topic. But that is not an accurate description of your question. “Here's a dump of obfuscated code, what does it do?” is not suitable for Security.SE, not because it's off-topic, but because it's *unsuitable for Stack Exchange. Unfortunately, the classification of close reasons on Stack Exchange tends to lump ...


8

Pre-filled Option 1: Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem.


7

If enough close voters (or a moderator) picks the option under “migration”, then the thread (the question, its answers, its comments, their votes) is automatically moved to the target site. Use this for questions which you think are perfectly reasonable but off-topic here and on-topic on Super User. The option that isn't under “migration” just closes the ...


7

"Default" Off-Topic Close Reason (Shown when no 2 off-topic reasons match on a closed question.) (However, you cannot explicitly select this reason, strangely enough?? ) This question does not appear to be about Information Security within the scope defined in the help center.


7

Code analysis isn't generally on topic here. Because there are any number of obfuscated scripts you could dedicate a website to this topic. But that website is not Security Stack Exchange. Far more relevant to us is how we ensure that detection and blocking systems are configured; layered defences; managed anti-malware and antivirus services etc.


7

I'm seeing some trends in the questions you highlighted (I know it is a small sample set). The OP admits he doesn't know about SQLi - the duplicate question might not answer the question as asked, but provides the background he needs to know Is from 3 years ago, just basic code review, left open because a legacy question is from 2.5 years ago and would ...


7

Pre-filled Option 2: Questions seeking product recommendations are off-topic as they become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve.


7

Questions that relate to various laws, where the law is the subject, can be on topic (if about security). Questions asking for legal interpretations or applications of the law are off-topic. Straight up, "is it legal\can I get sued?" is completely off-topic. The flow of logic is simple, and relates to your own answer: "it depends on the jurisdiction". We ...


7

It seems like this was more or less a race-condition, as explained by @tim and @TildalWave in the comments. My question was close-voted due to it's sub-par and unclear title. The title was improved by others when close-voting had already started. The edit couldn't prevent the question being closed, so reviewers started the reopening process. The question ...


6

The Security.SE Help Center specifically says: You should only ask practical, answerable questions based on actual problems that you face. Chatty, open-ended questions diminish the usefulness of our site and push other questions off the front page. The idea of an AI which is so powerful to automatically solve CAPTCHAs and to automatically write useful ...


6

Mouse-over the down-vote button on a question, and you'll see this in the tooltip: This question does not show any research effort; it is unclear or not useful. (Emphasis mine.) Questions with answers findable in the first 5 Google results need a down-vote, not closing. Sure, they might not be very useful for the professional community here. But they're ...


6

This question is a request for legal advice, which is not within the scope of this site. While general discussions of laws are appropriate within the context of IT security, you should always consult a lawyer instead of the Internet when accuracy is important.


6

There is no ban on your question - it has just been closed by 5 members of the community, and my quick review agrees with them. That question is definitely off topic here. It is not a question about security. It is not even a question about penetration testing. It is a question you could possibly pose to the Hydra team to ask them why Hydra has that ...


5

I hadn't looked at that question until just now, but I can see why it got the close votes. The question itself boils down to "where is product x on vendor y's roadmap" - which is very rarely going to be on topic. Either the vendor has made their roadmap public, in which case having the question and answer here adds no value, or they haven't, which makes any ...


5

We need at least the ability to migrate some things to Serverfault and maybe even Crypto. Currently I feel that some questions are just too complex to migrate over to Super User (like the recent question about configuring a Cisco ASA). I also feel that some crypto questions we get on here are not really off-topic, however they do fit a lot better on Crypto ...


5

Granted, this one may sound as a product recommendation, but from the sequel below I'm not sure that the OP really expect an actual name but merely advices on how to choose. "Advice on how to choose" is the definition of opinion-based. Each person is going to give a different perspective on the problem. It's good that the OP put down the time frame ...


5

In general, and this is why I agreed with the flags and other close votes, a compromised device is a compromised device. It needs to be removed from service, imaged (if forensic investigation is going to be carried out), wiped, and rebuilt from new or from backup. There is little to be gained from trying to distinguish between a server, desktop computer or ...


5

My name shows up as one of the close voters of that question, but I did not vote to close it as a duplicate and I don't think it is a duplicate. I voted to close it as to broad. Here are some things that taken together makes it a different question in my opinion: A home use scenario v. a proffessional server scenario requires answers on different levels. ...


4

If Software Recommendations is mentioned anywhere, please prominently mention the question quality guidelines. Software Recommendations does not accept just any question that asks which software to use, we insist on questions with a clear list of requirements and a well-defined purpose. This goes for anyone mentioning SR.SE in a comment. Please always link ...


4

As I stated in my comment there: If you dont want to see ads from Google, don't use Google's free email service. This is a free service, funded by ads, not by the goodness of Google's hearts. The "scanning" that Google does is for the sole purpose of serving you ads. That is the price for using this free service. In other words, your question, as you ...


4

I'm not sure I like the idea of having a canonical dupe target for questions that are inherently off topic. That would sort of signal that those questions are in fact on topic, and I suspect it would cause frustration when people get their questions closed as duplicates to a question that is not specific enough to solve their problem. I think picking the ...


3

Pre-filled Option 3: Questions about general computing hardware and software are off-topic here, but can be asked on Super User.


3

The problem is that this is not a discussion site but a Q&A forum with a specific format. That format sets us apart, but yes, it also introduces limitations. Take a look at the other highly-voted WannaCry posts to get a sense of how to handle important, highly searched topics when not all the data was known. Basically, ask a defined question and let ...


2

Then I got complains about it being a "what if" kind of question. That's kind of the case. But still just not because I wanted to create a hypothetical case but a question about "What wouldn't work with this one?" [...] "Given the system exists and works as a blackbox and there is actually the requirement for an alternate to captchas, what could make this ...


Only top voted, non community-wiki answers of a minimum length are eligible