13

"When will a vendor implement a new feature?" is not a great question, even if the answer has security implications. Until the information is made public, all we can do is opine. If there was a member of the vendor's dev staff willing to answer, they would either have to: break confidentiality (not something we would want to encourage) disclose something ...


13

We currently allow discussions that involve bypassing government censorship, as well as avoiding government surveillance, and even attacking government systems, as long as they are legal to discuss and as long as the question is not off-topic for another reason. Below are a few example questions that are on-topic and still open which would need to be closed ...


13

DRM itself as a topic, absolutely is in scope here. Questions on DRM, however, may be difficult to ask here, as DRM itself is fundamentally useless for most implementations - such as preventing piracy - and if we exclude environments where every piece of hardware and every access is completely controlled, it just doesn't work. So most questions on it seem ...


10

I've been feeling the same way, too. It's not about the "too basic" questions (hey, those are great for newer members to practice composing good Answers!), but for me, it's about answers being found: in the top 5 Google hits using the Question title within a link/source included in the Question itself The answers are at their fingertips, but for some ...


8

This website is not meant to be reserved to IT Security professionals. Therefore, I think it would be difficult to close a post simply as being a "too basic IT security question". What may be basic for one may not be for another: sometimes, people just need a keyword, the name of a concept, or something like that so they can engage their own researches. ...


8

Questions about malicious scripts can be on-topic. But that is not an accurate description of your question. “Here's a dump of obfuscated code, what does it do?” is not suitable for Security.SE, not because it's off-topic, but because it's *unsuitable for Stack Exchange. Unfortunately, the classification of close reasons on Stack Exchange tends to lump ...


8

I disagree with the characterization this the question is about DRM. I agree that the question is tangentially related to DRM, and hence security and therefore on topic, but the question as asked is about how it would be possible to implement a feature over USB, which is a function of the USB drivers, the OS, and then a programming question of how to ...


7

Questions that relate to various laws, where the law is the subject, can be on topic (if about security). Questions asking for legal interpretations or applications of the law are off-topic. Straight up, "is it legal\can I get sued?" is completely off-topic. The flow of logic is simple, and relates to your own answer: "it depends on the jurisdiction". We ...


7

It seems like this was more or less a race-condition, as explained by @tim and @TildalWave in the comments. My question was close-voted due to it's sub-par and unclear title. The title was improved by others when close-voting had already started. The edit couldn't prevent the question being closed, so reviewers started the reopening process. The question ...


7

Code analysis isn't generally on topic here. Because there are any number of obfuscated scripts you could dedicate a website to this topic. But that website is not Security Stack Exchange. Far more relevant to us is how we ensure that detection and blocking systems are configured; layered defences; managed anti-malware and antivirus services etc.


7

I'm seeing some trends in the questions you highlighted (I know it is a small sample set). The OP admits he doesn't know about SQLi - the duplicate question might not answer the question as asked, but provides the background he needs to know Is from 3 years ago, just basic code review, left open because a legacy question is from 2.5 years ago and would ...


6

My name shows up as one of the close voters of that question, but I did not vote to close it as a duplicate and I don't think it is a duplicate. I voted to close it as to broad. Here are some things that taken together makes it a different question in my opinion: A home use scenario v. a proffessional server scenario requires answers on different levels. ...


6

There is no ban on your question - it has just been closed by 5 members of the community, and my quick review agrees with them. That question is definitely off topic here. It is not a question about security. It is not even a question about penetration testing. It is a question you could possibly pose to the Hydra team to ask them why Hydra has that ...


6

The Security.SE Help Center specifically says: You should only ask practical, answerable questions based on actual problems that you face. Chatty, open-ended questions diminish the usefulness of our site and push other questions off the front page. The idea of an AI which is so powerful to automatically solve CAPTCHAs and to automatically write useful ...


6

Mouse-over the down-vote button on a question, and you'll see this in the tooltip: This question does not show any research effort; it is unclear or not useful. (Emphasis mine.) Questions with answers findable in the first 5 Google results need a down-vote, not closing. Sure, they might not be very useful for the professional community here. But they're ...


5

Granted, this one may sound as a product recommendation, but from the sequel below I'm not sure that the OP really expect an actual name but merely advices on how to choose. "Advice on how to choose" is the definition of opinion-based. Each person is going to give a different perspective on the problem. It's good that the OP put down the time frame ...


5

I hadn't looked at that question until just now, but I can see why it got the close votes. The question itself boils down to "where is product x on vendor y's roadmap" - which is very rarely going to be on topic. Either the vendor has made their roadmap public, in which case having the question and answer here adds no value, or they haven't, which makes any ...


4

If Software Recommendations is mentioned anywhere, please prominently mention the question quality guidelines. Software Recommendations does not accept just any question that asks which software to use, we insist on questions with a clear list of requirements and a well-defined purpose. This goes for anyone mentioning SR.SE in a comment. Please always link ...


4

In general, and this is why I agreed with the flags and other close votes, a compromised device is a compromised device. It needs to be removed from service, imaged (if forensic investigation is going to be carried out), wiped, and rebuilt from new or from backup. There is little to be gained from trying to distinguish between a server, desktop computer or ...


4

I'm not sure I like the idea of having a canonical dupe target for questions that are inherently off topic. That would sort of signal that those questions are in fact on topic, and I suspect it would cause frustration when people get their questions closed as duplicates to a question that is not specific enough to solve their problem. I think picking the ...


3

The problem is that this is not a discussion site but a Q&A forum with a specific format. That format sets us apart, but yes, it also introduces limitations. Take a look at the other highly-voted WannaCry posts to get a sense of how to handle important, highly searched topics when not all the data was known. Basically, ask a defined question and let ...


2

I'm going to agree and disagree with Rory. I agree that DRM questions are on-topic. I disagree that asking questions about the ability of DRM aren't of any value. DRM is often a failing game depending on who you're trying to protect your thing from. But much of the world is still convinced that you can somehow have perfect protection, or that it's ...


2

I closed this one as it is not a security question. The decision to put that comment in may be answerable by the original developer. The other question you reference would probably have been closed if it was asked now, as the requirements have matured as the site has grown.


2

Nope, it's not IP spoofing. IP spoofing is just one part of your imagined scenario. And it isn't blind session hijacking either, since your scenario is not a man-in-the-middle. If you were in the middle, the scenario would be very different. You are asking about pure TCP/IP concepts. There isn't a "feature on the firewall" to protect. This is just ...


2

It can be, yes. When a question is closed as dupe, it remains as a stub pointing at the duplicate, so anyone who hits the closed question when doing a search finds the other one automatically. In this instance the answer seems very relevant and obvious, so I agreed with the flags and vote to close as dupe - and did the necessary. The question doesn't have ...


2

Then I got complains about it being a "what if" kind of question. That's kind of the case. But still just not because I wanted to create a hypothetical case but a question about "What wouldn't work with this one?" [...] "Given the system exists and works as a blackbox and there is actually the requirement for an alternate to captchas, what could make this ...


1

I think Webmasters.SE would be the best fit. There are a lot of domain registration questions on there and I would expect experts in this field to be lurking there.


1

“Product recommendation” is a bit vague. Most questions on Stack Exchange take the form “I have this problem, how do I solve it?”. Sometimes the natural solution to a problem is to use a ready-made product. In such cases, the question is considered a product recommendation question. Questions may be formulated as a product recommendation request, when the ...


1

IMHO its rubbish, there are three problems here, the first is that there is a large number of users that don't recognize that offensive skills are useful for defense, the closing of offensive computing questions is nothing new: What determines if a question should be considered Blackhat? Clarify our stance on black hat questions https://security.meta....


Only top voted, non community-wiki answers of a minimum length are eligible