Skip to main content
54 votes

Should we allow malware authors to weigh in on questions?

We should judge each answer on its own and whether it provides valid advice. The fact that the author is a malware developer is irrelevant. If the advice is good, then upvote it, if not, then downvote ...
André Borie's user avatar
  • 12.8k
31 votes
Accepted

Zalgo text invades Security.SE

Thanks - this is a good call. Generally, unless a username is flagged as offensive, we leave them alone, however after testing this with a varied set of devices, I'd have to agree - it does break ...
Rory Alsop's user avatar
  • 61.5k
31 votes

Request for comment: Stack Overflow is hiring a Director of Information Security

Your listing seems to imply that the director of information security will respond to the CTO. This may be suboptimal. The CISO, theoretically, should respond only to the CEO and the board. (At least ...
Thomas Pornin's user avatar
29 votes

Should we allow malware authors to weigh in on questions?

I don't think we should lock it. I fundamentally disagree with the poster's immoral stance. But see, in the information security field, this is what we're up against: people who don't care who they ...
Mark Buffalo's user avatar
  • 22.5k
23 votes
Accepted

Too aggressive with "off-topic" comments?

This questions did strike me as especially hard over on SO, where new and/or low rep users regulary get downvoted and closed very fast. Over here on Sec.SE, because there is way less traffic, the ...
Tobi Nary's user avatar
  • 14.4k
23 votes

Do we want to continue with our blog?

I would say keep it, but stay away from Wordpress (unless you want to use the blog as a live demonstration of the dangers of automated vulnerability scanners). I'd say a static site (published on ...
André Borie's user avatar
  • 12.8k
22 votes

"Digital Forensics" — on topic here, or create a separate site?

I would definitely say there is an overlap in terms of what is on topic. I've even found some similar questions on our site : How to identify the presence of rootkits from an image of Linux memory? ->...
André Borie's user avatar
  • 12.8k
21 votes

Too aggressive with "off-topic" comments?

I agree. I think this is mostly a problem with close votes on questions, but I just noticed this deleted answer: The author is the lead of the OWASP Zap Project - one of the more significant open ...
paj28's user avatar
  • 33.5k
20 votes
Accepted

Do we only rely on community member's memories to identify duplicates?

In the right column of a question are "related posts", which are questions that SE has identified as having similar keywords in the text. When looking at a post, take a look at the related questions ...
John Deters's user avatar
  • 34.2k
20 votes
Accepted

Do we need to disclose affiliation in every answer?

You have already done so with your username and logo, but the affiliation is not always clear (more brand recognition with Burp Suite than with PortSwigger). If you are answering questions about a ...
schroeder's user avatar
  • 131k
20 votes

Information Security's updated site theme is live!

AviD's user avatar
  • 73.3k
19 votes
Accepted

Is this site limited to discussions of electronic security?

This site is for all aspects of information security - this includes everything listed on our FAQ: IT Security Stack Exchange is for Information Security professionals to discuss protecting assets ...
Rory Alsop's user avatar
  • 61.5k
19 votes
Accepted

We have more users who vote lots but don't ever really post. How can we fix it?

I noticed that I'm third in the query results, so let me explain what happens (in my case, and probably in @tripleee's case as well). I often visit Security.SE after a report of a possible spam post ...
Glorfindel's user avatar
  • 2,265
19 votes
Accepted

Is this type of behaviour acceptable?

@JoshuaJones - course you are! Why wouldn't you? Would be CRAZY to try and help the OP out and answer their question if the question isn't the pinnacle of quality. – JᴀʏMᴇᴇ This sentence, under the ...
M'vy's user avatar
  • 13.1k
18 votes

The Memes of Information Security

Meme: They can see your dick pics. Originator: John Oliver (Last Week Tonight, on HBO) Cultural Height: 2015-2016 Background: In June of 2013, documents stolen from the NSA by Edward Snowden were ...
Iszi's user avatar
  • 27.1k
18 votes

Are questions from end-users on topic here?

Yes, absolutely - the "for security professionals" is the target for your questions, i.e. "when you want to ask a security professional". Naturally there is a heavy bias towards experienced ...
AviD's user avatar
  • 73.3k
18 votes

I'm writing a novel and would like to refer to your site in the novel

Disclaimer: I am not a lawyer, and I cannot speak for Stack Overflow (the company behind Stack Exchange) or the community. Voting, answers and comments on this page will hopefully show what the ...
S.L. Barth is on codidact.com's user avatar
18 votes
Accepted

Can we kill the [data-security] tag?

In looking at the questions using that tag, I'd have to agree it is entirely redundant. As usual I'll await a bit more of a consensus, but I'd be happy removing it.
Rory Alsop's user avatar
  • 61.5k
17 votes

We have more users who vote lots but don't ever really post. How can we fix it?

Investigation Thanks for bringing this up and providing some good statistics to work from! 5% of downvotes come from 10 users who have fewer than 10 recent posts on this site. I think this is the ...
Anders's user avatar
  • 65.6k
17 votes
Accepted

Should a question be marked as duplicate, even if the new one is better?

If a newer question encompasses a wider and a more detailed field of view, then I think it could be the core question and the older one made a dupe. In your example, the older question really only ...
schroeder's user avatar
  • 131k
16 votes

Should we allow malware authors to weigh in on questions?

This reminds me of this question and my answer. Basically, you have an answer which is technically valid, informative, and fully honest in its disclosure of conflict of interests; and yet, it comes ...
Thomas Pornin's user avatar
16 votes

Community Promotion Ads - 2017

e-sushi's user avatar
  • 1,306
16 votes
Accepted

Is this joke answer really an answer?

Please, just use the flag tool to notify moderators when you see non-answers or anything else flag-worthy. And if something is not an answer, please don't upvote it. I have deleted the post as it ...
Rory Alsop's user avatar
  • 61.5k
16 votes
Accepted

Should we use archived links instead of direct links?

I was the author of the answer with the archived link. In general I think that no, we should not provide archived links. I only used the archive for this specific link because, in my experience, The ...
forest's user avatar
  • 66.8k
15 votes

Should answers contain images which add nothing to the answer?

Sometimes people add pictures because they are trying to get the stress out of a situation, and their sense of humour tells them that a picture is the way to go. In general, a bit of humour is not ...
Thomas Pornin's user avatar
15 votes
Accepted

Is it ok to ask questions here which can be found easily by searching on Google?

If it's the sort of thing that pops out as the first result when you do a google search using the exact terms in the question, and the answer describes exactly what is needed, then we aren't exactly ...
Rory Alsop's user avatar
  • 61.5k
15 votes
Accepted

Are we a free malware analysis service?

Mark Buffalo worked up some canonical PHP malware answers with the process for analysis for the sole purpose of addressing this issue. We should point people to these questions (my internet on ...
schroeder's user avatar
  • 131k
15 votes

Community Promotion Ads - 2017

Gilles 'SO- stop being evil''s user avatar
15 votes
Accepted

Are questions along the lines of "Is the site example.com a scam?" on-topic?

No, it's not on topic. We do not do security reviews of products, services, or sites.
schroeder's user avatar
  • 131k

Only top scored, non community-wiki answers of a minimum length are eligible