12

It's the third time now that I tried to write something that really encapsulates how much respect I have for you, but nothing really quite manages. As such, I'll keep myself short: Thank you for everything you've done for Security.SE. Without you, the site would definitely look a lot different, and not for the better. I've learned a lot from you in my time ...


11

I'm against that change, because frankly, I think it doesn't improve anything. I think it's virtue signalling at best, showing "we're doing something" without actually doing anything substantial or impactful. If you have a look at the systemic problems that black people in the US and elsewhere face, the words "blacklist" are so far down ...


11

Congratulations, schroeder! I'm new around here, but I noticed very quickly that you're extremely active in moderating, but still answer a lot of questions. Which I find quite impressive. On some sites (Stack Overflow), the moderators seem to be too busy moderating to answer much anymore. But I see you taking the time to answer and make sure that even ...


10

Congratulations on the milestone! Here are some great ones: A 1k+ question, and maybe the most popular duplicate target on the site? I'm a robot in a warehouse full of boxes. (I have used this method IRL, and it works great.) Poor, poor Dave... summon_cthulhu(); Careful explanations of complex topics.


9

A small sample of some of the great answers: Possibly the highest reputation per word on the site? A clown who claims he was at the last company party. Sometimes controversial, but always well reasoned. Not to mention the 158 answers that got zero upvote, but just looking at a small sample will show that they are full of helpful nuggets. Thanks and ...


9



8

Microsoft does more than make products. They have security expertise, they have services and documents. Their product decisions affect the industry as a whole. I immediately agreed with you when I read your question, but those companies are more than the sum of their parts. I can see a case for keeping them and for removing them. As with the OWASP tag, if ...


7

You may not have seen the countless times we have used it. It has been an incredibly useful rule for us as mods to get rid of not so many "show me how to hack" questions. Most of them are ones that require a training course to answer. Yes, it is also handy to get rid of "I want to hack my partner's facebook" etc but that isn't the main ...


6

I agree there is a very straightforward argument for having lfi as a synonym of local-file-inclusion, but file-inclusion should probably be renamed to remote-file-inclusion. File-inclusion itself should probably be made a synonym of one or the other... I would suggest that it be a synonym of remote-file-inclusion, ust based on numbers of questions.


6

The following is a rough draft of the proposed section. As there are many sites in the Stack Exchange network, some questions that are only loosely security-related may be a better fit on a different site. If you're still unsure if you should ask your question on Information Security Stack Exchange, feel free to ask in our chat or on our meta site. Below is ...


6

I'm actually going to put it back in. I removed the name because you said in your earlier version that you thought it was malicious and you wanted us to review it. The question could have stood more generically on its own without naming it. But now that the question is more generic, and the point is that the app is deceptive, the name becomes relevant. So, ...


5

We get a lot of these types of career questions. Unfortunately, they are all far too opinion-based to be a good fit on the site. In addition, they tend to be hyper-specific to the individual and the context/locale. We do have a chat room that might fit your needs better.


5

There are very few aspects of security that only occur in a SOC, which is one reason we do not use a SOC tag much. It really is only needed for a SOC-specific question. If you search through this site you will see hundreds of questions referring to activities and protocols within SOCs. You don't need to search on a tag. Your proposal will needlessly fragment ...


5

I think every network device I ever worked with used the words permit or allow and deny or reject. I'd call them highly commonplace substitutes.


5

We are not a code/site/log/packet dump analysis site. As you can imagine, we'd be flooded with random stuff to wade through.


5

Depends on the question. In general, I would say: "Here's a traffic dump. Notice anything strange?" Will be closed as "needs focus". "Here's some relevant subset of trafic. I suspect X. Is that correct?" Probably OK question! "Here's some small subset of trafic that I don't understand. I expected X but got Y. What is going ...


4

Yes, it is an "information security" tool, but it is also closed source and by its nature, very secretive. So, "how it works" is a question for the company.


4

EDIT: The question is now asked: Help! Ransomware encrypted my files. What do I do now? Since there hasn't been a lot of protest, I will go ahead and post a question unless there is some more objection. Here's a draft of the question, short but sweet: Help! Ransomware encrypted my files. What do I do now? I just discovered that my files has been encrypted ...


4

The question you've asked is not a security question, so it would not be on-topic here. You're asking about networking basics. And Renan's answer has the technical details you require.


3

No. It's not a security issue for the asker. It is properly asked on Workplace.


3

The canned close reason is to prevent people from asking plain hacking questions. Things like: I want to hack a site, can someone show me how? I want to break into a Facebook account, how do I do that? How do I root my friend's phone? We are happy to help with the technical details, but the asker needs to explain the specific problem they are having in ...


3

... used as a reason to close generic ... questions against window 10, which is a specific OS, not a "system". You have a very strangely narrow definition of "system". "OS" is an acronym for "Operating System". A "system" does not need to be the full technology stack for a discrete computing device. "...


2

Your edit to the question does not bring the question on topic. While your edit did pop the question into the reopen review queue, returning was rejected in review. You cannot answer if a question is closed.


2

I think the reasons that has already been given in comments explain why the question was closed. There is nothing in the question to indicate that the site would be a "hacksite" (whatever that means) other than the that it is unclear who operates it. If we allowed questions of that kind about individual sites we could have loads of them, and they would all ...


2

To me, it sounds like your questions are to broad and maybe to dependent upon your specific situation to be answered in a good way. What NIST-documents should you study? It depends on what you want to learn. How do you report a vulnerability? It depends on the vulnerability and your relation to the vulnerable party. That said, if you have something a bit ...


2

I support Nr. 2. I think that questions about AngularJS 1.x can just differentiate themselves by mentioning that it's specifically about the obsolete version 1.x.


1

Wow! Impressive stats! I'd like to give a big thank you to our moderators, Avid, Jeff Ferland, Rory Alsop and schroeder. Each and every one of those 3,514 cleared comments made the site a little bit less noisy and brought us a little bit closer to the SO ideal of clear and easy to find solutions to real problems. Not to mention the more than two thousand ...


1

It's because your question was specific about the process for how to determine how this one app was installed. Broad general questions of security on certain devices are on-topic here. But "how do I do X on system Y?" are better asked on the sites dedicated to that system (Server Fault for servers, Super User for general consumer devices, Ask Different for ...


Only top voted, non community-wiki answers of a minimum length are eligible