Tag Info

Shaul - first off, the moderators had nothing to do with the close. It received 5 community close votes. Secondly, there is nothing that says anywhere that this was closed because you were a 'noob' or not professional. The problem with is, and various commenters tried to explain to you, is that the question is too broad. This is why it was closed, and the ...

To complement what @Rory says, I'd like to point out that there is no rule that says that any question fits somewhere in the StackExchange network. By design, the SE sites concentrate on questions that can be answered in about one page of text. Of course, longer answers exist, because some people tend to exhibit a larger than average level of verbosity, ...

I would definitely say there is an overlap in terms of what is on topic. I've even found some similar questions on our site : How to identify the presence of rootkits from an image of Linux memory? -> Are there any artifacts for filesystem forensics in memory?, How would one know if they have a rootkit? How can I read data via ADB if an Android device is ...

Just as a moderator pro tem on Law - (hi, InfoSec! waves)... We have received a number of inbound migrations, and of them, the most successful are those that don't presume domain knowledge - the reason for this is, well, lawyers aren't usually infosec professionals. (I don't even know if I'm using that right, infosec?) Anyway, there are a few that have ...

They are not off topic as such - the best thing to do, and what usually happens with these 'bandwagon' questions, is to flag as duplicate, and we'll close 'em as dupes. The general answer usually works for all these specific ones.

The problem is that the code is highly specific to that one iteration of that code. There will be very limited usefulness or applicability for anyone else. In the past, I've transferred or referred people to codereview.stackexchange.com [Edit: the CodeReview folks don't want it there, either] This issue was a question in the 2015 moderator election Q&...

No, this is specifically not allowed in the FAQ. Your proposed question is also highly opinion-based. There is a software recommendations stack. Be sure to read their question guidelines. You can't just ask “what's the best online password manager” since that would be highly opinion-based. Explain clearly what you're looking for so that people can ...

I think it's a fundamental mistake to think that physical security isn't part of IT Security. If someone comes on asking how to protect a diamond collection, it's off topic, but how to physically secure an office building is a critical (arguably the most critical) part of protecting the information contained within.

I don't think you'll find many lawyers who are security experts at the same time, some questions require deep understanding of networking and security. There is no general rule in my opinion but I disagree with being more strict as I don't see that much of legal questions anyway. Maybe you should add some examples to your question.

Far as I can tell, there are plenty of good reasons to permit these questions: They're objective and on-topic by the current criteria. SE is intended to be the place to go to answers to objective, on-topic questions. There's no other place on SE on-topic for these questions (codereview is NOT IT!). There's arguably no other trustworthy place outside of SE ...

In my opinion, if the answer is a configuration setting, command, or sequence of clicks, then it's a SuperUser question. Questions about which configuration or command will achieve one's requirements of security is on topic here. So, I would draw the line: don't ask "which is better?" over at SuperUser (they aren't qualified), and don't ask "how do I?" ...

Questions about malicious scripts can be on-topic. But that is not an accurate description of your question. “Here's a dump of obfuscated code, what does it do?” is not suitable for Security.SE, not because it's off-topic, but because it's *unsuitable for Stack Exchange. Unfortunately, the classification of close reasons on Stack Exchange tends to lump ...

Could you please explain me... how a question about an extension, used for tampering data by many of security experts, is not related to a QA site on Information Security. If that question has to do about the security aspects of the extension, then it would be on-topic. However, if the question is only about installing it - or why it doesn't function ...

Code analysis isn't generally on topic here. Because there are any number of obfuscated scripts you could dedicate a website to this topic. But that website is not Security Stack Exchange. Far more relevant to us is how we ensure that detection and blocking systems are configured; layered defences; managed anti-malware and antivirus services etc.

I'm seeing some trends in the questions you highlighted (I know it is a small sample set). The OP admits he doesn't know about SQLi - the duplicate question might not answer the question as asked, but provides the background he needs to know Is from 3 years ago, just basic code review, left open because a legacy question is from 2.5 years ago and would ...

I would say that yes, this question can be on-topic - IF it's worded carefully. Obviously you dont want to be soliciting offers or recommendations - anyway SE specifically rejects product (or service) recommendations requests. Also you don't want to give a platform for bias, on the other hand you do want sufficient context - "security consultant" can ...

Asking for courses is off topic and also too localised. Any course may be localised in location, but even web-based courses suffer from possibly being time-bound. We do mention some courses, generally the industry respected, long standing ones, but in general it is just not useful on an SE site to list courses, so a) is not on topic. B)is actually ...

If it currently is on topic here, let's not migrate existing questions over. For new questions, the process should be the same as for other clashes (such as Astronomy, Space and Physics, or even for Security and Cryptography): Will it get better answers here or on Tor.SE? If we think it will work there, mods can migrate it, but we only want to do that if ...

We discussed this some time back in one of our scope creep chats. I think the conclusion was that it wasn't worth the effort. I agree that it is currently slightly misleading but the core of our scope is still IT security so I don't think it is a problem.

From my perspective, the question is off-topic. It is actually more of a SuperUser-type question, as the answers indicate that the solution is found in a browser config. So, I can see your confusion. But, it turns out to be an interesting problem, and this community loves puzzles. This question was highly voted, along with the accepted answer before I came ...

I think this is beyond a bandwagon question. This site is potentially a great resource but ill designed to treat it as such because of its individual question focus thus the is X to Y nature of the questions. I am impressed by the update to the Tag which include the CVEs and suggest we consider placing other references in that tag to consolidate information ...

To some extent, exploit development is covered here. However, sometimes the question steps too much into the coding techniques used that it becomes a better fit for Stackoverflow. To be honest, I agree with you. I don't think it's unreasonable to have an SE Q&A site for exploit development. To start such site, you can go ahead and create a proposal on ...

You can certainly ask follow up questions. The usually accepted technique is to write your question and just refer to the earlier question with a link and a summary. I also think your follow up is on topic - we do try and focus on the relationship between attack route and defence strategy, but both ends of the discussion are relevant here.

The question is about turning high-level security requirements into a concrete workflow. That's a pretty typical type of question for Security.SE. Although the study of security protocols is on-topic on CS.SE, this question is very firmly on the engineering side (designing a specific system according to concrete constraints), and thus off-topic there. I ...

No. Since it's beta, we cannot normally migrate it to it. The mods can just look the other way while we rack more Tor questions here. Eventually, the new Tor.SE will slowly sufficate and die

Let's take a look at these sample questions: What are some alternative clients to the Pybitmessage client? No, this would not be on topic here (although it's already been asked) - but I don't think this should be ontopic on any SE site, this specifically asks for product recommendations ("shopping list" questions) which have been deemed to not be a good ...

As Rory said, our discussion around this was going on during the same time frame as the site design and graduation. The results of those discussions have been largely captured in the FAQ, now found here: IT Security Stack Exchange is for Information Security professionals to discuss protecting assets from threats and vulnerabilities. Topics include, but are ...

Whoops. Fixed now, though it will take a bit for the page caching to update to reflect the fix.

As @schroeder says, this is not allowed and is opinion-based. However, what you can do instead is ask for criteria that should be considered when choosing such a product, and how to compare. For example, this question I asked several years ago. This is not subjective, nor does it have the other problems that product recommendation questions typically ...

I do not think you need to be a pro, but the people who tend to get up enough votes to review close votes and make those decisions tends to be people who are security pros or are at least very into security. Discussion questions, especially on high level concepts or news stories are going to generate more opinion type questions. Support questions are ...