Tag Info

Shaul - first off, the moderators had nothing to do with the close. It received 5 community close votes. Secondly, there is nothing that says anywhere that this was closed because you were a 'noob' or not professional. The problem with is, and various commenters tried to explain to you, is that the question is too broad. This is why it was closed, and the ...

To complement what @Rory says, I'd like to point out that there is no rule that says that any question fits somewhere in the StackExchange network. By design, the SE sites concentrate on questions that can be answered in about one page of text. Of course, longer answers exist, because some people tend to exhibit a larger than average level of verbosity, ...

I would definitely say there is an overlap in terms of what is on topic. I've even found some similar questions on our site : How to identify the presence of rootkits from an image of Linux memory? -> Are there any artifacts for filesystem forensics in memory?, How would one know if they have a rootkit? How can I read data via ADB if an Android device is ...

Just as a moderator pro tem on Law - (hi, InfoSec! waves)... We have received a number of inbound migrations, and of them, the most successful are those that don't presume domain knowledge - the reason for this is, well, lawyers aren't usually infosec professionals. (I don't even know if I'm using that right, infosec?) Anyway, there are a few that have ...

They are not off topic as such - the best thing to do, and what usually happens with these 'bandwagon' questions, is to flag as duplicate, and we'll close 'em as dupes. The general answer usually works for all these specific ones.

The problem is that the code is highly specific to that one iteration of that code. There will be very limited usefulness or applicability for anyone else. In the past, I've transferred or referred people to codereview.stackexchange.com [Edit: the CodeReview folks don't want it there, either] This issue was a question in the 2015 moderator election Q&...

Far as I can tell, there are plenty of good reasons to permit these questions: They're objective and on-topic by the current criteria. SE is intended to be the place to go to answers to objective, on-topic questions. There's no other place on SE on-topic for these questions (codereview is NOT IT!). There's arguably no other trustworthy place outside of SE ...

I don't think you'll find many lawyers who are security experts at the same time, some questions require deep understanding of networking and security. There is no general rule in my opinion but I disagree with being more strict as I don't see that much of legal questions anyway. Maybe you should add some examples to your question.

No, this is specifically not allowed in the FAQ. Your proposed question is also highly opinion-based. There is a software recommendations stack. Be sure to read their question guidelines. You can't just ask “what's the best online password manager” since that would be highly opinion-based. Explain clearly what you're looking for so that people can ...

In my opinion, if the answer is a configuration setting, command, or sequence of clicks, then it's a SuperUser question. Questions about which configuration or command will achieve one's requirements of security is on topic here. So, I would draw the line: don't ask "which is better?" over at SuperUser (they aren't qualified), and don't ask "how do I?" ...

Questions about malicious scripts can be on-topic. But that is not an accurate description of your question. “Here's a dump of obfuscated code, what does it do?” is not suitable for Security.SE, not because it's off-topic, but because it's *unsuitable for Stack Exchange. Unfortunately, the classification of close reasons on Stack Exchange tends to lump ...

Could you please explain me... how a question about an extension, used for tampering data by many of security experts, is not related to a QA site on Information Security. If that question has to do about the security aspects of the extension, then it would be on-topic. However, if the question is only about installing it - or why it doesn't function ...

Code analysis isn't generally on topic here. Because there are any number of obfuscated scripts you could dedicate a website to this topic. But that website is not Security Stack Exchange. Far more relevant to us is how we ensure that detection and blocking systems are configured; layered defences; managed anti-malware and antivirus services etc.

I'm seeing some trends in the questions you highlighted (I know it is a small sample set). The OP admits he doesn't know about SQLi - the duplicate question might not answer the question as asked, but provides the background he needs to know Is from 3 years ago, just basic code review, left open because a legacy question is from 2.5 years ago and would ...

If it currently is on topic here, let's not migrate existing questions over. For new questions, the process should be the same as for other clashes (such as Astronomy, Space and Physics, or even for Security and Cryptography): Will it get better answers here or on Tor.SE? If we think it will work there, mods can migrate it, but we only want to do that if ...

From my perspective, the question is off-topic. It is actually more of a SuperUser-type question, as the answers indicate that the solution is found in a browser config. So, I can see your confusion. But, it turns out to be an interesting problem, and this community loves puzzles. This question was highly voted, along with the accepted answer before I came ...

The question is about turning high-level security requirements into a concrete workflow. That's a pretty typical type of question for Security.SE. Although the study of security protocols is on-topic on CS.SE, this question is very firmly on the engineering side (designing a specific system according to concrete constraints), and thus off-topic there. I ...

I think this is beyond a bandwagon question. This site is potentially a great resource but ill designed to treat it as such because of its individual question focus thus the is X to Y nature of the questions. I am impressed by the update to the Tag which include the CVEs and suggest we consider placing other references in that tag to consolidate information ...

To some extent, exploit development is covered here. However, sometimes the question steps too much into the coding techniques used that it becomes a better fit for Stackoverflow. To be honest, I agree with you. I don't think it's unreasonable to have an SE Q&A site for exploit development. To start such site, you can go ahead and create a proposal on ...

No. Since it's beta, we cannot normally migrate it to it. The mods can just look the other way while we rack more Tor questions here. Eventually, the new Tor.SE will slowly sufficate and die

Whoops. Fixed now, though it will take a bit for the page caching to update to reflect the fix.

Let's take a look at these sample questions: What are some alternative clients to the Pybitmessage client? No, this would not be on topic here (although it's already been asked) - but I don't think this should be ontopic on any SE site, this specifically asks for product recommendations ("shopping list" questions) which have been deemed to not be a good ...

As @schroeder says, this is not allowed and is opinion-based. However, what you can do instead is ask for criteria that should be considered when choosing such a product, and how to compare. For example, this question I asked several years ago. This is not subjective, nor does it have the other problems that product recommendation questions typically ...

I do not think you need to be a pro, but the people who tend to get up enough votes to review close votes and make those decisions tends to be people who are security pros or are at least very into security. Discussion questions, especially on high level concepts or news stories are going to generate more opinion type questions. Support questions are ...

As you surmise, the question is off-topic. It isn't about designing or analyzing a security policy. It isn't even about configuring a tool to implement a security policy, which is strictly speaking off-topic (configuring IT tools is off-topic here, and usually on-topic on sites such as Super User, Unix & Linux, Android, Server Fault, Network Engineering, ...

If you wish to ask a "How to use" question I suggest the question should reflect the effort that you have already put in. I would like to give two examples of questions where the OP wanted to use nmap to scan a network. However the way these questions were framed made a huge difference on the amount of attention they received. Question 1: How to create a ...

I think the question is on topic, ethical and useful. If you find a vulnerability on your system you need to do these things: Make a decision if you should take down the app immediately. Figure out if an attacker has already used the vulnerability to breach your system. Understanding what the vulnerability could be used for is key to both those things, and ...

Depending on the details of the question, I'd say that the techniques for how to code something falls under a "programming" question and not a security question. Questions dealing with the impact or efficacy of obfuscation would be on-topic here.

It should be noted that "code review" is definitely on topic here, whereas "review THIS code" is not - these are different things. When I said that code review is ontopic here, I mean that the methodology is ontopic, how to review code, and specific issues that arise during the review, as a result of the review, or in applying the wider context to ...

If you feel like explaining de-obfuscation techniques, please go ahead and post a canonical Q&A, for example "How to analyze obfuscated PHP code?" Answering a particular question is bad for two reasons: it conveys a message that such questions are OK. I leave it for you to decide whether questions like "what does the script do and where did I get it ...