29 votes
Accepted

Is offering money for a penetration test allowed

Flag it as spam. I think that's such an edge case it's not worth trying to document and I got plenty of flags on the question. Offering money for a pentest is solicitation of commerce at a point-in-...
user avatar
  • 38.1k
18 votes
Accepted

Should a question be marked as duplicate, even if the new one is better?

If a newer question encompasses a wider and a more detailed field of view, then I think it could be the core question and the older one made a dupe. In your example, the older question really only ...
user avatar
  • 123k
15 votes

Being repeatedly targeted and harassed with disputable/arbitrary deletions of answers by a specific moderator

I will stop contributing answers to this subforum This may be the source of your confusion and bad experience - back in the day we used to say this is not a forum. In particular, there are no threads....
user avatar
  • 2,074
14 votes

Being repeatedly targeted and harassed with disputable/arbitrary deletions of answers by a specific moderator

Ok, let's look at your 3 answers in question: Hacker from China: You conclude what every other answer did, that the hack could come from anywhere. You then talk about why you don't like software or ...
user avatar
  • 123k
13 votes

Is not having an answer publicly available a good reason to close a question?

"When will a vendor implement a new feature?" is not a great question, even if the answer has security implications. Until the information is made public, all we can do is opine. If there was a ...
user avatar
  • 123k
9 votes
Accepted

Would this question be accepted here?

Unfortunately, questions asking for resources, links, sources, etc. are off-topic because the answers would just keep growing without end. They are "open-ended" by default.
user avatar
  • 123k
8 votes

What's wrong with this question looking for an exploit?

It is unclear - and the comment below the question explains exactly why. If you want a question answered, please make it straightforward for those who volunteer their time to answer it. Also, 15 of ...
user avatar
  • 61.4k
8 votes

Are questions about malicious scripts off-topic?

Questions about malicious scripts can be on-topic. But that is not an accurate description of your question. “Here's a dump of obfuscated code, what does it do?” is not suitable for Security.SE, not ...
user avatar
8 votes

Tamper data in Chrome question closed

Could you please explain me... how a question about an extension, used for tampering data by many of security experts, is not related to a QA site on Information Security. If that question has to ...
user avatar
  • 71.9k
7 votes
Accepted

Are questions about malicious scripts off-topic?

Code analysis isn't generally on topic here. Because there are any number of obfuscated scripts you could dedicate a website to this topic. But that website is not Security Stack Exchange. Far more ...
user avatar
  • 61.4k
7 votes

What's wrong with this question looking for an exploit?

Since the question in the comments keeps coming up as "What is it you want," I'm going to extract my comment into an answer here: Assume that the links you posted are already broken. Now read your ...
user avatar
  • 940
7 votes
Accepted

Mention 2 names in one comment

No - this is by design. If you have a reply to something a commenter has asked, respond to them. For another commenter, reply to them separately. Remember, though, comments are supposed to be brief ...
user avatar
  • 61.4k
7 votes
Accepted

What is wrong with this legal question? Are legal questions on topic at all?

Questions that relate to various laws, where the law is the subject, can be on topic (if about security). Questions asking for legal interpretations or applications of the law are off-topic. Straight ...
user avatar
  • 123k
7 votes
Accepted

Is this Q as fishy as it looks to me?

I closed it under Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the concepts involved and clearly identify a ...
user avatar
  • 38.1k
6 votes

Is this question about allowing SSLv3 on topic?

From my perspective, the question is off-topic. It is actually more of a SuperUser-type question, as the answers indicate that the solution is found in a browser config. So, I can see your confusion. ...
user avatar
  • 123k
6 votes

Why it is opinion based to ask for possible pitfalls of an concept?

The Security.SE Help Center specifically says: You should only ask practical, answerable questions based on actual problems that you face. Chatty, open-ended questions diminish the usefulness of ...
user avatar
  • 3,552
6 votes

Why was my question about Hydra closed?

There is no ban on your question - it has just been closed by 5 members of the community, and my quick review agrees with them. That question is definitely off topic here. It is not a question about ...
user avatar
  • 61.4k
5 votes

I need help improving a question about an API deprecation affecting common browsers

I hadn't looked at that question until just now, but I can see why it got the close votes. The question itself boils down to "where is product x on vendor y's roadmap" - which is very rarely going to ...
user avatar
  • 61.4k
5 votes
Accepted

Would (parts of) this question be on-topic at security.se?

The question is about turning high-level security requirements into a concrete workflow. That's a pretty typical type of question for Security.SE. Although the study of security protocols is on-topic ...
user avatar
5 votes

Why is this question a bad one?

The "difficulty" is entirely up to how the application was designed and what resources they have to analyse player behavior. That makes the question too broad and up to interpretation. One game will ...
user avatar
  • 123k
5 votes
Accepted

Where to ask this security-related question?

We get a lot of these types of career questions. Unfortunately, they are all far too opinion-based to be a good fit on the site. In addition, they tend to be hyper-specific to the individual and the ...
user avatar
  • 123k
4 votes

How does my answer not answer my own question?

I think your answer post is valid. I'm guessing that some of the canned comments on 'requesting clarification' is down to the limited options. Sure, I can imagine a few minor edits that could make it ...
user avatar
  • 61.4k
4 votes
Accepted

I'd like to migrate my question to crypto.SE

To contact moderators about a post, use the “flag” button under that post. In this specific case, I don't see a reason to migrate. The question is on-topic here. In fact, it's arguably more on-topic ...
user avatar
4 votes

Is a question on how to evaluate anomalies in SOC reports on topic for this site?

I think one of the reasons why you are getting poor responses is that your question is not very focused. You might get the same type of responses here. This is what you have said: Prospective ...
user avatar
  • 123k
4 votes

Is this Q as fishy as it looks to me?

Do we support such questions at all? In the linked question, OP just dropped some code and asked if it's vulnerable. This sounds to me like a blatant request for code review and definitely didn't ...
user avatar
  • 43.8k
4 votes

What caused this post to bump to the front page?

Yes, that user made an edit to his answer on that question. This is how StackExchange works.
user avatar
  • 123k
3 votes

Duplicate question with different focus

Not an expert on networking, so I can not say a lot about the specifics of your question. Someone with better knowledge of that area could probably give you a more useful answer. But I think the ...
user avatar
  • 64.2k
3 votes

Can we use information gathering questions

The problem is that this is not a discussion site but a Q&A forum with a specific format. That format sets us apart, but yes, it also introduces limitations. Take a look at the other highly-...
user avatar
  • 123k
3 votes

Why isn't this question closed as too broad?

It takes five close votes (or one moderator's supervote, but they don't normally do that) to close a question. In any given day, there are maybe a half-dozen users reviewing the close-vote queue, so ...
user avatar
  • 34.4k
3 votes

Is this question about doing damage on a system ethical and on-topic?

I think the question is on topic, ethical and useful. If you find a vulnerability on your system you need to do these things: Make a decision if you should take down the app immediately. Figure out ...
user avatar
  • 64.2k

Only top scored, non community-wiki answers of a minimum length are eligible