To simplify voting I will post my suggested solution here as an answer instead of as part of the question.
I think we should keep nfc as the main tag, and make the other a synonym. Three letter abbrivations are annoying, but in this case I think the term NFC is much more well established than near field communication.
We can move the tag excerpt from near-...
I agree with @RoryAlsop here. Let's keep the main tag csrf and let cross-site-request-forgery be a synonym, just in case.
Just as with SQL, which is rarely ever called "Structured Query Language", we should stick to the usage that's most common. XSS and CSRF are well-established acronyms that keep the tag list concise.
I don't see a difference in usage. Some questions are even tagged with both.
Since ssl is a synonym for tls, and tags are preferably nouns, I'd suggest to merge them withtls-interception as a master and ssl-interception as a synonym.
Replace the tag to fit the OP's intentions. Don't mark it as a synonym.
I do not think they should be merged. I think those three questions tagged as checksum should simply be edited to use hash instead. There is a very big difference between checksums and hashes. A hash is a stateless function that maps data of an arbitrary size to a fixed size in the form ...
I agree there is a very straightforward argument for having lfi as a synonym of local-file-inclusion, but file-inclusion should probably be renamed to remote-file-inclusion.
File-inclusion itself should probably be made a synonym of one or the other... I would suggest that it be a synonym of remote-file-inclusion, ust based on numbers of questions.
While I agree that in the world of web appsec, CSP == Content Security Policy, I'm not sure that's true in all areas of information security.
Taking a look at the wikipedia disambiguation page for CSP, the following jump out as potential legitimate uses of "CSP" on this site:
Credential Service Provider -- seems to be a US Gov term for an authority who ...
“POLP” is not a common abbreviation in my experience. I didn't recognize it in your question before I saw the expansion, whereas I'm familiar with the concept under its full name. So I don't see the value of keeping the synonym around. That one question (which had an even worse tag) should just be retagged.
Also, since the tag length limit has been raised, ...
Why is using a pseudo-random key considered more practical than a one-time pad?
Mobile OTP - Secure?
Please explain Time-step in Time-Based One-Time Password Algorithm
This is a bad one. There are two and a half completely separate tags overlapping. I'll be using the Amazon Cloud as an example here:
Refers to someone else whose services or platform you use remotely
They can offer anything from Computational Services(Kinesis Stream), Platforms(EC2), APIs(API Gateway), Messaging(email, SMS), or Storage(S3, ...
Synonyms are not just for words that mean exactly the same - they are also for words that are likely to be used to refer to the same questions, or for search terms people are likely to use to find posts.
So for this one, I don't see a reason to change it - the synonym is helpful for the usage it is intended for.
That depends. Is the incident analysis something that has to be investigated, or is it an incident for testing and training purposes only? Is there anything to investigate, or would there be anything to investigate?
I can cause an incident on my own systems and throw an alarm, but may not know why I threw it in my IDS. At that point I ...
If one using tpm obviously asks for about trusted-computing, the other is not true. You can ask about trusted-computing without talking about TPM at all.
For this reason, I disagree on merging these two.
No, usb is not the same thing as usb-drive.
Most questions about USB something are about removable drives in general, and the fact that they happen to be connected over USB is just a matter of today's dominant technology. Maybe we should synonymize usb-drive to removable-drive.
We have a few questions about USB itself or about removable devices in general. ...
I'd agree: we have 77 tagged usb-drive and of the 11 tagged usb, 6 are definitely to do with USB drives. The other 5 are around the firmware attack.
If we have these set as synonyms, it's not going to adversely impact readability, and could help us.
I am not sure what the right course is here, but for the sake of discussion I will add a proposal:
Make cloud-computing a synonym of cloud (i.e. reverse the current synonym).
Make cloud-storage a synonym of cloud.
We don't have to do any retagging.
It is easy to use, or rather hard to missuse. If it is cloud related, tag it with a cloud tag and ...
No, they are different things.
An evil-twin is an AP that clones a legitimate AP in order to try to capture wireless traffic by getting clients to connect to it instead of the genuine AP.
A rouge-ap is an unauthorized AP placed on a wired network, potentially to allow hacking from outside the building, bypassing other physical security measures that ...
I think this question deserves an answer, but AviD already wrote all there is to say in a comment. So I will just copy paste it here:
In principle you are completely correct, however on consideration it is (as of right now) a useless tag to begin with (as are the other tags created for that question), so I just retagged the question (and closed it, but ...
In my experience, "Incident analysis" is part of a formal event lifecycle. A collection of security events, through automated or manual correlation are collected for formal analysis.
From a procedural standpoint, incident analysis may result in an investigation. The difference being the depth of analysis, the expertise of the investigator, the time they ...
Cloud is basically both of these:
The tag cloud is way too general, and plus, the other two existing ones will still show up if we drop it.
So I believe we should drop cloud and leave everything else alone.