Thomas Pornin
  • Member for 11 years, 1 month
  • Last seen more than a month ago
Why do people post questions on here they can easily google an answer for?
53 votes

Google-searching is a rarefying skill. It seems to be a question of generation. Let me put some historical context. In days of my youth (say, 25 years ago, in the late 1980s and early 1990s), when ...

View answer
I hereby declare the 22nd of September each year to be Bear Day!
Accepted answer
39 votes

The Bear approves of your oath of fealty. You may keep on chanting the glory of your ursine overlords.

View answer
Request for comment: Stack Overflow is hiring a Director of Information Security
31 votes

Your listing seems to imply that the director of information security will respond to the CTO. This may be suboptimal. The CISO, theoretically, should respond only to the CEO and the board. (At least ...

View answer
Clarify our stance on black hat questions
29 votes

The root of the issue is political correctness. Namely, you are all sissies. There, I have said it, now the explanations: what "we" want is a serious site with a lot of information and analysis and ...

View answer
Is Security.SE only for professionals?
26 votes

To complement what @Rory says, I'd like to point out that there is no rule that says that any question fits somewhere in the StackExchange network. By design, the SE sites concentrate on questions ...

View answer
Should we change our name to “Information Security” or “Security”?
24 votes

I personally prefer "Information Security" because "Security" alone has too high a potential for drifting into really distinct areas, e.g. politic issues with regards to terrorism ("Homeland Security")...

View answer
Should we allow malware authors to weigh in on questions?
16 votes

This reminds me of this question and my answer. Basically, you have an answer which is technically valid, informative, and fully honest in its disclosure of conflict of interests; and yet, it comes ...

View answer
Should answers contain images which add nothing to the answer?
15 votes

Sometimes people add pictures because they are trying to get the stress out of a situation, and their sense of humour tells them that a picture is the way to go. In general, a bit of humour is not ...

View answer
Is This Password Scheme Secure anti pattern/canonical question?
12 votes

"Is this scheme secure" is an anti-pattern in general, not only on this site, but over the whole history of cryptography. The whole concept of an inventor spurting out his concoction and asking other ...

View answer
Requests for Question of The Week blog posts
Accepted answer
10 votes

I propose this question: How valuable is secrecy of an algorithm? because it tries to explore the limits of a well-known security slogan. Also, I am narcissic enough to enjoy reading my own answer.

View answer
Downvoting anything that looks like "how do I write malware"
7 votes

Whether a question will be considered acceptable or not has a lot more to do with how it is worded than its actual topic. The general idea is that "pls explain how to hack this site" is a bad question ...

View answer
Does it make a sense to add own answer over an already accepted answer?
6 votes

I did just that there and there. In both cases, hundreds of people agreed that it was a good thing, and in both cases the OP moved the "accepted" mark to my new answers, thereby marking his ...

View answer
Complaint: Too hard to change my vote on an answer
6 votes

It seems that at an early point in the history of StackOverflow, they got bitten by several wide-scale "gaming" attempts which involved downvoting and then subsequent undoing of said downvotes. The SO ...

View answer
Policy on substantial edits from new accounts (OP's alter egos)
4 votes

Reputation gains from edits work only up to 2000 rep. An industrious user may pull it off once or twice (subject to actually doing 1000 edits, that all get accepted -- this is hard work), but repeated ...

View answer
Recommanded method of exchange with private information
4 votes

Stack Exchange is built on the idea that all the information is made public (except who voted for what). They even frown on private chat rooms. Thus, the best practice for private or sensitive ...

View answer
Why do some people have a "pop out" profile when the mouse hovers over the gravatar?
3 votes

It is thoroughly documented on the "established user" privilege page: you get the "extended usercard" when you both have at least 1000 reputation, and the "about me" section of your profile contains ...

View answer
Theoretical security implications
2 votes

At least the Tor question should be either on the Tor site, or here on the main site. Indeed, it is a question about traffic analysis and correlation of data, which seems more on-topic on security.SE ...

View answer
question link visited/unvisited colors (new questions are "grayed out")
1 votes

I think the problem is more a question of contrast. Personally, I have no problem concentrating on the "grayed out" parts, as long as the visited and unvisited links differ enough; it does not matter ...

View answer