Skip to main content
replaced http://stackoverflow.com/ with https://stackoverflow.com/
Source Link

It would be interesting to hear what the wise folks at IT Security have to say about this, since I expect they have established their own set of rules on what questions it is ethical to ask. Indeed, some discussion of such matters can be found on their Meta at Clarify our stance on black hat questions.

My feeling is: let the question stand as long as the OP is neither:

  • failing to follow the model of responsible disclosure in a situation where there is a particularly clear moral argument for it
  • blatantly an irresponsible script kiddie looking for someone to help them break a specific system, and the question is too specific to be of use to future readers

Allowing public discussions about how to create malware doesn't just help blackhat malware authors, it also helps penetration testers and people trying to defend against malware. Defending against an attack often requires a decent understanding of how the attack works, which is best obtained by performing the attack yourself in a controlled environment. If you're a web developer, imagine trying to ensure your applications were secure against, say, SQL injection or XSS without ever having an injection vulnerability demonstrated to you, or ever creating one yourself, because merely creating such things or helping somebody to do so was considered unethical. The idea is absurd.

I can't comment on whether I agree with the decision to censor the specific deleted questionthe specific deleted question asked about here, since I'm below 10k rep and so now unable to view it. Judging from the screenshot, the entire issue is moot for this question since - moral issues aside - it deserved to be purged for crapness alone.

It would be interesting to hear what the wise folks at IT Security have to say about this, since I expect they have established their own set of rules on what questions it is ethical to ask. Indeed, some discussion of such matters can be found on their Meta at Clarify our stance on black hat questions.

My feeling is: let the question stand as long as the OP is neither:

  • failing to follow the model of responsible disclosure in a situation where there is a particularly clear moral argument for it
  • blatantly an irresponsible script kiddie looking for someone to help them break a specific system, and the question is too specific to be of use to future readers

Allowing public discussions about how to create malware doesn't just help blackhat malware authors, it also helps penetration testers and people trying to defend against malware. Defending against an attack often requires a decent understanding of how the attack works, which is best obtained by performing the attack yourself in a controlled environment. If you're a web developer, imagine trying to ensure your applications were secure against, say, SQL injection or XSS without ever having an injection vulnerability demonstrated to you, or ever creating one yourself, because merely creating such things or helping somebody to do so was considered unethical. The idea is absurd.

I can't comment on whether I agree with the decision to censor the specific deleted question asked about here, since I'm below 10k rep and so now unable to view it. Judging from the screenshot, the entire issue is moot for this question since - moral issues aside - it deserved to be purged for crapness alone.

It would be interesting to hear what the wise folks at IT Security have to say about this, since I expect they have established their own set of rules on what questions it is ethical to ask. Indeed, some discussion of such matters can be found on their Meta at Clarify our stance on black hat questions.

My feeling is: let the question stand as long as the OP is neither:

  • failing to follow the model of responsible disclosure in a situation where there is a particularly clear moral argument for it
  • blatantly an irresponsible script kiddie looking for someone to help them break a specific system, and the question is too specific to be of use to future readers

Allowing public discussions about how to create malware doesn't just help blackhat malware authors, it also helps penetration testers and people trying to defend against malware. Defending against an attack often requires a decent understanding of how the attack works, which is best obtained by performing the attack yourself in a controlled environment. If you're a web developer, imagine trying to ensure your applications were secure against, say, SQL injection or XSS without ever having an injection vulnerability demonstrated to you, or ever creating one yourself, because merely creating such things or helping somebody to do so was considered unethical. The idea is absurd.

I can't comment on whether I agree with the decision to censor the specific deleted question asked about here, since I'm below 10k rep and so now unable to view it. Judging from the screenshot, the entire issue is moot for this question since - moral issues aside - it deserved to be purged for crapness alone.

replaced http://meta.security.stackexchange.com/ with https://security.meta.stackexchange.com/
Source Link

It would be interesting to hear what the wise folks at IT Security have to say about this, since I expect they have established their own set of rules on what questions it is ethical to ask. Indeed, some discussion of such matters can be found on their Meta at Clarify our stance on black hat questionsClarify our stance on black hat questions.

My feeling is: let the question stand as long as the OP is neither:

  • failing to follow the model of responsible disclosure in a situation where there is a particularly clear moral argument for it
  • blatantly an irresponsible script kiddie looking for someone to help them break a specific system, and the question is too specific to be of use to future readers

Allowing public discussions about how to create malware doesn't just help blackhat malware authors, it also helps penetration testers and people trying to defend against malware. Defending against an attack often requires a decent understanding of how the attack works, which is best obtained by performing the attack yourself in a controlled environment. If you're a web developer, imagine trying to ensure your applications were secure against, say, SQL injection or XSS without ever having an injection vulnerability demonstrated to you, or ever creating one yourself, because merely creating such things or helping somebody to do so was considered unethical. The idea is absurd.

I can't comment on whether I agree with the decision to censor the specific deleted question asked about here, since I'm below 10k rep and so now unable to view it. Judging from the screenshot, the entire issue is moot for this question since - moral issues aside - it deserved to be purged for crapness alone.

It would be interesting to hear what the wise folks at IT Security have to say about this, since I expect they have established their own set of rules on what questions it is ethical to ask. Indeed, some discussion of such matters can be found on their Meta at Clarify our stance on black hat questions.

My feeling is: let the question stand as long as the OP is neither:

  • failing to follow the model of responsible disclosure in a situation where there is a particularly clear moral argument for it
  • blatantly an irresponsible script kiddie looking for someone to help them break a specific system, and the question is too specific to be of use to future readers

Allowing public discussions about how to create malware doesn't just help blackhat malware authors, it also helps penetration testers and people trying to defend against malware. Defending against an attack often requires a decent understanding of how the attack works, which is best obtained by performing the attack yourself in a controlled environment. If you're a web developer, imagine trying to ensure your applications were secure against, say, SQL injection or XSS without ever having an injection vulnerability demonstrated to you, or ever creating one yourself, because merely creating such things or helping somebody to do so was considered unethical. The idea is absurd.

I can't comment on whether I agree with the decision to censor the specific deleted question asked about here, since I'm below 10k rep and so now unable to view it. Judging from the screenshot, the entire issue is moot for this question since - moral issues aside - it deserved to be purged for crapness alone.

It would be interesting to hear what the wise folks at IT Security have to say about this, since I expect they have established their own set of rules on what questions it is ethical to ask. Indeed, some discussion of such matters can be found on their Meta at Clarify our stance on black hat questions.

My feeling is: let the question stand as long as the OP is neither:

  • failing to follow the model of responsible disclosure in a situation where there is a particularly clear moral argument for it
  • blatantly an irresponsible script kiddie looking for someone to help them break a specific system, and the question is too specific to be of use to future readers

Allowing public discussions about how to create malware doesn't just help blackhat malware authors, it also helps penetration testers and people trying to defend against malware. Defending against an attack often requires a decent understanding of how the attack works, which is best obtained by performing the attack yourself in a controlled environment. If you're a web developer, imagine trying to ensure your applications were secure against, say, SQL injection or XSS without ever having an injection vulnerability demonstrated to you, or ever creating one yourself, because merely creating such things or helping somebody to do so was considered unethical. The idea is absurd.

I can't comment on whether I agree with the decision to censor the specific deleted question asked about here, since I'm below 10k rep and so now unable to view it. Judging from the screenshot, the entire issue is moot for this question since - moral issues aside - it deserved to be purged for crapness alone.

added 159 characters in body
Source Link
Mark Amery
  • 153.5k
  • 15
  • 128
  • 195

It would be interesting to hear what the wise folks at IT Security have to say about this, since I expect they have established their own set of rules on what questions it is ethical to ask. Indeed, some discussion of such matters can be found on their Meta at Clarify our stance on black hat questions.

My feeling is: let the question stand as long as the OP is neither:

  • failing to follow the model of responsible disclosure in a situation where there is a particularly clear moral argument for it
  • blatantly an irresponsible script kiddie looking for someone to help them break a specific system, and the question is too specific to be of use to future readers

Allowing public discussions about how to create malware doesn't just help blackhat malware authors, it also helps penetration testers and people trying to defend against malware. Defending against an attack often requires a decent understanding of how the attack works, which is best obtained by performing the attack yourself in a controlled environment. If you're a web developer, imagine trying to ensure your applications were secure against, say, SQL injection or XSS without ever having an injection vulnerability demonstrated to you, or ever creating one yourself, because merely creating such things or helping somebody to do so was considered unethical. The idea is absurd.

I can't comment on whether I agree withI can't comment on whether I agree with the decision to censor the specific deleted question asked about here, since I'm below 10k rep and so now unable to view it. Judging from the decision to censor the specific deleted question asked about herescreenshot, the entire issue is moot for this question since I'm below 10k rep and so now unable to view- moral issues aside - it deserved to be purged for crapness alone.

It would be interesting to hear what the wise folks at IT Security have to say about this, since I expect they have established their own set of rules on what questions it is ethical to ask. Indeed, some discussion of such matters can be found on their Meta at Clarify our stance on black hat questions.

My feeling is: let the question stand as long as the OP is neither:

  • failing to follow the model of responsible disclosure in a situation where there is a particularly clear moral argument for it
  • blatantly an irresponsible script kiddie looking for someone to help them break a specific system, and the question is too specific to be of use to future readers

Allowing public discussions about how to create malware doesn't just help blackhat malware authors, it also helps penetration testers and people trying to defend against malware. Defending against an attack often requires a decent understanding of how the attack works, which is best obtained by performing the attack yourself in a controlled environment. If you're a web developer, imagine trying to ensure your applications were secure against, say, SQL injection or XSS without ever having an injection vulnerability demonstrated to you, or ever creating one yourself, because merely creating such things or helping somebody to do so was considered unethical. The idea is absurd.

I can't comment on whether I agree with the decision to censor the specific deleted question asked about here, since I'm below 10k rep and so now unable to view it.

It would be interesting to hear what the wise folks at IT Security have to say about this, since I expect they have established their own set of rules on what questions it is ethical to ask. Indeed, some discussion of such matters can be found on their Meta at Clarify our stance on black hat questions.

My feeling is: let the question stand as long as the OP is neither:

  • failing to follow the model of responsible disclosure in a situation where there is a particularly clear moral argument for it
  • blatantly an irresponsible script kiddie looking for someone to help them break a specific system, and the question is too specific to be of use to future readers

Allowing public discussions about how to create malware doesn't just help blackhat malware authors, it also helps penetration testers and people trying to defend against malware. Defending against an attack often requires a decent understanding of how the attack works, which is best obtained by performing the attack yourself in a controlled environment. If you're a web developer, imagine trying to ensure your applications were secure against, say, SQL injection or XSS without ever having an injection vulnerability demonstrated to you, or ever creating one yourself, because merely creating such things or helping somebody to do so was considered unethical. The idea is absurd.

I can't comment on whether I agree with the decision to censor the specific deleted question asked about here, since I'm below 10k rep and so now unable to view it. Judging from the screenshot, the entire issue is moot for this question since - moral issues aside - it deserved to be purged for crapness alone.

Added anchor text.
Source Link
user456814
user456814
Loading
added 27 characters in body
Source Link
Mark Amery
  • 153.5k
  • 15
  • 128
  • 195
Loading
Source Link
Mark Amery
  • 153.5k
  • 15
  • 128
  • 195
Loading