Timeline for Problematic PHP Cryptography Advice in Popular Questions
Current License: CC BY-SA 3.0
17 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Mar 20, 2017 at 9:15 | history | edited | CommunityBot |
replaced http://meta.stackoverflow.com/ with https://meta.stackoverflow.com/
|
|
Jul 16, 2015 at 1:30 | comment | added | Salvador Dali | You told about rewarding good answers for highly visible security related question (whose answers are either wrong or outdated). I have one for you: stackoverflow.com/a/31443898/1090562 | |
May 15, 2015 at 12:05 | vote | accept | Scott Arciszewski | ||
May 11, 2015 at 22:20 | comment | added | Bruno | @ircmaxell The problem with this edits is that it confuses authorship. While readers have the option to go into the history details, few will do (and it's even worse if the answer gets quoted elsewhere). Editing answers from other users in a way that changes their meaning is misrepresenting these authors (in a good or bad way). Your answers have your name on it, you generally don't want someone else make you say something you didn't. That could almost be fraudulent. Despite the collaborative editing features, SE is geared towards answers by individuals, who get the credit or the blame. | |
May 11, 2015 at 21:23 | comment | added | ircmaxell | @BradLarson perhaps this is slightly off topic, but "How much should we trust a lone editor" <-- we already do. If they have 2k rep, completely. That's how it works today anyway. Anything can be abused. But I'd rather have the power to do something about it, than just sit and talk with no good ideas. Is there potential for abuse? Sure. But I think the opposite potential (no action) is far worse... | |
May 11, 2015 at 17:39 | comment | added | Brad Larson Mod | @ircmaxell - It's a tricky issue. I've seen far too many people abuse edits like this to destroy answers they don't like, that compete against theirs, or that they simply disagree with. How much should we trust a lone editor? There are many cases where this has worked (the examples you point to) and many others where it has been abused. How do we vet these edits so that good answers aren't vandalized or punished? It's a difficult question. | |
May 11, 2015 at 14:13 | comment | added | Madara's Ghost | @ircmaxell I've edited to clarify my point. Adding a security notice is fine. | |
May 11, 2015 at 14:13 | history | edited | Madara's Ghost | CC BY-SA 3.0 |
added 12 characters in body
|
May 11, 2015 at 14:13 | comment | added | Aron | Unfortunately, I think the reason why SO works well actually works against infosec. Since answers bubble up to the top based on popular votes. Good results only bubble up iff the majority of users are knowledgeable in the field. Unfortunately infosec really is an elite field as it is an arms war. | |
May 11, 2015 at 14:08 | comment | added | ircmaxell | Do not edit an answer to say "this answer is wrong/bad/etc" <- that directly goes against the recommendations in this answer, which we've been using for a long time... | |
May 11, 2015 at 13:53 | comment | added | Bruno | I just can't agree with that notion that it's OK to edit someone else's code: you think you have understood the intent of the answer, but maybe you haven't (how to determine who's the expert, without more elaborate counter arguments?). By doing so, you may introduce more mistake, but that's still mostly look as if it was coming from the initial author. | |
May 11, 2015 at 12:29 | comment | added | l4mpi | @MadaraUchiha "that is a comment" - I would love to agree with you, but as the SE mantra is "comments are temporary and can (and will) be deleted without notice, at random, if somebody flags it for any reason whatsoever", that simply doesn't work. The official response to people complaining about (valid, valuable) comments being deleted is always "if it was important then it should have been part of an answer, not a comment". Thus editing in a disclaimer seems like the second best course of action - the best would be to delete the offending answer, but there's no chance that'll ever happen. | |
May 11, 2015 at 12:17 | comment | added | Madara's Ghost | That is a comment. Not an edit. Also, just wiping out the entire current answer (as was done) is not OK. | |
May 11, 2015 at 12:15 | comment | added | Gilles 'SO- stop being evil' | For an answer that uses md5 incidentally, replacing md5 by sha256 is fine (assuming sha256 doesn't introduce problems like backward compatibility). For an answer that's centered on md5, downvoting is the right solution. ‘Do not edit an answer to say "this answer is wrong/bad/etc"’ — sometimes you should, not to say “this is bad”, but to say “this is harmful” (and explain why). There's a difference between bad engineering practice (downvote, comment) and actively harmful answers (where the potential for harm must be clearly conveyed). Regarding closed questions: they should be deleted then. | |
May 11, 2015 at 10:45 | history | edited | jonrsharpe | CC BY-SA 3.0 |
Removed religion - this excludes those who don't believe/believe something else
|
May 11, 2015 at 10:30 | vote | accept | Scott Arciszewski | ||
May 11, 2015 at 10:31 | |||||
May 11, 2015 at 10:28 | history | answered | Madara's Ghost | CC BY-SA 3.0 |