2

Reviewing first posts, I came across an answer that included license keys for copyrighted software. I couldn't find a specific policy against that, but I flagged it and selected "other" as the reason, gave details, etc.

Did I just miss that policy, or is it covered under some broader policy?

The poster was attempting to answer the question, albeit poorly. Was there a more appropriate flag to use?

4
  • Another option is to edit the answer, and remove the license keys. Apr 9, 2015 at 4:31
  • Slightly related, even though it deals with a different scenario: meta.stackoverflow.com/questions/267699/…. Apr 9, 2015 at 4:33
  • @RetoKoradi OK. That makes sense. I'll do that too. Thanks.
    – Seamus
    Apr 9, 2015 at 4:34
  • @RetoKoradi Yes, that's very related. Thanks.
    – Seamus
    Apr 9, 2015 at 4:35

1 Answer 1

4

I have asked a variant of this question before as a similar circumstance arose for me. In the situation I encountered the OP provided username and password credentials to an admin account in a comment.

I think the correct course of action is to edit the post, changing the API key (or password, ouath token, private key, ...), then flag as "other", explain the situation and ask that the revision history be removed.

I feel that it is in everyone's best interest for Stack Overflow to try to mitigate these kinds of security disclosures. For obvious reasons.

0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .