-2

I keep coming across questions like this: https://stackoverflow.com/questions/36846094/how-can-%C4%B1-receive-captcha-using-php-curl

Now I doubt the question will get any attention, but I feel there should be a flagging option specifically for this that also hides the question as there have been instances where I have seen people post nearly complete code to brute force sites such as Facebook that took far too long to take down so the code could not be used by others.

I think that a option to flag for the reason of violating a TOS should be added and any such questions should be removed (hidden) from public eye until a trustee has a chance to declare the question safe thus marking it visible, or unsafe thus permanently removing it and possibly applying a punitive or restrictive action against the poster.

Obviously such system could be circumvented by the poster making his question specific enough as to hide his true intent, I just dont feel that we should make it this easy.

5
  • 5
  • 1
    I've written captcha-breaking code before. I didn't use it for spammy purposes -- rather, I used it to demonstrate that the captcha was incredibly weak, and argue with the developers for replacing it with a better one. The line between educational use and malicious use is often unclear without context that we don't have.
    – Jeremy
    Apr 25, 2016 at 17:15
  • 1
    @JeremyBanks Agreed, the example easily falls into a grey zone, but as I mentioned there have been instances where the intentions were clear, usually posted by new "anonymous" accounts, the question gets put on hold quick enough, by is still visible and damaging code still in the open.
    – Wobbles
    Apr 25, 2016 at 17:15
  • @JeremyBanks also agree that there are perfectly legit reasons to break security systems, but the code and specifics to do so should not be allowed on SO. Companies pay people to try to break their security all the time, but when they do or get close, they dont allow the info to be published.
    – Wobbles
    Apr 25, 2016 at 17:17
  • 3
    I partially agree. There are cases where the question asker does provide enough context to make it clear that they have malicious intent (perhaps by showing us the specific site they're targeting). I often downvote, VTC and VTD such questions. We also sometimes benefit from the fact that such questions are often asked by people who don't/can't bother to formulate an on-topic question. ;)
    – Jeremy
    Apr 25, 2016 at 17:25

1 Answer 1

10

It is not our job to enforce the Terms of Service of any company. If a user is violating the Terms of Service of Stack Exchange, we have moderators and community managers. If a user is violating the Terms of Service of another entity, well, it's their terms. They need to deal with it.

We are not the police of the development community. We aren't the emergency call center. At best, we are the nosy neighbor that watches through closed blinds and grumbles about that one guy across the street. There are many, many, reasons a user may want to do something "suspicious", but that doesn't mean it if up to us to deal with it. It also doesn't mean they are violating any terms. We simply don't know and don't have the authority to enforce them.

We agreed to the Stack Exchange Terms of Service. If those aren't being violated and you don't like the question, I suggest you down vote the question and move on. If the question is poorly written, flag it accordingly (unclear, too broad, opinion based, lack of code, recommend a tool).

5
  • Way to not read the OP... You basically seem to have skipped the whole thing.
    – Wobbles
    Apr 26, 2016 at 12:25
  • 2
    "I think that a option to flag for the reason of violating a TOS should be added and any such questions should be removed (hidden) from public eye until a trustee has a chance to declare the question safe thus marking it visible" - I believe that is the crux of what you are asking for, no? My response is telling you that is not appropriate. We are not here to determine if something violates the terms of service for other sites.
    – Andy Mod
    Apr 26, 2016 at 12:35
  • And what about this sites TOS? "Use of the Network or Services to violate the security of any computer network, crack passwords or security encryption codes".
    – Wobbles
    Apr 26, 2016 at 12:46
  • 2
    Are you an employee of Stack Exchange? Are you provided compensation by Stack Exchange to enforce their terms of service? If not, then it is not your job to enforce them. It is your job to adhere to the terms. It is not your position to ensure that others are doing the same.
    – Andy Mod
    Apr 26, 2016 at 12:48
  • That's a weak argument; then why the flagging system at all?
    – Wobbles
    Apr 26, 2016 at 15:53

Not the answer you're looking for? Browse other questions tagged .