4

This little criminal has had his question up on our site for several hours.

This isn't academic. It isn't a good question. It's some two-bit amateur criminal who needs our help in order to delete your family photos and charge you money to get them back.

Can we all agree this isn't something we want on the site?


Reason for asking: community moderation isn't very effective these days. Too much crap, too few tools for sorting it. However, moderators feel like they can't take unilateral action absent a policy endorsing it, so they havne't acted on this post.

Can we agree that it's okay for moderators to delete explicitly-criminal posts?

I don't want to be enabling these vile psychopaths.


In one of my first meta interactions on the network, in 2011, Joel and Jeff said:

Unless it is a clear call for warez, discussion of DRM should be given the benefit of the doubt.

I agree that discussion of code that could potentially be used for nefarious purposes is fine in many contexts. The field of information security couldn't exist without it. But when there's a clear criminal intent... that's the case we must not tolerate.

37
  • 1
    In the meanwhile, the post has been deleted, thanks to cross-posting in off-topic chat rooms. :P I'd still like a resolution here for future cases.
    – anon
    Commented Aug 7, 2018 at 17:06
  • 4
    I always have, and always will, down/close/delete any questions about malware development. I really don't give a PHP how vociferously they claim that it's for white-hat 'learning purposes'. Commented Aug 7, 2018 at 17:19
  • 2
    @Jeremy come on, you can't go calling names at a specific user :P. I removed your "little criminal" and other ranty bits...
    – user1596138
    Commented Aug 7, 2018 at 17:25
  • 4
    I agree, "little criminal" is bad. OP may be a big criminal, or a right-sized criminal. Commented Aug 7, 2018 at 17:27
  • 7
    How many ransomware authors do you know that announce their product on a public web site? It was just a dumb joke. Do not intentionally deface a post, that is another slippery slope that is not funny in the least. It just isn't necessary. Commented Aug 7, 2018 at 17:28
  • 2
    @HansPassant who cares if it's a joke or not? Lets get rid of such posts, and the account, immediately. I do agree with the 'no vandalism' aspect, however. Commented Aug 7, 2018 at 17:31
  • 6
    I don't understand why people need to defend the right to make personal attacks on people and then blame the mods or the community if the comments are deleted. Seriously. People need to really evaluate whether they're willing to abide by the CoC. It's really time for the outrage of expecting some reasonable standard of behaviour to stop. Calling someone a "criminal" or any name is not acceptable.
    – user3956566
    Commented Aug 7, 2018 at 17:37
  • 4
    @YvetteColomb I didn't pick it out of thin air: they were developing criminal software!
    – anon
    Commented Aug 7, 2018 at 17:38
  • 2
    Ransomware isn't an interesting technical project that someone does for fun. It's technically boring.
    – anon
    Commented Aug 7, 2018 at 17:39
  • 1
    @Jeremy irrelevant. If every time people called people the names that come into their brains, there'd be mayhem. Do you think people who don't say those things don't get upset? It's called biting your tongue and dealing with it in an adult fashion. You comment on the behaviour not the person. At least in the real world where I live, people are liable to get dragged into court if they call people names.
    – user3956566
    Commented Aug 7, 2018 at 17:40
  • 1
    @Jeremy : How do you know the OP agrees with you? Maybe he's doing this just for practice? Maybe he's looking to become a white hat or an IT forensic in the future and wants to get a better insight in how ransomware can be made/operates? You have no idea what the OP's intent with this project is. Don't judge him too quickly. Commented Aug 7, 2018 at 17:42
  • 3
    @YvetteColomb Criminal wasn't chosen as an insult, it was descriptive. "Two-bit" -- that actually was an insult
    – anon
    Commented Aug 7, 2018 at 17:43
  • 6
    @Jeremy And "vile psychopaths"? Also, asking how to encrypt a file isn't actually a criminal activity, last I checked.
    – Servy
    Commented Aug 7, 2018 at 17:45
  • 6
    @VisualVincent Sure, you shouldn't judge the OP's intentions. But if the OP has any amount of common sense, he/she would give a lengthy explanation when the question has malware/criminal activity written all over it. It's like walking into the airport with an assault rifle and a bullet-proof vest. Sure you don't know what the person is trying to accomplish. But it's got bad news written all over it.
    – Mysticial
    Commented Aug 7, 2018 at 17:48
  • 4
    @Mysticial The whole mess comes entirely from the method names that the person used for their methods. The actual code being asked about is nothing more than the code to encrypt a file, something that there are tons of questions about, basically none of which are accused of being malicious. They didn't need to justify why they needed to encrypt a file, they just needed to use a different method name to avoid the whole problem.
    – Servy
    Commented Aug 7, 2018 at 17:53

1 Answer 1

3

Yes, it's allowed. In fact, one of the actual real questions asked by a criminal is still on the site:

Destroying a specific session in Code Igniter

The question you linked is a technical question, asking about a coding problem. That's what we are here for.


As for "enabling"...don't answer or help if you don't want to. The community closed and deleted the question just fine. Sure it didn't take place immediately, but honestly, flagging for moderator attention isn't what brought the question to my attention either. I noticed it in one of the cross posted chat rooms.

Which brings me to another aspect of this particular question: Handling the questions correctly. If you don't think a question is appropriate, flag it. Don't get in an edit war. Don't berate the user. Just vote to close an move on. Before I mentioned something in the comments, this post had a single close vote, but had been edited several times to try and hide the content.

6
  • 4
    I agree, no edit war, no comments, just exterminate the user account immediately. Commented Aug 7, 2018 at 17:25
  • 1
    How about we focuss all the "unwelcomeness" on to these types of users? It's better for us, and it's better for them.
    – Mysticial
    Commented Aug 7, 2018 at 17:29
  • I feel like this response misses a major distinction between the two threads. One thread makes very clear it's being used for malicious purposes - it says "ransomware" right there in the code. The other does not - and arguably never was used maliciously (or at least, no more maliciously than their Postfix install...). Making a bullet is a different act than shooting someone, even if both involve a bullet.
    – ceejayoz
    Commented Aug 8, 2018 at 0:22
  • 1
    "arguably" this wasn't used to do anything malicious either. Functions can be named anything. I didn't miss the distinction between the two. If you are going with that bullet analogy, the question here, for both of them, was at the making a bullet phase.
    – Andy Mod
    Commented Aug 8, 2018 at 0:47
  • 1
    @Andy If we had a "Gunsmiths StackExchange", surely "I'd like to know how to make my own bullets" would be treated differently than "I'd like to know how to make my own bullets to assassinate a head of state"? In one, intent is very clear.
    – ceejayoz
    Commented Aug 8, 2018 at 0:50
  • @ceejayoz Arguing by analogy is not a good way to argue. In this example, the "make a bullet" is the question being discussed in this meta question. "shooting someone" is the question that was involved in an actual criminal case, where someone was convicted of a crime. In any case, I've stated my opinion, if you disagree, vote how you wish. I encourage you to post a response on the linked duplicate if you want to expand on that vote.
    – Andy Mod
    Commented Aug 8, 2018 at 1:04