All Questions

Tagged with
Filter by
Sorted by
Tagged with
32
votes
0answers
299 views

What is the status of the secure electronic opt-out of the mandatory arbitration that was promised?

In the comments of this post, Tim Post responds to my request for a "secure, electronic means" of the opt-out of mandatory arbitration with the following @jhpratt And you'll get one. And a lot of ...
1
vote
0answers
63 views

Getting attention for answers that have aways been incorrect [duplicate]

There's a question about what to do about outdated answers, but what if the answer is not outdated but was always incorrect and gave simply wrong information, or more seriously information that might ...
23
votes
2answers
218 views

A suggested edit cuts out allegedly malicious links. How do I safely check that claim and what review action do I take?

I came across this suggested edit on Movies.SE this morning. The edit cut out two shortened links (TinyUrl), claiming they linked to a virus, and added a disclaimer not to click said links in the ...
4
votes
2answers
105 views

Where to ask about improvements for a security scenario?

I'm building a mobile application that transfers points between users via QRCode. I'm concerned about security and am looking for effective simple yes secure algorithm to use. What is the best ...
18
votes
2answers
534 views

Can a hacker who hacked a Facebook account access security.stackexchange.com through their linked OAuth account?

Recently Facebook was hacked with 50M accounts compromised. I just got a message from a moderator of Stack Exchange site Information Security that my account has been suspended. I'm writing ...
18
votes
1answer
254 views

I reported a security issue but didn't hear back

Ten days ago, I reported a cross-site scripting bug on a stackexchange.com subdomain, and two days ago, I inquired if my report was received and whether I could help with further information. But so ...
-3
votes
2answers
1k views

Enabling Dance Dance Authentication [closed]

So I saw the Dance Dance Authentication post: https://stackoverflow.blog/2017/03/30/stack-overflow-unveils-next-steps-computer-security, and I thought it sounded pretty cool. But, I can't figure out ...
14
votes
1answer
186 views

Was the Stack Exchange network affected by the Cloudflare parser bug?

Cloudflare disclosed a memory leak incident in their software, which could lead to: returning memory that contained private information such as HTTP cookies, authentication tokens, HTTP POST bodies,...
3
votes
0answers
130 views

McAfee SiteAdvisor has a false positive on certain skeptics.SE questions

McAfee SiteAdvisor seems to suggest that this question on skeptics.SE is a security risk, and them it nags me that there is a risk. This happens for several other questions as well. The site report ...
1
vote
1answer
82 views

Getting popups and popunders on SE homepages today only - is it just me? [closed]

On two separate devices (Android and Windows 7, Opera and Firefox, logged in and logged out) on two separate internet connections, I'm getting pop-ups and pop-unders (this page opened in a new tab, ...
3
votes
1answer
80 views

Yahoo breach - what are the consequences for Stack Exchange OpenID logins?

So Yahoo was hacked by a state sponsored attacker, and half a billion credentials were compromised. These credentials also allow access to the OpenID network, which is one of the ways you can login to ...
8
votes
1answer
370 views

If an account gets hijacked and used for posting illegal material, will Stack Exchange be willing to cooperate with local attorneys?

It makes several years that this post is status-planned. There are reason to consider it won’t be status-completed in the upcoming years. So whatever I can do, my account can be hijacked anytime ...
-2
votes
2answers
87 views

How to escape cyberstalking without losing points and reputation?

Suppose someone is cyberstalking me on Stack Exchange. They could gain quite a lot of insight on what I am doing by simply reading my posts. I could create a new account, but that would mean losing ...
7
votes
0answers
211 views

Login problem on: Firefox → math.stackexchange.com

I'm now using Firefox 31. I'm connected on many stackexchange web servers with the same login method. Unfortunately I can't connect within the exact same session, with the same browser, and with the ...
-3
votes
5answers
439 views

What's with the π (Pi) votes? [closed]

I know how to count and I know about integers. One of answers on my question has got π (Pi) votes. How is it possible? Has security of Stack Exchange been compromised?
14
votes
1answer
312 views

Why do I get a Japanese message when I update by swiping down?

I have a question. I use SE application on Android Nexus 5 4.4.2 and usually access SE site using it whether I can answer or not. At that time, I can see the refreshing message in Japanese once per 24 ...
6
votes
1answer
132 views

Found a vulnerability, is there a bounty program?

I have found an exploit on all SE sites, that allows arbitrary code to be injected into the DOM. Where do I report this?
3
votes
1answer
1k views

Google Shield on SO : Insecure Content

According to my other question, there appears to be a problem with Chrome and JavaScript. I'm seeing a little shield in the address-bar, meaning there's insecure content on SO. Is this a problem on ...
6
votes
1answer
73 views

Where should I ask a “question” about password security?

So, I got blasted for asking for help with a security question I had (got my rep cut in half!) and I'm wondering where I should ask it... (granted my rep was only 40...) Basically I know very little ...
8
votes
1answer
129 views

securing compromised account

I left my account logged in on a computer owned by someone else, they have decided to troll and so ive changed my password and cleared my session. I verified with SE openid that they did not log in ...
2
votes
1answer
135 views

Security feature? [duplicate]

I recently discovered that I don't need to enter my password to log into Serverfault after successfully logging out. I'm not sure this is as secure as intended. Steps to repeat (using Firefox 25.0.1)...
98
votes
6answers
3k views

Someone contacted me by email but my email is not public

Last week I got an email to my email address saying "I saw on Stack Overflow that you were interested in.." and the content of the question I asked. The email suggested I'll star a bug \ feature ...
17
votes
1answer
1k views

Chrome phishing warning on main [duplicate]

I just got a Chrome phishing warning on main for https://stackoverflow.com/questions/19741991/php-mysqli-dll-warning-in-linux-server Is it just me, Chrome screwing things up or do you people have ...
2
votes
2answers
419 views

Is Stack Overflow's (SSL) log-in process optimal from a UX perspective? [duplicate]

Does Stack Overflow use SSL when transmitting passwords during the log-in process? This question comes up when you log-on, because there is no green lock in the browser when logging in. I do use the ...
14
votes
0answers
245 views

Firefox/Opera stops showing Gravatars linked over https [closed]

This is (e.g.) my profile in Opera 12.16: Other gravatars are also affected, but not in SE Chat. When I copy the image URL, I get https://www.gravatar.com/avatar/6d52c235ec6dd15f30bab444103e7af2?s=...
5
votes
1answer
81 views

AVG linkscanner alert when trying to review [closed]

I was trying to review posts on "reopen votes" when I got the following: Have you ever seen this before? How can I fix this? The site tells me there was an error trying to pull the next reopen vote. ...
10
votes
0answers
423 views

SSL certificate OCSP verification issue on cdn.sstatic.net, SO's JS/CSS not loading

Since the beginning of July I have intermittent trouble loading SO because I randomly can't verify the CDN's SSL certificate through OCSP. Network connectivity is otherwise good (traceroute & ping ...
1
vote
1answer
1k views

Why am I getting a security warning from Chrome browser when navigating to StackOverflow? [duplicate]

Possible Duplicate: Better HTTPS support for Stack Exchange sites Google Chrome warning of an SSL problem with Stack Overflow I tried to navigate to this Stack Overflow answer Hash algorithms - ...
13
votes
1answer
472 views

Question on SE site being reported as a phishing site?

See this question on Meta Security SE: security se reported by chrome as a suspected phishing site They mention this question on Security SE: Is the Facebook login form using SSL without https in the ...
-1
votes
0answers
136 views

Accessing stackoverflow via HTTPS [duplicate]

Possible Duplicate: Why doesn't the Stack Overflow team fix the Firesheep style cookie theft? If I try to access stackoverflow.com via https I can see a log in pop up. Does that mean any sort ...
0
votes
1answer
135 views

How can masterbranch know what my stackoverflow e-mail is ? ( or is not )

I log into https://www.masterbranch.com and it has this option to link my stackoverflow user, but it ask me to type my email ( probably just to avoid me pointint to Jon's ) I type some random email ...
9
votes
0answers
201 views

AVG 10 free detects “Input validation exploit” [duplicate]

Possible Duplicate: What's this virus threat on Google Chrome when editing a Stack Overflow post? I just got this while my computer was idling: Danger: Surf-Shield has detected active ...
16
votes
2answers
262 views

Is my Web Apps account under threat or am I being paranoid?

I've just checked my IP addresses on Web Apps (Link for Web Apps mods and developers): https://webapps.stackexchange.com/admin/show-user-ips/21 and a couple show up as being used once but the weird ...
25
votes
1answer
554 views

Hijacked session: Signed in as someone else

I refreshed the SO home page and saw I was signed in as "Daniel Carvalho". I suspected an out-dated cache page, so I refreshed the page, but it persisted. I was able to view Daniel's user profile and ...
3
votes
1answer
83 views

Who has privileges to see user's OpenId's?

Do any of the privileges/badges/mods on Stack Overflow enable people to see other users' open IDs? I created a unique email to access SO and it was recently attempted at being cracked, you know when ...
10
votes
4answers
372 views

What is the difference between the Security proposals on Area51? Should they be merged?

There seems to be multiple proposals on Area51 about computer related security: Application Security Computer Security Network & Security Maybe they aren't exact duplicates, but for many ...
6
votes
3answers
507 views

How does Stack Overflow handle this case? [duplicate]

Possible Duplicate: What HTML tags are allowed on Stack Overflow, Server Fault, and Super User? I'm inserting the following script into my post, which is removed when shown. How did this happen? ...
0
votes
3answers
2k views

Invalid Security Certificate?

On careers.stackoverflow.com , I click on "file CV", and Firefox gives me this error: careers.stackoverflow.com uses an invalid security certificate. The certificate is not trusted because the ...