For QOTW #17, scheduled for publishing to the Security Stack Exchange Blog on 3 Feb, please post as Answers, and vote for your favorite question from the whole Security Stackexchange site.

Please post any question that you feel is of worth and the reason why. Try not to promote your own questions or answers for publicity's sake. We are looking for questions that are of great interest, or have exceptional answers. If you like a posted question then vote it up. Each week we are going to try to post about the question and its contents.

When submitting a QotW, please indicate if you would be interested in writing about it for the blog. This is a factor which we take into consideration when selecting what to blog about - we need a post we can actually say something interesting about, it shouldn't be something we've written about too much before, and it helps to have somebody interested in writing the article.

Note to the answerers, if you dig a question, you can always submit a draft blog post about it, even if its not picked as QotW. Contact a moderator, or come and chat in the DMZ if you need more information.

timings: selection of topic ASAP, selection of author by midday Thursday at latest, draft for review by end of Thursday and publish midday Friday.


5 Answers 5

Why is it difficult to attack Anonymous/Lulzsec

With Anonymous continually in the news, this could be a good one to have on the blog


Did we get a post up on this one yet? If not, we probably should since it's going to be on our business cards:

What would one need to do in order to hijack a satellite?


What hacking competitions exist?

There were so many on here I hadn't heard of, this question was very interesting.


Malicious QR Code and Mitigation

I know it's typically bad juju to promote your own question, and normally I never would, however I really think this one has some serious potential impact on us in the security community. As QR Code technology has become more prevalent, we should all increase our awareness of the threats associated, which I think are presently being mostly overlooked. This can be a dangerous technology and I think increasd awareness is paramount.

I agree that QR Codes are a problem but the more general problems are malicious links, vulnerable web browsers, and vulnerable operating systems. It is rare that users will trade convenience for security. –  this.josh Feb 2 '12 at 2:22
You are absolutely correct, but the real problem comes with the mobile apps that scan the QR codes. Awareness needs to be there to ensure these scanners are in compliance with best practices. Furthermore, because of the massive increase in use for marketing, and the trendy nature of the QR codes, people are blindly scanning them making the attack surface very large and growing. –  Purge Feb 2 '12 at 2:30

What tools are available to assess the security of a web application?

This question got a lot of discussion, and is of interest to a wide range of individuals


You must log in to answer this question.