For QOTW #28, scheduled for publishing to the Security Stack Exchange Blog on 1 June, please post as Answers, and vote for your favorite question from the whole Security Stackexchange site.

Please post any question that you feel is of worth and the reason why as an answer below. Try not to promote your own questions or answers for publicity's sake. We are looking for questions that are of great interest, or have exceptional answers. If you like a posted question then vote it up. Each week we are going to try to post about the question and its contents. Also, have a look at the blog to check it hasn't already been written about.

When submitting a QotW, please indicate if you would be interested in writing about it for the blog. This is a factor which we take into consideration when selecting what to blog about - we need a post we can actually say something interesting about, it shouldn't be something we've written about too much before, and it helps to have somebody interested in writing the article.

I repeat - volunteer authors are always welcome - we get a wider range of styles, and it puts less of a load on the regulars

Note to the answerers, if you dig a question, you can always submit a draft blog post about it, even if its not picked as QotW. Contact a moderator, or come and chat in the DMZ if you need more information.

Timings:

  • Question and author selection: 1700 UTC Tuesday
  • Draft submission: 0800 UTC Thursday to enable review
  • Publication: 1200 UTC Friday.

For a list of previous proposed and featured questions, look at @Iszi's question here.

share

6 Answers 6

up vote 2 down vote accepted

Similar to another question we've previously featured, this one has had a rather extreme amount of attention for a question on our site - over 280,000 views and 150 up-votes in just one week!

I found that the company I work for is putting a backdoor into mobile phones

share

Maintaining the principle of least privilege when your end-users are IT professionals is quite the dilemma.

Risks of giving developers admin rights to their own PCs

share

Hole 196 has come up in a few questions here. Perhaps it could be a multi-question QotW post.

How do I protect myself against 'hole 196'?

share

We could add another one to our collection of featured password questions.

Are common passwords at particular risk?

share

Security through obscurity can be an interesting topic. Since some other questions have touched on this ground, it could be another multi-question post.

Securing private IP space

share

This one hasn't seen much activity, but it's definitely a good one in my opinion. Sometimes it might be tricky to know exactly how far is too far to go (or to ask to go) in a penetration test.

What is the Ethics and Legality of Grabbing Data from Social Networks to aid a Pentest?

share

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .