For QOTW #29, scheduled for publishing to the Security Stack Exchange Blog on 8 June, please post as Answers, and vote for your favorite question from the whole Security Stackexchange site.

Please post any question that you feel is of worth and the reason why as an answer below. Try not to promote your own questions or answers for publicity's sake. We are looking for questions that are of great interest, or have exceptional answers. If you like a posted question then vote it up. Each week we are going to try to post about the question and its contents. Also, have a look at the blog to check it hasn't already been written about.

When submitting a QotW, please indicate if you would be interested in writing about it for the blog. This is a factor which we take into consideration when selecting what to blog about - we need a post we can actually say something interesting about, it shouldn't be something we've written about too much before, and it helps to have somebody interested in writing the article.

I repeat - volunteer authors are always welcome - we get a wider range of styles, and it puts less of a load on the regulars

Note to the answerers, if you dig a question, you can always submit a draft blog post about it, even if its not picked as QotW. Contact a moderator, or come and chat in the DMZ if you need more information.


  • Question and author selection: 1700 UTC Tuesday
  • Draft submission: 0800 UTC Thursday to enable review
  • Publication: 1200 UTC Friday.

For a list of previous proposed and featured questions, look at @Iszi's question here.


3 Answers 3

up vote 2 down vote accepted

Another proposal that didn't make it last week...

Maintaining the principle of least privilege when your end-users are IT professionals is quite the dilemma.

Risks of giving developers admin rights to their own PCs


@Iszi proposed this for QotW#28, and I quite like it:

Hole 196 has come up in a few questions here. Perhaps it could be a multi-question QotW post.

How do I protect myself against 'hole 196'?


This one seems interesting too, again from @Iszi:

This one hasn't seen much activity, but it's definitely a good one in my opinion. Sometimes it might be tricky to know exactly how far is too far to go (or to ask to go) in a penetration test.

What is the Ethics and Legality of Grabbing Data from Social Networks to aid a Pentest?


You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .