On an unrelated note, what should be done about people who delete their own good answers out of spite or because they just don't want people to comment on it?
I know that, if a user mass-deletes all their posts, mods often undo the action, but what about in a case like this (from 1 or 2 years ago, btw) when a single highly-upvoted answer with no downvotes is deleted? Should I flag it for undeletion?
> Don't bother to answer, I'm getting tired of this site already and will probably delete this answer soon-ish just to enjoy the silence again.
@forest Yeah - just flag for undeletion. There's a range of things we do depending on how bad it is, but a highly upvoted answer is considered high value to the site so the recommendation is to undelete and keep it
and this is also why there is the guy who sells Amazon books of questions here - he scrapes the sites, collates and sells. He got in a bit of trouble for non attribution, but I think it was sorted
@schroeder good to know. I just wasn't sure how regularly you popped in here and if you were "pingable"
@forest there's a site in germany where people post mostly random drunk texts which is called something like "text from last night" and even they sell books that are just compilations of these posts
I need to store datas in local storage for mobile app and don't want to reinvent the wheel, but don't know if there is a good library or other way to do it
Would libsodium work for you? It's a simple encryption library similar to openssl, but designed to be simpler to use, have more sane default choices, and support only a few, good algorithms (Salsa20, Curve25519, etc).
There might be some better, "standard" way to encrypt local storage on a mobile device (e.g. some native API), but I know little about mobile architectures.
Ohhh... finally i understand ... i thought there was a difference... thanks a lot :D
Yesterday i Penetrated my first windows 7 pc using a remote exploit ( eternalblue ) ... are there any win10 remote exploits out there ? I found a list of vulnerabilities but without any exploits. The only one i know is the psexec one.
Alright thanks :) Im already searching like a crazy... I read somewhere that the eternalblue exploit was ported to win10... by scientists... but it doesnt seem to be public at all...
So SE is not one of those sites deserving of responsible disclosure, eh? There's always full disclosure!
The solution is simple: post an answer on all big HNQs with XSS that deletes user's accounts (iirc you just have to change your about me and click delete or something silly). The effort they'd take to reverse that would be quite large.
Would be fun to seed a single question with the XSS, and have the XSS trigger editing of random questions/answers of theirs to insert a copy of the XSS.
Oh wait just remembered, 4chan.js was social engineering, not XSS. I forgot that 4channers were usually idiots ("download this image, rename to 4chan.js, and run it").
Something like that would cause the SE stock to plummet.
Man, this is why we should all be using CSP.
I mean if SE actually restricted its scripts with hashes, this crap would not exist.
But they won't, and someone will use XSS to fuck them over for the lulz. I mean jesus christ, 5 months? For a big tech site, they really don't care about security.
Well, it doesn't seem like they don't care but they just don't have anyone responsible - which surely changes when their director of infosec takes office
