Would a question about how to implement a security control or automate an existing control be on topic?

@Anthony From security.stackexchange.com/help/on-topic "IT Security Stack Exchange is (...) to discuss protecting assets from threats and vulnerabilities."

What you just wrote is a bit unclear. Is it about "implementing" or "securing"? If I were in your place, I guess I would just ask the (full) question, then let it be answered or closed (that's not a big deal).

RIP chat

I heard I am needed

@J.J I actually didn't want to spam the DMZ too much, out of fear that people would think I'm just trying to draw attention to myself

Also pet-peeve of mine: Programmers acting as if programming is some mysterious skill they had to climb a mountain for and train with monks there for a decade before mastering it.

It's not like the vast majority of them are just maintaining some program they didn't write, which takes some input and puts it in a database.

I may be biased (narrator: he is), because I'm a pentester (narrator: a shitty one, though), but I don't see myself as something "better" than the rest. Pentesting is a skill that anyone can obtain and I highly encourage all developers I talk to to grow a "hacker" mindset

E.g. You built the application to work. But have you ever asked yourself how you could break it?

Quick poll: I just created wasm, but just realised that the naming might be less than perfect. Would web-assembly or perhaps webassembly be better?

I prefer web-assembly

wasm isn't like ASP

People who look for ASP will likely call it ASP and not "Active Server Pages"

That something is not like ASP is always a good sign, no matter what that something is.

I used ASP because it's something where people use the acronym rather than the full name

And I think Web Assembly is one of those things where the full name is more common

I mean, relatively speaking. Web Assembly is very niche.

I remember reading something like 50% of all Web Assembly uses are malicious, though I don't know how reliable such a claim is

So "bitcoin mining and stuff" is the new "games and stuff"... :-)

And yeah, I see your point about acronyms, I just couldn't waste an opportunity to trash talk ASP.

I get you desire to trashtalk ASP :D

I just got a flag where one guy complained about the "We no longer accept questions from this account" thing and begged for upvotes

And I will be honest: The autoban is the most stupid thing I have ever seen

It's by far the worst and most unintuitive feature I have ever seen

What do you have to do to get yourself autobanned?

Write questions that are not well-received

And the bad thing is, deleting your own question makes it worse

So imagine you are a new user and you ask a question. You have no idea how SE works, so you just ask. No code examples, just a vague "I don't know what's wrong. Please help"

Then people downvote because no MCVE, no clear question, etc...

OP feels ashamed, deletes the question to save face

This repeats a few times, suddenly OP is autobanned

Yeah. That is not great design. I understand the need to automatically stop people from asking to many low quality questions because there just isn't enough human man power to moderate everything. But perhaps there is some better way.

Honestly didn't know there was an autoban.

And you know what you can do against an autoban:

Wait for 6 months

And after 6 months, this one question you are allowed to ask has to offset all the bad questions.

And need to wait another 6 months

And I honestly would not mind if it was something like a day or so

Even a week would still be acceptable

But SIX FUCKING MONTHS?

Name one service from which you got banned for 6 months and to which you returned

Because here is the thing: Once people get banned, they ask why, and then get pointed to how to ask better questions. Only then it's too late

Also completely unrelated: It took me so many years, but I finally realized that nobody else can make me happy. Happiness comes from within myself.

It doesn't mean I can't be happy with others. I am happy with my girlfriend, and my friends, and my family. But none of them could replace the happiness from within me if it wasn't there in the first place.

Without it, everything else would be hollow. As if I was borrowing something that wasn't mine.

Yeah, six months sounds exessive, especially when you can just make a new account - your banned 0 rep account isn't worth anything anyway.

And on the happyness question I strongly agree. Seeking hapiness through other people just gives you dysfuncional relationships.

@Anders The FAQ explicitly mentions if you create a new account to evade the ban you're fucked for good (e.g. same IP, etc.)

@Anders I'm on the other side of such a relationship, with my girlfriend being the one who struggles to be someone outside of the relationship. Things are getting much better now though, now that we identified this issue,.

@MechMK1 Sounds like a new design would be needed for the autobanning... Actually an area where I think a more data driven design process, as opposed to just people guessing at meta, would be good.

@MechMK1 Best of luck to both of you.

@Anders I think autobanning should be removed entirely. We had some candidates here on InfoSec who just regularly posted really bad content. After getting -5 on every question they left eventually

@Anders Thank you very much. I've been working a lot on my mental health the past few months

Particularly in the way I act in the relationship with my girlfriend, and me second-guessing myself all the time

@MechMK1 I'm glad things are going better