Timeline for Should we try to eliminate password reset questions?
Current License: CC BY-SA 2.5
7 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Nov 3, 2010 at 3:31 | comment | added | Kara Marfia Mod | I disagre with the idea that it's beneficial to anyone to attempt drawing this line in the sand, though I respect your inclination to keep things legit. Luckily, the community at large does a good job of voting the worst questions to close. | |
Nov 2, 2010 at 22:15 | comment | added | John Gardeniers | @Kara, we obviously disagree on some points. e.g. I don't believe SF should be supporting the students or other admin wannabes, as they clearly do not fit the criteria spelled out in the FAQ. Either the site is for professionals or it's not. You can't have it both ways. | |
Oct 31, 2010 at 18:30 | comment | added | Kara Marfia Mod | I think taking questions from script kiddies seriously would be just as annoying as doing kids' homework for them. Though I'd rather err on the side of not throwing out babies with bathwater - more specifically, I still want to encourage students to participate (as they're the next batch of professional users) - just as a lot of dodgy-sounding security qustions may be coming from the next generation of white hats. Naive questions sound pretty similar to malicious questions trying to sound innocent, dont' they? | |
Oct 28, 2010 at 17:20 | comment | added | Zoredache | @John Gardeniers, it seems there is a bit of a strawman in your argument here. I don't think we are encouraging hacking, I think we are trying to encourage sharing information that a sysadmin may have to commonly deal with. | |
Oct 28, 2010 at 13:34 | comment | added | Warner | I agree entirely, Kara. The ability to test vulnerabilities, among other security topics, is absolutely within the realm of professional IT. Nevertheless, obviously unscrupulous end-users we don't need to cater to. I believe I've written my detailed opinion on this on a different post. | |
Oct 27, 2010 at 21:12 | comment | added | John Gardeniers | Interesting point of view. The way I see it that would make SF the go-to site for information about circumventing security systems. Is that really what you want to see happen? My opinion as a professional admin is that we should be taking active steps in the opposite direction, so clearly we have diametrically opposed views on this. Your reference to security through obscurity is lost on me in this case because it isn't a matter of hiding the information. It's about we as professionals not ENCOURAGING hacking by answering questions that require a hacking solution. | |
Oct 27, 2010 at 14:04 | history | answered | Kara MarfiaMod | CC BY-SA 2.5 |