So sometimes I ask security questions, e.g. questions about sql-injection. And sometimes I ask questions about security configuration that are made easier to solve by linking to the site that I'm working on.
Unfortunately, this makes generally identifiable the site that has a security problem.
Q: My site has a sql-injection problem where if you pass the param: ?obliterate=1 it drops the database, how do I deal with this?
Q: My site at example.com doesn't have the right apache config, blah, blah, blah.
How should I deal with that linkage issue? Anyone else considered that and come to a conclusion they'd like to share?