I've come across a few questions where the user asks something like, "How do I set up a server when the IT department won't let me?"

Usually the questions are asked by a relatively inexperienced user. They usually require more of a "how-to" than a detailed analysis of a security flaw.

In this discussion, some people felt that vulnerabilities should be openly discussed, and I agree. I don't think that there should be any censorship based on the idea of obfruscation.

However, I think that when it is clear that an inexperienced user is seeking to circumvent IT Policies in a way that may be injurious to that person or that person's company we should close the question. I think that as a community of system administrators we owe it to each other to set a good example for IT Users.