The kinds of questions you mention are good news for me, as an overburdened smalltime sysadmin.
- It's great to get this kind of insight into what my users may try to do.
- Posted answers give me additional insight by pointing me toward vulnerabilities and workarounds I need to double-check and/or close up.
It can't be said often enough. Security through obscurity is garbage. If we think our networks are secure because our users are too stupid to cause damage, we're in for a world of hurt. Censorship (even self-censorship) is not the answer.
I like to think there's a reason this issue isn't addressed in the SF rules or FAQ. Can of worms, if nothing else.
Scenario: if one person decides a question is malicious in intent, and he feels he's responsible for keeping the information in that helpful answer out of our cracker's hands, how far would/should he go to remedy that problem? Delete answers? That's 12 kinds of terrible to my way of thinking.
