23

https://stackexchange.com/about/security Describe to them in detail what you did, and where the security problem is. (My guess is that you used external authentication like google or openid)...


13

I think you're laboring under a misapprehension. This site (Ask Ubuntu) is not affiliated with Canonical and is instead a project of a completely different company: Stack Overflow. While there is some sort of agreement between the two companies and Ask Ubuntu is listed as an official help site in Canonical products, the two are separate entities and Stack ...


8

I like to point to this page when referring to PPAs: Are PPA's safe to add to my system and what are some "red flags" to watch out for? I put this warning everytime I add a PPA to an answer, not because I believe they are malicious (after all, the world hasn't ended in the last decade or so they've been around), but mostly because no one is ...


8

Moderators can redact sensitive information to permanently remove something from the site. If you see something you think is a serious issue, flag it up. We can't stop archiving services (eg Wayback) keeping their copy. But what sort of combination of data are you talking about here? I don't think we can (or should) redact every post with an IP or MAC ...


8

There's no real way to determine if any given suggested piece of software or script contains hidden malicious actions. If you're that concerned, I suggest you run suspicious links and download items through VirusTotal or another virus scanner. However, keep in mind that these are not fully fledged code analyzers. It won't catch the latest and greatest ...


6

Stack Overflow is far ahead of Ask Ubuntu at reviewing code because it's a programming website. In addition to Stack Overflow's normal way of reviewing code by users who volunteer to be reviewers and by Stack Overflow's moderators, there are also chatrooms that were created specifically for reviewing code and several reviewing bots. Some of these same bots ...


5

why does the page need the following scripts from the following sites to analyze performance issues to generate money to keep the servers running Regarding some of the URLs: google them ... 2 of them: "Quantcast Measure reveals the uniqueness of your audience, helping you differentiate your brand, site, or app.". So an analytical tool sstatic "This is ...


5

Interesting. My default with issues like this is to assume that this is localized to you. Thus far, no one else seems to be experiencing the same issues, so I'm leaning pretty heavily in that direction. We do a lot to ensure the safety and security of our users, so I'm even more confident that this isn't our (my team's) fault. But! The script you highlight, ...


5

ANY code that is going to be doing something you do not want will and must have a big fat warning. Most famous one: Why did the command ":(){ :|: & };:" make my system lag so badly I had to reboot? More because guntbert doubts me :-) Terminal command to remove unknown file What does rm -rf do? `rm -rf ` and `rm -r` have the same results I ...


4

Excellent things have been said already, but let me add a few words from someone who posts those code snippets once in a while. How can we be safe about code from this site that we install? You can't. Any piece of code could contain harmful - intentionally or not - elements. While that is also true for snippets on AU, you probably won't find a place with ...


2

First of all, PPA's are perfectly acceptable as answers here. Sure, it may involve risks, but there's risks of getting malware or at least have vulnerabilities slip through even in official repositories of Ubuntu. So I consider this somewhat of a redundancy to consider PPAs dangerous or forbid them from site. To me - thinking about quality on this page -...


1

That's what browser settings are for: if you insist on being logged out, set the StackExchange/AskUbuntu cookie to "Allow for session" in the exception rules. Applause


Only top voted, non community-wiki answers of a minimum length are eligible