r/AskNetsec

All submissions must be in the form of a question

All posts must be in the form of a question relevant to infosec. Soliciting "guidance", "feedback", or "thoughts" without any specific answerable question is not sufficient. Asking vague "has anyone ever" questions is also not sufficient. Questions must be specific, relevant, and answerable.

All submissions must be relevant to information security

To keep with the spirit of this sub, questions should be related to information security in an enterprise, large organization, or SOHO context. Homework, industry surveys, and beginner questions are most likely not relevant and should be asked in their respective subreddits. This rule is subject to moderator discretion.

Questions about possible or confirmed incidents must contain sanitized technical evidence

r/AskNetsec is not intended to assist with mysterious computing events, stalkers, or incidents without factual evidence of a technical nature.

No low effort questions

If you expect someone to take the time to answer a question and provide the help, you are expected to provide as much information as possible. Please include all previous troubleshooting, operating systems, application patch level, etc. If you think it might be relevant to the questions, then include it.

Be civil and professional

Always abide by Reddit.com site rules, and use Reddiquette and professional judgment as a guideline. This rule is subject to moderator discretion.

Do not ask for assistance in committing a crime, encourage crime, or offer criminal services

We are open to aiding people as a community in Penetrating Testing (Pen-Testing), Capture the Flag (CTFs), and red-team related scenarios, but Moderators have the right to remove/lock any comment or post that could be deemed to have criminal intent.

If you believe this wrong, please let us know why and provide more information about the current situation. Your post was moderated on most likely because of not having enough info.

Breaking this rule intentionally will result in immediate ban.

Don't spam or excessively showcase your own content. No referral or affiliate links

Repeatedly posting the same content or content from the same source, is considered spam. Posting low-quality content, blogs, vlogs, or YouTube videos is considered spam. Self-promotion and/or shilling (not disclosing a relationship with a source being promoted) are considered spam.

If someone asks a question about a specific product, service, or organization, and you are a direct representative of that organization, you may address the question so long as you clearly identify yourself as such.

No questions about password managers

Question about password managers do not typically fall within the scope of this sub. Please refer to r/PasswordManagers for further assistance.

No questions about Career Advice, homework, or beginner questions.

/AskNetsec is more focused on technical questions. That means that questions related to career advice, what cert to get, school work, how to get started, etc, should be posted to places like: r/SecurityCareerAdvice, /r/NetSecStudents, /r/ITCareerQuestions, etc.

No low effort posts

If you expect someone to take the time to answer a question and provide the help, you are expected to provide as much information as possible. Please include all previous troubleshooting, operating systems, application patch level, etc. If you think it might be relevant to the questions, then include it. If you need help identifying what information you need message the mods and we can help.

No posts asking about being hacked

This sub is reserved for network/server/information security questions. Asking questions about home computer or phone being hacked involve too many details.

This includes clicking suspicious links/emails, your phone/computer acting weird, or if you believe you are being cyber stalked.

To keep yourself safe, change your passwords (do not reuse passwords), enable 2FA, install a virus scanner, and use a password manager (/r/passwordmanagers).