English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools annual

Global: Zendy Free Plan

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Existing research has shown that developers will use StackOverflow to answer programming questions: but what draws them to one particular answer over any other? The choice of answer they select can mean the difference between a secure application and insecure one, as the quality of supposedly secure answers can vary. Prior work has studied people posting on Stack Overflow&#x2014;a two-way communication between the original poster and the Stack Overflow community. Instead, we study the situation of one-way communication, where people only read a Stack Overflow thread without being actively involved in it, sometimes long after a thread has closed. We report on a mixed-method study including a controlled between-groups experiment and qualitative analysis of participants&#x2019; rationale (N=1188), investigating whether explanation detail, answer scoring, accepted answer marks, as well as the security of the code snippet itself affect the answers participants accept. Our findings indicate that explanation detail affects what answers participants reading a thread select (p&#x003C;0.01), while answer score and acceptance do not (p&#x003E;0.05)&#x2014;the <italic>inverse</italic> of what research has shown for those asking and answering questions. The qualitative analysis of participants&#x2019; rationale further explains how several cognitive biases underpin these findings. Correspondence bias, in particular, plays an important role in instilling readers with a false sense of confidence in an answer through the <italic>way it looks</italic>, regardless of whether it works, is secure, or if the community agrees with it. As a result, we argue that StackOverflow&#x0027;s use as a knowledge base by people not actively involved in threads&#x2014;when there is only one-way-communication&#x2014;may inadvertently contribute to the spread of insecure code, as the community&#x0027;s voting mechanisms hold little power to deter them from answers.

The Impact of Surface Features on Choice of (in)Secure Answers by Stackoverflow Readers