Charcoal HQ

ninja'd

nuked by Null

!!/watch-keyword newyorkessays\.com

@tripleee Blacklisted 1495120084 tripleee newyorkessays\.com

CI on 30bf295 succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev 30bf295 (SmokeDetector: Auto blacklist of 1495120084 tripleee newyorkessays\.com by tripleee --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 14997.

3:11 PM

What happened to my pull request from earlier...?

!!/blacklist-website essayontime\.com\.au

@tripleee Blacklisted essayontime\.com\.au

[ SmokeDetector | MS ] Blacklisted user: How does Superman's heat vision work exactly? by Superjesus Joc on scifi.SE (@Mithrandir)

tpu- by Glorfindel

CI on 781aa69 succeeded. Message contains 'autopull', pulling...

@Mithrandir Needs one of the admins to fix and approve it I guess?

[ SmokeDetector ] SmokeDetector started at rev 781aa69 (SmokeDetector: Auto blacklist of essayontime\.com\.au by tripleee --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 14960.

@Mithrandir they tend to be handled in bursts, looks unremarkable to me so probably next time someone does a batch

3:14 PM

@tripleee haven't been doing many blacklists, so i didn't remember how they were dealt with

Eric Leschinski

The trouble with blacklists is that they require constant and never-ending updating. They are only as effective in so far as good people keep monitoring the daily spam that comes in, and adds new signatures.

@EricLeschinski amen!

@Mithrandir it's got merge conflicts and nobody likes dealing with those

@ArtOfCode ?

@Mithrandir ??

3:18 PM

@Mithrandir when somebody commits something on top it turns out that way

your PR has a merge conflict

dealing with those is effort

My lingo is rusty

somebody needs to deal with the conflict, usually in these cases just add one change after the other

two commits tried to write the same bit of the same file, so git tells you to deal with your own crap

Eric Leschinski

The size of the blacklist will approach infinity as the badness keeps changing its signature to avoid detection and the person keeps adding to the list. To keep the blacklist from approaching size infinity, you have to have a threshhold for blacklist signatures that haven't been seen in a year, and remove them.

3:19 PM

arguably these straight text files should be possible to handle automatically but, well, Git insists

@EricLeschinski maybe six months or even just a few weeks, with separate automation to look for old ones which are waking up again

@EricLeschinski well, that's kinda why we have pattern-matching stuff

Eric Leschinski

Pattern matching helps generalize the problem a little bit, but only lessens the problem. As long as as the number of blacklisted items is small enough to iterate over and still cover every stackoverflow edit, then you're fine. The problem is that this business requires constant vigilance, or else someone has to pull a machine learning miracle out of a hat and make a spam detector that isn't based on signature.

The auto-blacklist is cool though. It reduces work on this side.

@ArtOfCode I have a merge in github.com/tripleee/SmokeDetector/tree/… -- is there any way to get that resolved within the existing PR?

@tripleee whatcha mean?

@ArtOfCode can you somehow import my merge to the PR and proceed with that? or should I create a new PR to supersede Mithrandir's?

3:27 PM

@tripleee I probably could, but that sounds like more effort than it's worth - create a new PR, I'd say

not a very useful one github.com/Charcoal-SE/SmokeDetector/pull/766

but maybe you can take it from there (-:

and, it gives Mithrandir credit for the commit

danke

oh, Thomas says he has alrady done this

@tripleee because I have

doppelgreener

!!/test zeushacks

3:30 PM

CI on 95713c5 succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev 95713c5 (Thomas Ward: Merge pull request #763 from Charcoal-SE/auto-blacklist-1495099593.995903 --autopull) (running on ArtOfCode/EC2)

Restart: API quota is 14754.

github.com/Charcoal-SE/SmokeDetector/pull/763/commits/…

!!/test zeushacks

> Bad keyword in body, bad keyword in title, bad keyword in username
----------
Title - Position 1-10: zeushacks
Body - Position 1-10: zeushacks
Username - Position 1-10: zeushacks

@tripleee ^ looking at an individual PR's commit logs are a good thing lol

as you can see it's there now in the blacklist

@SmokeDetector @doppelgreener there you go

3:30 PM

it doesn't need a 'custom merge' it just needs one of us maintainers to go in and resolve the conflict.

patience is a virtue :P

doppelgreener

oh ty

@doppelgreener yeah you need to wait for it to autopull :)

@ThomasWard Art was indicating above that you don't want to deal with conflicts too much

and reload, then test :)

!!/location

@ThomasWard ArtOfCode/EC2

3:31 PM

@tripleee We don't. But easy to resolve conflicts?

easy.

it would be neat if these trivial conflicts could be handled automatically

that one just needed me to remove the diff lines in the GH edit window

doppelgreener

@ThomasWard yeah i wanted to run a test since it sounded like you said it was already detecting that keyword

@doppelgreener nope, I said that the merge was in progress in GH

not that it's "in production" yet

there's a workflow :P

6 hours ago, by Mithrandir

three TPs, below autoflag threshhold https://metasmoke.erwaysoftware.com/search?utf8=%E2%9C%93&title=&body=zeushacks&‌username=&why=&site=&feedback=&autoflagged=&reason=&user_rep_direction=%3E%3D&use‌r_reputation=0&commit=Search

3:32 PM

@doppelgreener that's an MS search, not an actual blacklist

but now it's in the blacklist since i fixed the merge issue

@tripleee yeah Art doesn't like merge conflicts. Easy merge conflicts are easy to resolve

and don't require much work. And since i'm staring at code compile at work, I have the free time :P

@ThomasWard xkcd.com/303 ?

:P

[ SmokeDetector | MS ] Bad keyword in body: Magneto CMS Page showing odd sitelink on google search result by GNov on magento.SE

fp- by CalvT

why are you still lurking in the SFF room, @Smoke y?

[ SmokeDetector | MS ] No whitespace in answer: Отправка формы методом POST при полях input disabled="disabled" by впывап on ru.stackoverflow.com

tpu- by CalvT

3:46 PM

reminder to go manually flag

Ferrybig

@ThomasWard I also find merge conflicts easy to solve, especially when using git in the 3 way merge mode

@Ferrybig I personally use PyCharm for all my merge conflicts - that way i see both sides and the resultant code, it really helps resolve conflicts because you can selectively nitpick diffs from master and local before pushing up :p

that said, some big projects I have a headache from heh

because soooooooooo many merge conflicts

but tiny ones like a blacklist item being out of order or such, easy fixins.

Ferrybig

The only reason why it gives a merge conflict is that for some files, order does matter for the lines, if smokey inserted blacklist requests on random places in the files, the change for spontaneous conflicts is lower

indeed

but it'd have to load the BL and then write the BL as a random set so... blarhg

4:04 PM

[ SmokeDetector | MS ] Bad keyword with a link in answer, link at end of answer: change source address of outgoing traffic destined to second network alias of source host by Ayush Patel on serverfault.com

tpu- by Ferrybig

!!/location

@quartata ArtOfCode/EC2

why am I suddenly getting notified again

!!/unnotify 11540 stackoverflow.com

@quartata That configuration doesn't exist.

huh?

Was a different instance up

4:10 PM

@quartata yup teward/Solar Flare when you where pinged

[ SmokeDetector | MS ] Repeating words in body: Coupled non-linear ordinary differential equation in R (boundary value) using bvpSolve by Henry Leung on stackoverflow.com

fp- by CalvT

Q: Can I rollback to a previous, unbroken mug?

mkay

well I could standby EC2 to fix it

but meh I'll just wait

Henders

4:25 PM

I laughed :P

152

I proudly and prominently use my Stack Overflow shirt, clipboard, koozie and mug that I received for my answer in the 10 million questions giveaway. Or at least I did. My mug was broken by a careless push, it merged very badly with the floor and now it leaks more than my first program. It was pu...

4:41 PM

[ SmokeDetector | MS ] Pattern-matching website in answer: How to recover deleted photos from Android's internal memory by LindseyThompson on android.SE

@SmokeDetector tpu- as I've submitted an edit to remove the spam link, as answer seems pretty good (may be plagiarized?)

Question - does replying here in charcoal submit a spam flag?

no

that's FIRE's job

Ok, thanks

sd k

Conflicting feedback on How to recover deleted photos from Android's internal memory.

fp- by doppelgreener

@doppelgreener I k'd as the post version on MS is spam, but I didn't flag as I edited the spam link out

4:54 PM

it was edited back in as far as I can tell

android.stackexchange.com/review/suggested-edits/174217

Hasn't been approved yet

ah

[ SmokeDetector | MS ] Link at end of answer: Place Ad after Title or Lead text? by Amas Dave on ux.SE

tpu- by CalvT

!!/watch-keyword amasnigeria.com

@quartata You don't have code privileges, but I've created a pull request for you.

4:57 PM

oh well that's super broken

@tripleee

!!/whois codeadmins

@CalvT I am aware of 14 codeadmins. Currently in this room: ArtOfCode, Thomas Ward, Ferrybig, Andy, Jan Dvorak, Undo. Not currently in this room: angussidney, tripleee, ProgramFOX, Kyll, Magisch, Ashish Ahuja, Gerry, Glorfindel.

no I don't care about the pr itself

but obviously the code for making it is broken

@quartata why is it? You aren't a code admin?

indeed I would rather not merge the PR since something is wrong

5:00 PM

The actual PR is ok, it's just the comment

[ SmokeDetector | MS ] Manually reported answer: Place Ad after Title or Lead text? by Amas Dave on ux.SE

hm

also we should try to remove watched keywords once they've been blacklisted

tpu- by doppelgreener

[ SmokeDetector | MS ] Username similar to website in answer: MYSQL select only 1 from 5 same values by crozoom on stackoverflow.com

Andy

5:36 PM

@tripleee can you look at the commit message for the watchlist: github.com/Charcoal-SE/SmokeDetector/pull/767

CI on e741599 succeeded.

[ SmokeDetector | MS ] Bad keyword in answer: Template based file generator with json data input by a deleted user on softwarerecs.SE

fp- by CalvT

sd 4- k

5:56 PM

@Andy oh ouch... I wasn't too happy with the message formatting or the pull requests

6:08 PM

I'll try to look into it tomorrow

!!/pull

[ SmokeDetector ] SmokeDetector started at rev e741599 (A Wegner: Merge pull request #767 from Charcoal-SE/auto-blacklist-1495126641.3216662) (running on ArtOfCode/EC2)

Restart: API quota is 12967.

@tripleee yeah :P the contents of the PR are absolutely fine just not the description

I think that requires Metasmoke changes

since it's the one making the PR right

it's probably just trying to parse out the keyword from the commit like a regular blacklist request and failing

Ferrybig

@quartata the message is generated in smokey here: github.com/Charcoal-SE/SmokeDetector/blob/master/…

..huh

6:19 PM

Yeah, Smokey's the one with the creds

then this must not be used

no that gets used

I think it's broken though

yeah, it's been returning 500s to the GH webhook for a while

see I was wondering why we had Octokit if MS was only using it for comparing diffs

I guess the git stuff is fragmented a bit across Smokey/MS

metasmoke is what keeps deploy up-to-date with master

that couldn't be done by Smokey because it doesn't have a stable address to send webhooks to

ohhh

I've always wondered how that happens

gee just when I thought I knew everything about this code base

6:29 PM

you will never know everything about this code base

I've been looking at it for a large proportion of the last two years and I don't know it all, so...

6:48 PM

[ SmokeDetector | MS ] Manually reported answer: Android new object class by bhjxfjyhkz on stackoverflow.com

tpu- by Riker

6:58 PM

[ SmokeDetector | MS ] Offensive answer detected: Error building Visual Studio solution using MsBuild by SynX on stackoverflow.com

tpu- by CalvT

[ SmokeDetector | MS ] Bad keyword with a link in answer: Installing TL-WN823N on raspberry pi 2B by Henrique on raspberrypi.SE

fp- by CalvT

7:27 PM

I mean it's not that huge

but there's a lot of moving parts

[ SmokeDetector | MS ] Bad keyword in link text in answer: Essays and thoughts on mathematics by user110099 on mathoverflow.net

tpu- by DavidPostill

Processed Meat

7:48 PM

0

Q: Posts hacking right now

I've rejected quite a few edits in the last minutes from a user with 1 point of reputation which was substituting the posts content with a financial spam. is it really possible that a new user is allowed to go for a edit spree like that? Shouldn't it be some minimum reputation at least?

discussion spam

!!/report skeptics.stackexchange.com/a/38370

[ SmokeDetector | MS ] Manually reported answer: criticism of down-voting for question? by Liu on skeptics.SE

^That repeat propoganda troll again.

About that ^^^^: what if rejected edits count against your simultaneous edit limit for 24h?

Not sure about the other 1-rep user content there

7:56 PM

could work

that whole question should be nuked

I mean it should really be on meta

there's no "skepticism" or claim or anything to it

but it's a horrid question for meta too (aside from being one already asked)

it shouldn't be on meta either

even with the aside, IMO

CENSORSHIP!

unrelated but I wish we could blacklist a username on a specific site without needing to add a code reason

Like for instance we wouldn't want to blacklist Liu on all sites (many many ones on SO for instance) but there's no one whose username matches ^Liu$ on Skeptics aside from this one guy (who has 6 TPs currently)

user ID blacklist won't do?

8:00 PM

No he makes new accounts

as far as I can tell

gotcha

They also dont always use that name.

I actually suspect all those 1-rep users are from this troll.

let's ban everyone by default (only half-joking, but probably a ton of workload even if we exclude SO)

Can anyone ping a ♦ to find out if they’re the same IP?

what site

actually, that's probably not info that can be shared

but if they are, spam flags will build an IP block on the address

8:08 PM

custom flag then?

yeah, if you like

Innocent cat-on-keyboard or SQL injection attack?

(~1.8 million compromised webpages)

8:50 PM

uh oh

how come this is the first I'm hearing of this

[ SmokeDetector | MS ] Pattern-matching website in body: Move alert for Contact Form 7 to top of form WordPress by Adam Barrett on stackoverflow.com

[ SmokeDetector | MS ] Username similar to website in answer: SWF Full-Width Responsive by karljuhlke on stackoverflow.com

Q: Tearing Down the Structure of Documentation

9:26 PM

52

If you have told us (or privately thought) Documentation isn't working: You are correct. It isn't. Yet. Since early on in the private beta of Documentation, we’ve used a simple, rigid structure: Tags => Topics => Examples + optional sections At the time, users wondered if this was the right s...

discussion featured documentation

9:40 PM

> Pattern-matching website in body, pattern-matching website in title
----------
Title - Position 1-14: abcdefacts.co
Body - Position 1-14: abcdefacts.co

bwDraco

!!/test abcdefacts.com

@SmokeDetector false-

[ SmokeDetector | MS ] Bad keyword in answer: Netbeans - Error : Failed to create process Access is denied (5) by pathlong on stackoverflow.com

tpu- by ArtOfCode

10:02 PM

[ SmokeDetector | MS ] Manually reported answer: Are citations in abstracts considered bad style? by cARLOS on academia.SE

tpu- by ArtOfCode

angussidney

@CalvT I'm glad they're taking more community input this time

Turns out that your users generally aren’t all wrong.

hey now

11:10 PM

Is there a reason the dry runs are kept in the MS DB?

and shown by default on /flagging?

11:23 PM

no reason to delete 'em

and useful data to point to and say "no we did actually test this before we recklessly let it loose on the network and here's the data that shows it"