« first day (1194 days earlier)      last day (2643 days later) » 

12:00 PM
@M.A.R. Ah, might need to update then
@ArtOfCode Yup, that works.
 
J F
@SmokeDetector k
 
naa- by Glorfindel
 
That's quite spammy for NAA: Youtube links, 1 repo user on a old post...
(Completely unrelated YT link)
 
J F
@Cerbrus You can also provide a commit message when skipping CI:
Foo the bar

[ci skip]
 
12:06 PM
Yea, realized that later :P
 
[ SmokeDetector | MS ] Manually reported question: How to start a news website? by Ravi Soni on meta.SE
tpu- by Glorfindel
 
@Cerbrus missed that one. Still, the rest of the post is more or less on-topic (but not an answer).
 
And it probably can be in the description as well, right, @JF?
 
J F
@Cerbrus Yes
 
well ain't this fun
corrupt OS
time to spend a morning nuking that partition and reinstalling it
 
12:08 PM
My condolences
 
tpu- by J F
 
!!/blacklist-website indiafeednews\.com
 
@Glorfindel Blacklisted indiafeednews\.com
 
just one more proof of the value of backups... I'd be spending the morning troubleshooting and valiantly attempting to save my data if I didn't have one, but... I do.
 
CI on 47a66a1 succeeded. Message contains 'autopull', pulling...
Restart: API quota is 3906.
[ SmokeDetector | MS ] Few unique characters in body: New Website New Looks by Nadiabbu on startups.SE
tpu- by Glorfindel
 
@Glorfindel Post 1: Already recently reported
 
@SmokeDetector still not gone
 
@SmokeDetector I know, but I want to report it's current form.
 
@ArtOfCode ^ Is there a way to re-report a post?
It's gone...
 
what would the point be?
 
12:19 PM
New metasmoke user 'kaufmanu' created
 
@SmokeDetector we're still getting these?
 
@ArtOfCode Re-parse contents, in this case, it was reported for being basically empty
 
Around 60 now
 
While it was actually spam
 
@Cerbrus Smokey doesn't parse manual reports, it just pings 'em off to metasmoke
 
12:21 PM
Good point
FR: trigger to re-parse a post on MS... Not sure if it'd be worth the effort though
Meh
 
!!/rereport
 
!!/reparse
 
J F
!!/recheck
 
!!/thisposthasbeenupdatedsopleasecheckthisforspamagainthankyou
Shouldn't the graph here contain a line denoting when our meta announcement was featured?
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, pattern-matching website in body: This is the key primo garcinia by sarahuire on drupal.SE
tpu- by Glorfindel
 
J F
12:25 PM
@SmokeDetector k
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body: Primo Garcinia will day's cease by rdhu pus on apple.SE
tpu- by Cerbrus
 
Ooh, those graph lines show settings being changed, @ArtOfCode?
 
@Cerbrus I want this command
 
J F
@SmokeDetector k
 
@SmokeDetector k
BTW, I remember we wanted to see what the max feedbacks on a post can be
Let's test that
 
12:35 PM
@M.A.R. no limit.
 
@Glorfindel But it could prolly break MS design at some point
 
Jan 25 at 17:09, by ArtOfCode
pretty sure we have a post with 8 feedbacks somewhere
 
@Cerbrus yep
 
You could make a setting 'Featured on Meta' :P
 
Ah, so no custom messages in there :P
 
12:38 PM
BTW @David this was the drama I was talking about
And I won't like to see it happen again
 
@M.A.R. Ah. Thx. I think that's before my time here ...
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body: Regarding Infinite Cleanse by cleanseinfinite on workplace.SE
tpu- by Glorfindel
 
!!/blacklist-website malesupplement\.ca
 
@Glorfindel Blacklisted malesupplement\.ca
 
hm... Summer of Code looks like... actually a decent idea for a summer "job"
 
12:42 PM
@DavidPostill Yeah, Jurassic era
 
@Undo was it GSoC or GCI you were involved in?
 
CI on fd55eb4 succeeded. Message contains 'autopull', pulling...
Restart: API quota is 3699.
 
Art and Undo used to carve Smokey blacklists on cave walls.
 
@M.A.R. The same user caused all sorts of problems in RA as well. I recall kicking him a few times ...
 
We had no Smokey-related userscripts
Soooo primitive
 
12:44 PM
fp- by J F
 
This chat was only full of Yvette ''k''s
@SmokeDetector F don't delete don't delete don't delete
Argh
 
[ SmokeDetector | MS ] Manually reported answer: how to join tuple datetime by Johny Boom on stackoverflow.com (@dorukayhan)
tpu- by Glorfindel
 
@SmokeDetector K
I actually flagged that, but FDSC didn't submit feedback. Hmm
Maybe it didn't load, as usual
 
fp- by J F
 
SD - F
 
12:54 PM
[ SmokeDetector | MS ] Bad keyword in title: How to help a postgraduate student to write a book? by Anonymous Teacher on academia.SE (@Wrzlprmft)
tpu- by J F
 
@JF: I was just fixing those spaces xD
I should probably get a IDE configured with a similar linter
 
J F
@Cerbrus I highly recommend Atom
 
@SmokeDetector k
 
[ SmokeDetector | MS ] Pattern-matching website in answer: Why google doesn't caching some of the images from my website by Guest on stackoverflow.com (@dorukayhan)
naa- by Cerbrus
 
The transcript of the Parliamentary debate on Trump's state visit to the UK is just so... British.
 
1:00 PM
@JF Does it come with a linter?
 
> The President’s power is enormous, but unfortunately his intellectual capacity is protozoan.
@Cerbrus not by default, but you can install them as plugins
 
Should have a look at that then
 
J F
@Cerbrus You can install linter and linter-xo in settings.
 
Oh, I meant to update the FDSC version, derp
 
J F
@Cerbrus Oh BTW, where does the new button show up?
 
1:02 PM
In the flag dialog
Next to the tp/fp etc counts
 
J F
Oh, I see — it only works if you autoflagged.
Might be good to show it if you haven’t feedbacked yet — sometimes FDSC doesn’t load the first time.
 
If you haven't provided feedback yet, you can flag any way, not?
 
J F
@Cerbrus Not if you flagged, but FDSC didn’t load.
 
@JF Can't star twice
Unless you mean the [star-plz] message
 
J F
@M.A.R. I typo’d
 
1:05 PM
Which would be self-referential and a typical annoying thing programmers do
 
@JF But if FDSC didn't load, the feedback button doesn't render any way
 
J F
@Cerbrus If you flagged, then click the flag link again, FDSC is loaded, but you’ve already flagged, so you can’t feedback.
 
Ooooh
I get it. It should show if you've flagged, regardless of autoflag or not
how do I configure those linters in atom?
 
J F
@Cerbrus Did you install them in the settings?
 
Aye
Apparently it's not happy about my linebreaks
> Expected linebreaks to be 'LF' but found 'CRLF'. (linebreak-style)at line <all of'm>
 
1:12 PM
New metasmoke user 'Metoniem' created
 
@Cerbrus it's simply not happy about Windows. Shame on you.
;-)
 
J F
@Cerbrus Do a git pull, I’ve configured the linter to ignore linebreaks.
 
New metasmoke user 'Matt McDonald' created
 
Kewl
 
J F
1:18 PM
naa
 
Now I'm trying to figure out how to see if a user has flagged the post...
 
@JF That's what I did, but maybe someone recognizes the behaviour.
 
J F
@Cerbrus $(".popup .already-flagged").length > 0
 
var isFlagged = $(".popup .already-flagged").length > 0? That simple? :-)
 
J F
Should be. Let me check what happens when you retract a flag
If you retract the flag, there’s an .already-flagged there too.
 
1:21 PM
"confirm autoflag" wouldn't be accurate, then. Change the text to "True positive?"
 
J F
@Cerbrus Yeah — or tpu-
 
@JF Hm, technically, then you could still want to validate the flag
@JF that's better
FDSC has been updated (Source) (Raw): Added tpu- button to flagging popup.
3
 
New metasmoke user 'Jan Doggen' created
 
Did I miss a comment on the meta post? I'm trying to figure out what this is referring to:
Who the hell writes at 36pt? — Toby 1 hour ago
 
@Andy Referring to the checks on the site?
> Fact: If you wrote all our spam tests out vertically at point size 36, they'd be as tall as the One World Trade Center.
 
1:34 PM
Oooooooh
 
I hope you all saw that lightbulb flash with that realization
 
[ SmokeDetector | MS ] Blacklisted user: SQL Error "PDOStatement::execute(): MySQL server has gone away" in Yii2 by Blackjack on stackoverflow.com (@dorukayhan)
fp- by J F
 
User should probably be unblacklisted
 
1:37 PM
Which wasn't spam, but vandalism at most
 
@JF User is not blacklisted.
 
Maybe we need 3 strikes and you're out for repeated vandalism.
 
J F
@SmokeDetector why
 
@JF Blacklisted user - blacklisted for //stackoverflow.com/questions/42412005 (m.erwaysoftware.com/posts/by-url?url=//stackoverflow.com/…) by http:metasmoke
 
@Cerbrus Invalid format. Valid format: !!/rmblu profileurl or !!/rmblu userid sitename.
 
Right
 
J F
!!/rmblu 4941250 stackoverflow
 
@JF User is not blacklisted.
 
schrodinger's blacklist
 
J F
1:40 PM
!!/isblu 4941250 stackoverflow
 
@JF User is not blacklisted (4941250 on stackoverflow.com).
 
J F
I give up.
 
Aaaand we're back. Backups are a good thing.
Think I've lost about 30 minutes of data from late last night, which is pretty good for a corrupt OS.
 
[ SmokeDetector | MS ] URL in title, link at end of body, pattern-matching website in body, pattern-matching website in title: revivagenixfacts.com/andronite-enhanced/ by user64975 on workplace.SE
tpu- by J F
 
J F
@ArtOfCode could you add the MS report’s id to the flag_log websocket messages?
 
1:53 PM
@JF at some point, yeah. Need to restore the rest of my system first :P
 
New metasmoke user 'Alexis Tyler' created
 
i.e. waiting for a tar decompress of 52 GB of data to finish
and installing a bunch of software again
 
Is the 7 max auto flags per site, or across all of SE?
 
J F
@CalvT Per site, per day
 
@JF thanks
 
2:08 PM
I need some help phrasing a response to this. I'm really trying to avoid planting any idea that we've built a sock puppet network, but what is being suggested is basically a giant puppet network of Smokeys
Thanks @Andy; is there any argument against having 100 dedicated Smokey "normal user" bot accounts? — JohnLBevan 17 mins ago
 
For one, we'd probably need a dev team permission.
Also, it's 116 sites (and growing) times at least three accounts per site.
You need 15 rep on each, so most likely 3x 200 rep to qualify for the association bonus.
 
[ SmokeDetector | MS ] Bad keyword with email in body: Looking for a good CMS solution by JerryLiu on stackoverflow.com (@dorukayhan)
 
plus, imagine the fun caused if a site mod decided to grief the project.
 
fp- by Glorfindel
 
@JF the auto-update seems to have stopped working since I upgraded to AIM 0.10.
 
J F
2:16 PM
@JanDvorak I haven’t done any updates since releasing v0.10
 
Who is Randy sVF and why are they resolving things in the RFC docs?
specifically RFC 3
 
2:31 PM
New metasmoke user 'Jo Douglass' created
 
I think we may end up needing pagination, filtering and sorting on the users page
Hm, why don't some users there have a profile link?
 
@Andy not a clue, but I can probably block 'em. Have you managed to un-resolve everything, or do I need to find out how to do that?
@Cerbrus because they're not SE-authenticated
 
@ArtOfCode That makes sense
 
@ArtOfCode I can. I didn't want to until I knew it wasn't someone here
 
@Andy I don't recognise the username
and anyone here should have edit access, anyway. Link sharing was set to comment, so I've knocked that down to view
 
2:38 PM
I unresolved the two I was notified on. I'm not sure how to find if there were others though. The two I notified on were on comments I had made
 
I don't see any other resolutions
 
J F
@Andy Click on “Comments”
 
fp- by Glorfindel
 
@Undo By the way the change you rolled out with non SE user privileges didn't apply retroactively
sd - why
 
1. [:35629181] <skipped>
2. [:35629177] Title - Phone number: 1428571429
 
2:47 PM
@quartata By design
 
@Undo figured but wanted to make sure
 
@Undo / @ArtOfCode : Bug, what the blazes happened here o.O
I was writing a FR with the users table open, and suddenly, the new report popped up in the users table...
 
@Cerbrus I'm gonna blame websockets?
 
[ SmokeDetector | MS ] Few unique characters in answer, repeating words in answer: How master and challenger tiers work by hai on gaming.SE
tpu- by Cerbrus
 
@SmokeDetector k
 
2:51 PM
Not NAA?
 
I'll keep the users page open, see if it happens again
 
abusive
 
@quartata Gibberish is abusive
It can be flagged an N though.
 
All right
 
k is better, though
 
2:52 PM
A FR to add some functionality to the users table. Short request, not sure if I can add anything to it
 
That reminds me I had some issues to post
 
@Cerbrus Yeah, mind throwing up an issue for that too? Pretty sure I know what it is
 
@Undo: That link is an issue. Basically, way ahead of you :P
 
Oh
On mobile
 
Ah
 
2:55 PM
Pretty easy to get ahead of me when I'm trying to type in two places on a phone
 
@ArtOfCode: RE: users sorting: a "Is SE authenticated" filter might be convenient
@Undo Excuses excuses ;-)
 
@SmokeDetector @Andy In the theme of website similar to username we could also do username repeated in post
last report related
@JF Will Coal automagically use the latest versions of AIM and FDSC?
@ArtOfCode This might already be available to people with more privileges than me but something I thought of for testing new regexes/blacklisted keywords is a page where you can put it in and have it show the number of posts matched and the tp/fp/naa breakdown
 
@quartata 's called search :)
 
@quartata Can't you achieve such a thing with search?
Yeah, that
 
You can't put regex in search surely
 
3:06 PM
@quartata yes you can. There's a checkbox 'regex'.
 
J F
@quartata Yes. It loads from rawgit.
 
That seems problematic. What flavor?
 
@quartata MySQL.
So it's a bit different from Smokey.
 
@ArtOfCode: That was quick o.O
 
Oh OK. If it was PCRE I'd be concerned because it's not guaranteed to halt.
 
3:08 PM
Also, blacklisted words/websites are surrounded by word boundaries when interpreted by Smokey, but not in metasmoke.
 
@Cerbrus I was just setting up my environment when you posted, and it was a dead easy request
 
@JF Cool.
 
Good environment test :P
 
well, I haven't actually tested it, but there's no way it's not going to work
 
@Glorfindel Taking the same approach as before; we'll treat these as the exception and ignore them.
 
3:10 PM
When to MS changes like that go live? Is that automatic, or does it require a manual restart?
 
requires a Cap deploy from me
 
@Undo fine with me.
 
[ SmokeDetector | MS ] Manually reported answer: How to update available products in real time for a ecommerce website by osama on stackoverflow.com (@dorukayhan)
tpu- by Cerbrus
 
The standby system in MS is pretty cool.
 
3:11 PM
yes, having failover is a good thing
 
J F
@ArtOfCode You know you can put closes #123 in a commit to auto-close the issue, right?
 
@JF yeah, but I always forget to :P
 
I suppose that while MS is the bigger concern if it went down Smokey is the one that's far more likely to crash
 
@quartata MS down is not a big concern. Smokey will still continue to report here; we only lose autoflags and statistics.
That's probably why a handful of people can launch Smokey, but only Undo has access to the MS machine.
 
3:14 PM
more because MS has PII
 
Well no MS means no feedback at least I thought. Would chat feedback still work?
 
J F
@Undo Anything besides emails?
 
access tokens
 
@JF API tokens
 
lots and lots of them, now
 
J F
3:16 PM
duh
 
I can put a backup copy of MS online if I need to, but it wouldn't be massively useful
 
Yeah access tokens are scary
 
@quartata they won't get registered on MS, though they would help in user blacklists in Smokey
thus even if MS is down you still feedback
 
also whaddaya mean we set metasmoke up so that it actually works the first time you try to set it up
 
It does? :P
 
3:19 PM
Totaly
 
@Undo or it would do, if I hadn't tried to put an out of date data dump into it. Speaking of, could you sanitize a new one that I can have when you get a chance?
 
@Undo: Yea, that should fix the table issue. Derp :D
 
@ArtOfCode Don't touch metasmoke, force push incoming
 
someone's doing a naughty with git history
:)
 
Committed a secret. Already reset, but better not to have it in the history anyway
@ArtOfCode Deployed; issue with your sorting is that it doesn't actually sort all the data
Only what's on the page
 
3:29 PM
Aye, I know, but all our tables do that. We'd need to switch to server-side sorting to fix that.
 
Aye
That'll be a project
 
J F
@Undo You revoked any tokens, right?
 
there's a JS library that does it pretty well. Just takes time
 
@JF don't need to; you'd need both a valid secret and a valid code to do anything evil
 
New metasmoke user 'Todd Sewell' created
 
3:31 PM
Neither of which are easy to get
 
haxx0rs the server
 
... nooope. Audit logs now have IPs in them.
 
@CaffeineAddiction I've been trying to test your docker stuff. Unfortunately, it doesn't seem to be working. I get an import error when attempting to from sh import git still, though it's not complaining about Windows incompatibility, so that's good. Output
Notes: sh is installed and up to date, import sh works, from sh import git does not
I'll poke at it again in a few hours. I have "real" work to do
 
@Andy thats most likly because I purged git from the container
didnt know it was needed ... it can be added back but you will have to do docker build again
 
sounds pretty easy
 
3:42 PM
@Andy fixed it in my branch
inside the container itself you can just run apt install git
 
could it be git-man?
 
git-man?
 
root@0aeb935ef504:~/src# apt install git
Reading package lists... Done
Building dependency tree
Reading state information... Done
Package git is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source
However the following packages replace it:
  git-man

E: Package 'git' has no installation candidate
 
@SmokeDetector c
 
3:45 PM
naa- by ArtOfCode
 
oh, sorry ... you need apt update first
 
J F
@ArtOfCode c?
 
What does c mean
Typo'd v?
 
@JF c as in E=mc^2
 
@Andy "apt update && apt install git"
 
J F
3:46 PM
@ArtOfCode ah.
 
For future reference, oh people from search: metasmoke database redaction query of PII redaction awesomeness:
UPDATE `api_keys` SET `key` = '';
UPDATE `api_tokens` SET `code` = '', `token` = '';
UPDATE `audits` SET `remote_address` = '';
DROP TABLE `flags`;
DROP TABLE `ignored_users`;
UPDATE `smoke_detectors` SET `access_token` = '';
UPDATE `users` SET
	`email` = CONCAT(`id`, "@metasmoke.fake"),
	`encrypted_password` = '',
	`current_sign_in_at` = NULL,
	`last_sign_in_at` = NULL,
	`reset_password_token` = '',
	`reset_password_sent_at` = NULL,
	`api_token` = '';
 
Look at all the things I'm learning today!
 
Wait what happened? Did you commit a password?
 
@quartata above query is for getting @ArtOfCode a test database
 
No I know but you said you commited a secret and Art was complaining about someone filter branching
 
3:50 PM
unrelated, the secret thing is completely resolved
There's a button in Stack Apps to take care of that exact thing
 
OK, cool.
 
Essentially, undo is sitting on lots of PII
More specifically, API write keys to over 40 accounts, some of which are moderator accounts
So that info isn't leaving undo's server
 
real damage potential is relatively low, actually.
 
someone could get a mod's api key and start wantonly deleting/closing stuff, no?
 
If you had my API token, you'd have a hard time doing much more evil than just spam-deleting a bunch of posts and comments, which should be easily revertible on SE's side.
they'd grumble about it, but you're not going to get any PII from a mod token
@ArtOfCode email in your inbox. Five minutes.
 
3:58 PM
ten :P
 
Oh, forgot. Sorry :P
 
'cuz I've still got to set my inbox up after reinstalling :P
 

« first day (1194 days earlier)      last day (2643 days later) »