« first day (1310 days earlier)      last day (2515 days later) » 

12:04 PM
naa- by Yvette
fp- by Glorfindel
 
(question asks for it; voted to close)
 
Night all o/
 
o/
 
12:20 PM
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body, potentially bad keyword in body, +1 more: So use it now. get the tight < by Hisfy som on superuser.com
tpu- by J F
 
12:32 PM
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body: Pills audit to choose which the best is by barrrisboyz on drupal.SE
tpu- by J F
 
[ SmokeDetector | MS ] Manually reported answer: Does card-counting work in online Blackjack? by phallyka on boardgames.SE
tpu- by J F
 
12:36 PM
[ SmokeDetector | MS ] Manually reported answer (batch report: post 1 out of 2): Online vs Live problem by roth phallyka on poker.SE
[ SmokeDetector | MS ] Manually reported answer (batch report: post 2 out of 2): Do two or more players colluding against honest players gain on average more money, or not? by roth phallyka on poker.SE
tpu- by J F on Online vs Live problem [MS]
tpu- by Yvette
 
sigh
 
!!/blacklist-website goldenslot\.gclub\-casino\.com
 
J F
[flagz-plz]
 
12:37 PM
@Mithrandir Blacklisted goldenslot\.gclub\-casino\.com
 
J F
47 mins ago, by SmokeDetector
@Glorfindel Blacklisted gclub-casino\.com
answer gone
 
@Glorfindel What should we do with the question?
 
N.U.K.E.
 
J F
12:38 PM
gone
question gone
 
thx guys
 
CI on 28903f2 succeeded. Message contains 'autopull', pulling...
Restart: API quota is 17172.
[ SmokeDetector | MS ] Blacklisted website in body, pattern-matching website in body: My PDF on website is not getting indexed by Hemang on stackoverflow.com
 
oh, looks like an fp which I autoflagged ...
 
fp feedback on autoflagged post: My PDF on website is not getting indexed
fp- by Yvette
 
yeh I retracted
 
12:46 PM
sd 2- why
 
1. [:38218322] <skipped>
2. [:38218319] <skipped>
3. [:38218301] Body - Position 525-544: cygnet-infotech.com, Position 701-720: cygnet-infotech.com
Body - Position 532-544: infotech.com
 
I could've known you were involved ...
 
J F
@YvetteColomb Can you superping the third person?
 
YES
@Glorfindel always
!!
 
@Cullub you may wish to retract your autoflag on this post: stackoverflow.com/questions/44630940/…
 
12:46 PM
it's true
 
@YvetteColomb whoops, I may have stolen it from you. Sorry...
 
@Mithrandir heh?
 
How badly would I break our various userscripts if I switched MS API filters to base64?
5
 
None of mine use the API
also, it shouldn't be hard to fix :-P
 
/me is weighing up the niceness of not having to URL-encode filters (%00%00%00%0d%21 becomes AAAADSE=) against breaking existing scripts and making their authors fix them
 
1:02 PM
Fix the API
Fixing the API caters for userscripts made in the future. Not fixing it caters for those made in the past.
 
J F
Broken: metapi; OK: AEKS, AIM, autocomments, emoji, FDSC, FIRE, ms-dark-theme, sds, sidebar, spamtracker
so just fix metapi.
 
Really? Doesn't FIRE have filters in it somewhere?
huh
welp that solves that
 
[ userscripts ] continuous-integration/travis-ci/push success on 8cbe986: The Travis CI build passed
 
J F
The parameter is filter, right?
 
@Mithrandir seems I'm a bit too late :( oh well
 
1:04 PM
[ SmokeDetector | MS ] Linked punctuation in answer: I need to run a security erase tool on my drive by than thoai on askubuntu.com
tpu- by J F
 
@JF yeah
 
J F
good, that’s what I searched for.
 
@SmokeDetector sneaky
!!/watch-keyword vitinhquan7\.com
 
@Mithrandir Added vitinhquan7\.com to watchlist
CI on 5a5af85 succeeded. Message contains 'autopull', pulling...
Restart: API quota is 16837.
 
!!/test test reload
 
1:11 PM
> Potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Title - Position 1-12: test reload
Body - Position 1-12: test reload
Username - Position 1-12: test reload
 
Not quite sure but thought I'd pass along nonetheless. Is this spam or just VLQ. Came across it in the NATO queue.
 
[ SmokeDetector | MS ] Manually reported answer: Disable reverse image search on website? by Aaron on stackoverflow.com
tpu- by Glorfindel
 
@Mithrandir thanks
 
J F
poof
 
1:13 PM
!!/watch photonarnia
 
@Glorfindel Added photonarnia to watchlist
 
!!/test blank atm cards
 
> Bad keyword in body, bad keyword in title, bad keyword in username, potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Title - Position 1-10: blank atm
Title - Position 1-16: blank atm cards
Body - Position 1-10: blank atm
Body - Position 1-16: blank atm cards
Username - Position 1-10: blank atm
Username - Position 1-16: blank atm cards
CI on f02de7c succeeded. Message contains 'autopull', pulling...
[ metasmoke ] ci/circleci failure on 7aaf7f8: Your tests failed on CircleCI
Restart: API quota is 16778.
 
@SmokeDetector oh, and this is why we should not blacklist pattern-matched websites.
 
!!/test findmp3songs\.com
 
1:16 PM
> Would not be caught for title, body, and username.
 
!!/test findmp3songs.com
 
> Potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Title - Position 1-17: findmp3songs.com
Body - Position 1-17: findmp3songs.com
Username - Position 1-17: findmp3songs.com
 
!!/blacklist-website findmp3songs\.com
 
@Mithrandir Blacklisted findmp3songs\.com
CI on 0595b64 succeeded. Message contains 'autopull', pulling...
Restart: API quota is 16744.
 
(I'm done going through the watchlist for now. If anyone else wants to... go ahead.)
 
1:22 PM
night all
 
coded 3 features today each estimated at 3 days
now is time for some chill
 
[ SmokeDetector | MS ] Bad keyword in link text in body: iOS Youtube Live Stream API Error by Ankush Chakraborty on stackoverflow.com
fp- by Glorfindel
[ SmokeDetector | MS ] Link at end of answer: Remove Norton One Icon? by tom hanks on superuser.com
tpu- by Mithrandir
 
J F
Hi Tom Hanks! I didn’t know you did spam, too!
 
1:38 PM
[ SmokeDetector | MS ] Mostly non-Latin answer: mysterious HTTP 307 redirect (static.dbams.com) by user8183383 on stackoverflow.com
tpu- by Glorfindel
 
1:50 PM
7 messages moved to trash
 
10 second backoff on request to questions/48449;48459?site=crypto
 
@Andy another backoff ^
 
...I forgot how much of a pain filters are
 
@ArtOfCode You remember now eh?
What is your opinion on freeform regexes without TLD's in blacklisted_websites.txt btw?
should we get an issue going for discussion
 
And also @ArtOfCode if you have a link to the discussion on whether pattern-matching websites should be in findspam.py, not its own .txt
 
2:09 PM
@ArtOfCode Metasmoke ready to go?
 
SSD and more ram on the work computer!
 
Hay undo
Hay andy
 
@Andy nice!
 
@Andy Maybe you still have it. Do you know when the discussion was about moving the various blacklists to flatfiles?
 
I've found out that the first thing I do with a fresh install of Windows is install Firefox and go to Stack Overflow.
I may have a problem
 
2:10 PM
That's not a problem.
 
@Magisch There was a discussion on Github about it
 
That's why you're blue.
 
My company-issued machine is one of these. Not a bad laptop.
 
@Undo I'm using a I5 NUC
Not bad, has a fast ssd and operates quickly
 
2:12 PM
would be bad for gaming but I don't do that on a workstation so it's nearly perfect
 
@angussidney done cc @CalvT븃 @ArtOfCode
 
@Magisch Are you looking for something specific?
In semi-related news, I've thought about building the database/api that would be needed to share all of this data between Smokeys, but Smokey itself would need a lot of changes to pull/update so that's been the biggest thing holding me back on actually building anything
 
J F
@ArtOfCode SyntaxError: Unexpected token '=>'
 
Rolling back metasmoke; API breaking change I didn't expect (@Art):
https://metasmoke.erwaysoftware.com/api/posts/urls?key=d897aa9f315174f081309cef13dfd7caa4ddfec1c2f8641204506636751392a4&page=1&urls=//askubuntu.com/a/927020%3B//stackoverflow.com/a/44631118%3B//stackoverflow.com/questions/44567352%3B//superuser.com/a/1220750%3B//stackoverflow.com/a/44632155
 
@Andy I said the following:
3 hours ago, by CalvT븃
I wonder if pattern-matching website should be moved out of findspam and into it's own file, so we can more easily see what's on it
 
2:17 PM
@ArtOfCode A handful of my stuff would break, but I'd suck it up and be much happier than having all of those percent signs
 
So we were trying to find the reason why not
 
So, if you want my vote, I say go for it, @ArtOfCode
 
Pretty sure we already did it. github.com/Charcoal-SE/metasmoke/commit/…
(rolled back now because it scared me)
 
@Undo in a quiet whisper Boooooo...*hiss*
 
@Andy no, inclusion in findspam.py vs a separate .txt
 
2:21 PM
@Undo yeah, wasn't done on filters yet :)
 
Okay, I'll just deploy the rev before it
 
Aye, that's working AFAIK
@Andy I also say go on this. We can do it in a branch until we're happy with it
 
Done. Test away @Art, I can't figure out how to use it :P
haven't tried much, but still
 
J F
@ArtOfCode You broke the JS:
 
The data exploder?
 
2:24 PM
yes, the exploder
 
J F
[Error] SyntaxError: Unexpected token '=>'
	(anonymous function) (application-82121dc6fc615d4db4f4.js:1)
 
@ArtOfCode The difference between you and me...you'd probably do it in Ruby. I don't know Ruby. :( I'd probably do it in Flask or Django.
 
Exploder should work AFAIK
 
@Andy You don't learn Ruby, you just start writing it
3
 
@ArtOfCode is that linked from anywhere?
 
2:26 PM
@Andy I'd be happy with Flask, though, I know enough of it. Also SQL alchemy, since that's what we got in NG
@Andy probably not, but /data
Toggle help on, @Undo, and that should give you a few hints
 
@Undo I feel the same way about javascript
 
J F
5 mins ago, by J F
[Error] SyntaxError: Unexpected token '=>'
	(anonymous function) (application-82121dc6fc615d4db4f4.js:1)
 
By now I can do all kinds of unholy and unfair things with JS
 
J F
@Art ^^ on Safari, this on FF:
SyntaxError: missing = in const declaration  application-82121dc6fc615d4db4f4.js:1:929
 
2:32 PM
[ SmokeDetector | MS ] Manually reported answer: Tropical beaches and snow topped ski slopes by Eddie Washington on worldbuilding.SE
 
!!/watch-keyword snowcomparison\.com
 
@JoErNanO You don't have code privileges, but I've created a pull request for you.
tpu- by CalvT븃
 
Cross-site spammer. Posted on Travel too.
 
@JoErNanO could you mention that in a comment on that answer? Makes it more clear for other users on Worldbuilding.
 
Merged SmokeDetector #855.
CI on 6da69ac succeeded. Message contains 'autopull', pulling...
 
2:35 PM
@Glorfindel Don't have a profile there. I have alerted a WB mod though.
 
Restart: API quota is 15841.
 
Could you please?
 
@JoErNanO k, thx. It's gone now.
 
@Glorfindel Thank you kind sir.
 
And a comment like that has more authority when it's posted by a moderator from the mentioned site.
 
J F
2:39 PM
NoMethodError in DataController#retrieve

private method `select' called for nil:NilClass
Extracted source (around line #65):

#63
#64   def public_fields(type, const)
*65     sensitive = AppConfig['sensitive_fields'].select { |x| x.start_with? "#{type}." }.map { |x| x.gsub("#{type}.", '') }
#66     const.attribute_names - sensitive
#67   end
#68 end

Extracted source (around line #32):

#30     end
#31
*32     data = tables.map { |v| [v[0], v[1].order(id: :desc).limit(v[2]).select(public_fields(v[0], v[1]))] }.to_h
Error, @ArtOfCode
 
[ SmokeDetector | MS ] Mostly non-Latin answer: How to delete an entire group in Telegram by Meysam on stackoverflow.com
tpu- by J F
 
J F
You’ll probably want to change this to route('/data', () => { to fix errors on other pages, Art.
 
3:04 PM
if someone has some time check out this user stackoverflow.com/users/8182746/raluca-grigorovici, all answer are very spammy, either we raise only a mod flag or do we report?
 
[ SmokeDetector | MS ] Manually reported answer (batch report: post 1 out of 3): iOS Youtube Live Stream API Error by Raluca Grigorovici on stackoverflow.com
[ SmokeDetector | MS ] Manually reported answer (batch report: post 2 out of 3): how i can implement live streaming in android by Raluca Grigorovici on stackoverflow.com
[ SmokeDetector | MS ] Manually reported answer (batch report: post 3 out of 3): WebRTC with livestream of videos by Raluca Grigorovici on stackoverflow.com
tpu- by J F
tpu- by J F
 
!!/blacklist-website streamaxia.com
 
@Mithrandir Blacklisted streamaxia.com
CI on bbc6417 succeeded. Message contains 'autopull', pulling...
Restart: API quota is 15444.
[ SmokeDetector | MS ] Pattern-matching website in answer: Remove direct link on YouTube/Google Drive videos by akunid on stackoverflow.com
tpu- by J F
 
@SmokeDetector why
 
3:14 PM
@TheDarkSide Body - Position 203-224: htmlkomik.tk";, Position 285-306: htmlkomik.tk
 
@SmokeDetector ...
 
@TheDarkSide all .tk websites are pattern matched IIRC
 
@Mithrandir What does that mean in simpler language. tk websites are undesirable because? ...
(Don't want to click the link and find out myself)
 
they often are spam
 
@Mithrandir I see.
Thanks.
 
3:21 PM
.tk is the Tuskish extension right?
 
But:
> .tk is the Internet country code top-level domain (ccTLD) for Tokelau, a territory of New Zealand located in the South Pacific.
 
Those domains are (were?) free to register, so they're probably attractive to spammers.
 
Ah.
tr is Turkey.
 
(removed)
 
[ SmokeDetector | MS ] Pattern-matching website in body: only date input type are passing blank to email by William Wallace on stackoverflow.com
fp- by Mithrandir
 
3:39 PM
@Glorfindel still free
 
@JF this looks like @Undo needs to merge sample config with his existing config file
 
J F
How about the other errors?
 
@JF this one is strange, sounds like a lack of ES6 support but could also not be
 
[ SmokeDetector | MS ] URL-only title, link at end of body: secretsofyouth.tk by gfasxsawkxwes on askubuntu.com
tpu- by J F
 
3:45 PM
@JF I have no idea where this one is, because of the packing.
and can't repro it locally
 
J F
@ArtOfCode Unfortunately, Safari is being dumb and it won’t show me the location of that error.
 
> Safari
there's your problem
:P
 
J F
@ArtOfCode Updated Firefox, that fixed it.
But I like Safari!
 
(Disclaimer: I may be biased against anything that isn't Firefox or Chrome)
 
J F
> may
really? never would’ve guessed.
 
3:47 PM
with non-trivial probability, yes
 
[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +3 more: healthpowerzone.com/t-complex-1000/ by emmadan on drupal.SE
tpu- by J F
 
And that API filters error that Undo had to rollback is just weird.
 
Congratulations American Voters. The GOP just accidentally released information about you (regardless of party affiliation): upguard.com/breaches/the-rnc-files
 
Who'd be an american voter
 
J F
3:54 PM
@CalvT븃 US citizens who registered to vote.
 
and over 18. In some states it's done automatically for you, in others, it's not.
 
J F
@Andy TelReliability, MT10_ObamaDisapproval, and FTC_DoNotCall. wow.
 
It doesn't look like the dataset is available any more. That's too bad. I have several terabytes of space free at home and would love to hunt through it to see what it has about me.
 
I was more meaning who would want to be an american voter - leaks, useless candidates...
 
I never vote. I don't want to be held responsible for the ultimate demise of mankind.
 
4:02 PM
@ArtOfCode Critical to fix now?
(read: are we leaking PII?)
 
@Undo Can't tell. The function that error is in is the one that protects PII columns, but I can't tell if the error protects us from leaking them or not.
 
[ SmokeDetector | MS ] Blacklisted user: Google drive embed NO iframe by akunid on stackoverflow.com
 
@SmokeDetector why
 
@CalvT븃 Blacklisted user - blacklisted for //stackoverflow.com/a/44634186 (m.erwaysoftware.com/posts/by-url?url=//stackoverflow.com/a/…) by the metasmoke API
 
@ArtOfCode Looks like public_fields is always called before returning, and it'll always error because AppConfig['sensitive_fields'] will always be nil. Looks safe.
Broken, but safe
 
4:08 PM
That sounds about right. Can wait until you've got more time, then
 
yep. Tonight.
Should start bringing my macbook to work, would be nice for these kinds of things
 
[ SmokeDetector | MS ] Few unique characters in answer: Etymology for “Mc‑” and “O’‑” prefix in surnames by user241553 on english.SE
tpu- by J F
 
@Andy Oh, it'll be torrented somewhere
can't leak something that high profile then just wipe it off the Internet
 
Wouldn't put it past the legal system to make it a crime to access, but it'll be available
 
@Undo It looks like the security issue was fixed before this was published though, so it wasn't something that someone could go quickly grab
 
4:14 PM
oh
:(
Was looking forward to digging through it for anything on me
 
Me too
except about me
 
So tl;dr no material damage?
 
It's got names, addresses, phone numbers and birthdays, so...
 
"anything on me" - that reminds me I wanted to buy a new shirt
 
But, without the actual dataset, it's more just "wow! They have everything about me" instead of all the scammers going "I can be anyone!"
 
4:19 PM
[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, link at end of body, potentially bad keyword in body, +2 more: www.health-forall.com/dermaglo-ageless-moisturizer/ by zilma kaci on drupal.SE
tpu- by CalvT븃
 
J F
… but if someone hacks the guy who found and downloaded the DB, it could end up in anyone’s hands.
Which reminds me — I should change my birthday. They say to do that twice a year. Security or something.
5
 
Jan. 1
Ta-da!
 
@JanDvorak's birthday must be January 4th...
 
I'm pretty sure it was Valve that said having a Jan 1 birthday is a huge indicator that the user is actually a person, not a bot.
 
Makes sense
 
4:40 PM
[ SmokeDetector | MS ] Link at end of answer: how long does SQL Azure tier change last? by Alberto Morillo on stackoverflow.com
fp- by ArtOfCode
 
signature
 
I actually went with VLQ, but they are basically the same sooo
 
5:06 PM
[ SmokeDetector | MS ] Link at end of answer, pattern-matching website in answer: Creating an authentication manger with android by Noor Aqsa on stackoverflow.com
tpu- by Kyll
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body, link following arrow in body, pattern-matching website in body: Discover The Most Skin Creme For Men by hsojossl on askubuntu.com
tpu- by CalvT븃
 
... "The most skin"?
 
Anyone got any idea why (?<=text\s).+\b is causing me errors in JS? Working fine in regex101.com
 
Are others less skin?
 
> also what your sister circumstances
Sounds legit
Oh JS doesn't support lookbehinds :/
 
J F
that.
 
5:15 PM
@CalvT븃 Whew...had to reread that quote. I thought it said
> also what your sister circumcises
 
shields eyes
 
@CalvT븃 xRegex
@Andy ew
 
@CalvT븃 Javascript's regex implementation doesn't use (?<=foo) positive lookbehind syntax. Double check what you're doing & what syntax feature is available in Javascript's regex for you.
 
@doppelgreener yup, I've had to swap to using capturing parenthesis
And then calling for group 1
 
That'll do.
 
5:26 PM
198 million US voters private details leaked
That's damn near everyone that's registered to vote
 
I feel like opponents to the 2016 Australian Census non-anonymous data-gathering would feel very validated now.
 
@Magisch Woah
 
That kind of sounds too big to even be true
Who has 1.7 terrabyte of this sensitive information and just lets it sit on an unsecured cloud server
Like I know bad itsec but damn
 
yeah checking sources
 
It's #1 on reddit atm
But that doesn't mean much
 
5:31 PM
[ SmokeDetector | MS ] Link at end of body: Secrets Of Youth Everyone to be by donamarker on askubuntu.com
tpu- by CalvT븃
 
Scroll up a little, Andy (I think?) mentioned it
 
@Magisch Upguard seems to be the primary source
Apparently confirmed by the pwnd firm
Nothing on their website...
 
[ SmokeDetector | MS ] Link at end of answer: Where do I pay tax - UK or Malta? by user57729 on money.SE
tpu- by Kyll
 
@Kyll Good thing is probably that nobody got their hands on the full thing
since this is 1,7 terrabyte of data that would take days to download
 
But it was left there for months...
 
5:36 PM
That it was there for months can mean two things
1) nobody saw / noticed it
2) somebody did and deep root's sysadmins didn't notice someone leeching it
Not sure if I'm not giving them too much credit by assuming they would've noticed it
 
Well it wasn't their servers but Amazon's
 
I assume that since they stored it there that they constantly uploaded to and downloaded from it
so someone making a full backup wouldn't automatically raise red flags
although
If someone got on this data they're potentially sitting on the most valueable data leak in the history of the internet
There's aggregated information about these people's online profiles and predictive models about their voting habits in there
In other words just about as good as you're gonna get for identity theft short of outright an SSN
> Each record lists a voter's name, date of birth, home address, phone number, and voter registration details, such as which political party a person is registered with. The data also includes "profiling" information, voter ethnicities and religions, and various other kinds of information pertinent to a voter's political persuasions and preferences, as modeled by the firms' data scientists, in order to better target political advertising.
 
Yeah read that
This is crazy
 
That is like
 
This data is pure platinum
 
5:43 PM
This is spearphishing gold
I could phish people with this
everyone could
 
J F
If you had the database, you could target your social engineering attacks by implying you think Trump is (a great guy|a terrible person).
 
You could target specifically old affluent conservative white people
Or old affluent people anyways. And you'd know everything about them. Perfect for social engineering attacks
 
J F
Could be worse: what if someone found a simple method to factor large numbers and sold it to ISIS?
 
haven't we switched from RSA already?
 
Nowhere near
 
5:49 PM
I do have a simple method to factor large numbers
 
RSA is still the strongest asymmetric encryption commercially available
 
J F
@JanDvorak what?
 
What happened to elliptic curves?
@JF Yep. It isn't particularly fast, but it works.
 
[ SmokeDetector | MS ] Pattern-matching website in answer: Convert NIB to XIB without Interface Builder by Akbar ansari on stackoverflow.com
 
J F
sd n
 
5:55 PM
Even fast prime-division algorithms don't make a dent in 2048-bit RSA
and you can't cache the results of the divisions in advance or download a rainbow table, either - such a rainbow table would take up approximately 10^200 universes.
 
how many 1kbit primes are there?
 
Around 2^1014
 

« first day (1310 days earlier)      last day (2515 days later) »