Charcoal HQ

6:02 PM

line 856ff. in findspam.py maybe?

        # The TLDs of Iran, Pakistan, and Tokelau in answers
        {'regex': r'(?i)http\S*\.(ir|pk|tk)[/"<]', 'all': True,
         'sites': [], 'reason': "pattern-matching website in {}", 'title': True, 'body': True, 'username': True,
         'stripcodeblocks': False, 'body_summary': True, 'max_rep': 1, 'max_score': 0, 'questions': False},

@bwDraco

Or something around github.com/Charcoal-SE/SmokeDetector/blob/master/… maybe

The above snippet only triggers in answers

bwDraco

!!/test-a z.ir

SmokeDetector

> Pattern-matching website in answer
----------
Body - Position 1-13: http://z.ir/

bwDraco

...we have a smoking gun.

Byte Commander

^

bwDraco

(the string tested is http://z.ir/)

!!/test-a z.pk

SmokeDetector

6:05 PM

> Pattern-matching website in answer
----------
Body - Position 1-13: http://z.pk/

SmokeDetector

6:20 PM

[ SmokeDetector | MS ] Manually reported answer: How can I use native Android Camera App to read barcode/qrcode (no ZXing)? by user3020352 on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in link text in body: h.264 video voice is fine but has no video image on iphone6 plus by xoyabc on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in body: Redirect all URLs in a folder and exclude a URL by Ron on stackoverflow.com

tpu- by NobodyNada on How can I use native Android Camera App to read barcode/qrcode (no ZXing)? [MS]

NobodyNada

!!/watch delivr\.com

SmokeDetector

@NobodyNada Added delivr\.com to watchlist

NobodyNada

@SmokeDetector why

SmokeDetector

@NobodyNada Post - Bad keywords apple, support in link text

NobodyNada

@SmokeDetector fp

SmokeDetector

6:24 PM

@NobodyNada Registered question as false positive.

NobodyNada

@SmokeDetector why

SmokeDetector

@NobodyNada Body - Position 347-352: derma

NobodyNada

@SmokeDetector fp-

SmokeDetector

CI on 644b869 succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev 644b869 (SmokeDetector: Auto watch of delivr\.com by NobodyNada --autopull) (running on teward/Solar Flare)

Restart: API quota is 14272.

bwDraco

!!/watch budgetvideo4biz

SmokeDetector

6:27 PM

@bwDraco You don't have code privileges, but I've created PR#1094 for you.

Andy

!!/test delivr.com/2wgq9

SmokeDetector

> Url in title, potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Title - Position 9-19: delivr.com
Title - Position 1-19: https://delivr.com
Body - Position 9-19: delivr.com
Username - Position 9-19: delivr.com

Andy

Oh. Just added

SmokeDetector

6:44 PM

Merged SmokeDetector #1094.

[ SmokeDetector ] SmokeDetector started at rev 1c49b07 (metasmoke: Merge pull request #1094 from Charcoal-SE/auto-blacklist-1506018468.2930238) (running on teward/Solar Flare)

Restart: API quota is 14081.

Thomas Ward

!!/gitstatus

SmokeDetector

On branch deploy
Your branch is up-to-date with 'origin/deploy'.
nothing to commit, working directory clean

Thomas Ward

!!/pull

because I don't trust Smokey sometimes :P

SmokeDetector

[ SmokeDetector ] SmokeDetector started at rev 1c49b07 (metasmoke: Merge pull request #1094 from Charcoal-SE/auto-blacklist-1506018468.2930238) (running on teward/Solar Flare)

Restart: API quota is 14042.

[ SmokeDetector | MS ] Manually reported answer: Can not fill gas into tank for 2004 Honda pilot by user30046 on mechanics.SE

SmokeDetector

7:07 PM

[ SmokeDetector | MS ] Phone number detected in title: Call Now+1-844•833•5788 YÅHÖÖ ÇUST0MER SERVICE &%# yàhöö phΘne nÜmber by Drishti jangra on stackoverflow.com

SmokeDetector

7:26 PM

tpu- by DraconicPenguin on Can not fill gas into tank for 2004 Honda pilot [MS]

SmokeDetector

7:36 PM

[ SmokeDetector | MS ] Mostly dots in body: write a query output should be A1 A2 A3 B4 B5 B6 B7 B8 C9 C10 C11 C12 C13 C14 C15 in a vertical line in oracle by Akhtar Hussain on stackoverflow.com

quartata

Why are the answers downvoted?

bwDraco

7:51 PM

@SmokeDetector Whoa. This looks a hell of a lot like a Bayesian poisoning attempt.

> GitHub is a code hosting platform for version control and collaboration. It lets you and others work together on projects from anywhere.

This tutorial teaches you GitHub essentials like repositories, branches, commits, and Pull Requests. You’ll create your own Hello World repository and learn GitHub’s Pull Request workflow, a popular way to create and review code.

No coding necessary

To complete this tutorial, you need a GitHub.com account and Internet access. You don’t need to know how to code, use the command line, or install Git (the version control software GitHub is built on).

github.com/reinderien/mimic

Is it possible to reparse text containing Unicode homoglyphs like YÅHÖÖ ÇUST0MER SERVICE and yàhöö phΘne nÜmber so that they this kind of filter evasion can be stopped?

SmokeDetector

> Would not be caught for title, body, and username.

bwDraco

!!/test-t yahoo customer service

SmokeDetector

> Would not be caught as a title.

quartata

eh

we caught it that's what matters

that kind of spam is very rare

SmokeDetector

fp by DraconicPenguin

Robert Longson

8:11 PM

!!/report stackoverflow.com/a/46351926/1038015

SmokeDetector

[ SmokeDetector | MS ] Manually reported answer: Is there a crowdfunding web service for programmers? by kyle.t on stackoverflow.com

NobodyNada

Question kinda asks for it

Robert Longson

No disclosure he works there: thrinacia.com/blog/post/…

SmokeDetector

8:35 PM

tpu- by DraconicPenguin

[ SmokeDetector | MS ] Blacklisted website in body, link at end of body: Can Malwarebytes remove all Viruses? by Avinash Verma on superuser.com

tpu- by DraconicPenguin

[ SmokeDetector | MS ] Link at end of answer: php - incorrect charset of og data from website by user6081 on stackoverflow.com

ArtOfCode

Now this is satisfying. I'm working on a web app for CrowdRescue (see website if unsure) with @thesecretmaster. Organization's comms director sent out an email a few days ago basically saying "we don't have the tooling for half the stuff we want to do", so I sent one back saying "aha, that's where you're about to be wrong".

Opened my inbox today to 10 emails from various organization directors and seniors saying "HOW TF DID WE NOT KNOW ABOUT THIS YOU GUYS ARE THE BEST" :)

SmokeDetector

tpu- by DraconicPenguin

SmokeDetector

9:12 PM

[ SmokeDetector | MS ] Pattern-matching website in body: Barcode generator in c# .net web application to print in PDF file by user8340043 on superuser.com

tpu- by DraconicPenguin

bwDraco

@SmokeDetector why

SmokeDetector

@bwDraco Body - Position 380-401: bestlearningcenter.co

SmokeDetector

9:34 PM

[ SmokeDetector | MS ] Username similar to website in answer: Caesar Cipher Function in Python by Derek on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword with email in answer, email in answer, pattern-matching email in answer: T lymphocytes and HIV-AIDS by janet on biology.SE

[ SmokeDetector | MS ] Link at end of answer: Extracting a substring from a string following a specific pattern in python by David Bear on stackoverflow.com

Nisse Engström

@SmokeDetector naa-

@SmokeDetector tpu-

@SmokeDetector fp-

@SmokeDetector ignore

SmokeDetector

@NisseEngström Post ignored; alerts about it will no longer be posted.

Nisse Engström

Smokie thinks that derek.write and derek.close are websites?

ArtOfCode

yup

angussidney

10:12 PM

@ArtOfCode nice :) That webpage times out for me, is it working for you?

ArtOfCode

@angussidney ugh. Clearly they need a better sysadmin :) Try the non-HTTPS, www.-variant version that you're not redirected to: this one

SmokeDetector

11:03 PM

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, pattern-matching email in answer: Citrix has hijacted my escape key; how do I get it back? by charlotte on superuser.com

[ SmokeDetector | MS ] Bad keyword with email in answer: Laravel 5.3 style test fails to see user email constructed from factory by Ramona ROTHE on stackoverflow.com

tpu- by DraconicPenguin

tpu- by DraconicPenguin on Citrix has hijacted my escape key; how do I get it back? [MS]

[ SmokeDetector | MS ] Few unique characters in answer: Who is older, Michael or Lucifer? by user89026 on scifi.SE

tp- by DraconicPenguin

bwDraco

11:21 PM

Vandalism on own answer; see scifi.stackexchange.com/posts/168057/revisions

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, email in answer: I want to buy bitcoins by Apolo Smith on bitcoin.SE

Eliah Kagan

"my very affordable and peaceful bitcoin" lol

SmokeDetector

tpu- by DraconicPenguin

Transcript for