Charcoal HQ

quartata

6:00 PM

OK perfect

YEP

exploit confirmed

this is bad

really bad

DavidPostill

0

A: Formatting Sandbox

testing 123456 and a bunch more characters to reach 30

quartata

oh no need

thanks though

OK here we go

Magisch

@quartata exploit?

:o

ArtOfCode

don't post it on meta

quartata

drafting post rn

DavidPostill

6:00 PM

@quartata What's the exploit?

ArtOfCode

DON'T POST IT ON META

quartata

ok ok

ArtOfCode

:)

Magisch

If it's a security hole, don't post it on meta

quartata

It only really affects us, I already spilled the beans in the Tavern

You can force an API cache miss

and hide a post from the API

ArtOfCode

6:01 PM

permanently?

quartata

No, for like 5 minutes or however long they cache.

ArtOfCode

oh

then yeah, meta

quartata

It's the same bug you reported just weaponized

Cai

!!/report graphicdesign.stackexchange.com/questions/103834/…

SmokeDetector

[ SmokeDetector | MS ] Manually reported question: The Easy Gain Muscle In many Weeks by Ganiphdla on graphicdesign.SE

quartata

6:02 PM

Since it means SmokeDetector won't scan it

ArtOfCode

you said "exploit" so I thought you meant security bug

tpu- by ArtOfCode

Oh no no sorry

@SmokeDetector k

@SmokeDetector @SurajRao cheers for that :-P

Catija

6:09 PM

@ArtOfCode possibly helpful: interpersonal.stackexchange.com/q/4451/36

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body: Health and Fitness Luxury Lean Forskolin by Ferherme on drupal.SE

API quota rolled over with 7619 requests remaining. Current quota: 19999.

math: 207
stackoverflow: 156
superuser: 41
serverfault: 31
dba: 29
physics: 27
codegolf: 27
askubuntu: 25
unix: 20
rpg: 20
electronics: 19
gaming: 19
security: 14
apple: 13
english: 12
graphicdesign: 11
workplace: 10
bitcoin: 10
salesforce: 9
scifi: 8
drupal: 8
diy: 8
es.stackoverflow: 8
money: 8
travel: 7
writers: 7
arduino: 7
academia: 7
tex: 6
gis: 6
mathoverflow.net: 6
outdoors: 6
engineering: 6
stats: 5
android: 5
islam: 5
wordpress: 5
ell: 5
ru.stackoverflow: 4
mathematica: 4
datascience: 4

tpu- by DJMcMayhem

quartata

On the bright side they'll have to fix this now

can't have it like this

SmokeDetector

[ SmokeDetector | MS ] Link at end of answer: Add a picture/logo in a HTML-list/Navigation menu by Syafiera on stackoverflow.com (@iBug)

tpu- by CalvT븃

Wai Ha Lee

6:25 PM

!!/report stackoverflow.com/a/48193515/1364007

SmokeDetector

[ SmokeDetector | MS ] Manually reported answer: Registration form - upload image by Sk Khan on stackoverflow.com (@iBug)

[ SmokeDetector | MS ] Blacklisted website in answer: Will increasing the dpi of my image (without re-sampling) hurt print quality? by Kollk on graphicdesign.SE

Undo

a... dpi increase service? Impressive.

SmokeDetector

tpu- by Makyen on Registration form - upload image [MS]

tpu- by CalvT븃

naa- by Makyen on Add a picture/logo in a HTML-list/Navigation menu [MS]

[ SmokeDetector | MS ] Potentially bad keyword in body: HSTS header response processing over secured transport by user9200198 on stackoverflow.com (@iBug)

CalvT븃

sd f

Mogsdad

7:08 PM

User posted spammy answers, which Brad deleted. User has posted new spammy answers... report? flag? naa? stackoverflow.com/a/48193341/1677912 stackoverflow.com/a/48193287/1677912

The upvotes on these ones are fishy, too.

SmokeDetector

[ SmokeDetector | MS ] URL in title: Ideas on how to create interest/community for a photography website (votoart.com)? by Chandra DeMichieli on photo.SE

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body, repeated URL at end of long post: The headings are to take one Luxury Lean Forskolin by user860998 on superuser.com (@iBug)

tpu- by CalvT븃

enderland

7:31 PM

@SmokeDetector we had a similar Q to that oen on workplace - workplace.stackexchange.com/q/104965/2322 - looks like none of the flags were you folks, so I'm assuming it wasn't picked up?

SmokeDetector

[ SmokeDetector | MS ] Link at end of answer: How to shift this html body to the right? by koko on stackoverflow.com (@iBug)

tpu- by CalvT븃

CalvT븃

@enderland There's a potential issue with the API that's causing this - meta.stackexchange.com/questions/305585/…

quartata

also relevant

enderland

(thumbsup)

Jake Symons

7:50 PM

@SmokeDetector still alive :) but at -8 downovtes

and its gone, probably my spam flag :)

@SmokeDetector also still alive on photo.se, whats taking so long to delete today??

SmokeDetector

tpu- by Jake Symons on Ideas on how to create interest/community for a photography website (votoart.com)? [MS]

SmokeDetector

8:05 PM

[ SmokeDetector | MS ] Link at end of answer: How to search for a multi-destination flight when flexible on dates? by ringgord on travel.SE

tpu- by DJMcMayhem

Henry WH Hack v2.1.1

8:21 PM

Spam: webmasters.stackexchange.com/a/111912

micsthepick

!!/report webmasters.stackexchange.com/a/111912

SmokeDetector

[ SmokeDetector | MS ] Manually reported answer: Focus keyword in Ecommerce site: Should it be used in Product Category pages or Product Pages? by attiqnasir on webmasters.SE

tpu- by micsthepick

Mithrandir

!!/report webmasters.stackexchange.com/questions/102463/…

SmokeDetector

@Mithrandir Post 1: Already recently reported [ MS ]

Henry WH Hack v2.1.1

@Mithrandir Dude.

micsthepick

8:21 PM

sorry

accident

Jake Symons

!!/test Online Shopping

SmokeDetector

> Would not be caught as a post, title or username.

Mithrandir

@HenryWHHackv2.1.1 Lag

Jake Symons

!!/test mominbrands.com

Henry WH Hack v2.1.1

@Mithrandir :(

SmokeDetector

8:22 PM

> Url in title
----------
Title - Position 1-27: http://www.mominbrands.com

Mithrandir

!!/watch mominbrands\.com

SmokeDetector

@Mithrandir Added mominbrands\.com to watchlist

CI on cc4d6b5 succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev cc4d6b5 (SmokeDetector: Auto watch of mominbrands\.com by Mithrandir --autopull) (running on teward/Solar Flare)

Restart: API quota is 18720.

Robert Longson

9:00 PM

I this spam? Or just nonsense? meta.stackexchange.com/a/305594/188189

Jake Symons

@RobertLongson its naa for sure

ArtOfCode

!!/report meta.stackexchange.com/a/305594/262823

SmokeDetector

[ SmokeDetector | MS ] Manually reported answer: 2018 monthly product team updates by Aesmel on meta.SE (@iBug)

ArtOfCode

red-flaggable, so I'll take it

SmokeDetector

tpu- by DJMcMayhem

Jake Symons

9:01 PM

Doesn't appear to be advertising anything though?

Robert Longson

Is Atrium a product of some kind? It's almost like an AI was programmed with English grammar rules and spat something out that mostly followed them.

Jake Symons

@RobertLongson Done some google searches, can't find anything spam

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body: Sort numbers and count frequency of each by johny does on stackoverflow.com (@iBug)

Jake Symons

see you guys tomorrow :)

SmokeDetector

9:23 PM

[ SmokeDetector | MS ] Bad keyword in title, phone number detected in title: (1855_851_1320) facebook phone number & facebook number by cihefuzeb on security.SE

tpu- by Jake Symons

DavidPostill

@SmokeDetector why

SmokeDetector

Body - Position 142-157: 234
532
347
234

DavidPostill

Hmm

Jake Symons

@DavidPostill Sounds thoughtful??

DavidPostill

@JakeSymons I was wondering why a bunch of numbers gets flagged as spam

John Dvorak

9:30 PM

Smokey hates nine-digit numbers

DavidPostill

@JohnDvorak I know. They look like phone numbers. But these are blocks of 3 digit number on different lines ...

Jake Symons

@DavidPostill Does Smokey notice line breaks and spaces?

John Dvorak

Isn't that how everyone writes phone numbers?

DavidPostill

Yes, but not usually on 3 different lines ...

quartata

That wasn't detected specifically as a phone number

that was a separate watchlist

SmokeDetector

10:38 PM

[ SmokeDetector | MS ] Link at end of answer: How to decrease belly fat while cycling? by Abner on bicycles.SE

DJMcMayhem

@SmokeDetector k

paper1111

10:59 PM

!!/watch leanbelly-breakthrough-review\.blogspot\.com

SmokeDetector

@paper1111 Added leanbelly-breakthrough-review\.blogspot\.com to watchlist

Rob

@JohnDvorak Depends on the country

SmokeDetector

CI on aface08 succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev aface08 (SmokeDetector: Auto watch of leanbelly-breakthrough-review\.blogspot\.com by paper1111 --autopull) (running on teward/Solar Flare)

Restart: API quota is 17397.

SmokeDetector

11:24 PM

[ SmokeDetector | MS ] Potentially bad keyword in body: Can Garmin connect foretell depression? by user861063 on superuser.com (@iBug)

tpu- by Catija

DJMcMayhem

11:37 PM

metasmoke.erwaysoftware.com/post/91792 is clearly red-flaggable, but I had my flag rejected because it wasn't spam.

Should I follow up the issue?

ArtOfCode

@DJMcMayhem AJ's generally pretty sane. I'm not sure that is red-flaggable, come to think of it.

Crackpot theory, yes

Spam, no

Not abusive either, just off-topic and weird

DJMcMayhem

Hmm. still tp though?

NobodyNada

I don't think I would have red-flagged it

DJMcMayhem

I'm still inclined to think it's spam (or even spam-seeding) because of the email

ArtOfCode

I'm gonna throw an FP on it and let Undo decide

NobodyNada

11:42 PM

My first thought was that someone found a weird crackpot theory on the Internet and was asking a genuine but misguided question about it, although the email makes it seem suspect

Rob

I mean, it's very borderline rant/inappropriate for respectful discourse - which might warrant a red flag. There is a question there, but it's inane. They're asking if the sound can be recorded, while saying they have a recording of it. Having said that, it doesn't appear to be a deliberately disruptive question. Just an unanswerable one.

SmokeDetector

fp- by ArtOfCode on Remote neural monitoring [MS]

Conflicting feedback on Remote neural monitoring.