Charcoal HQ

!!/test migrating from call ^833^272^O777Google Drive to Google Team Drive

> Bad keyword in body, bad keyword in title, bad keyword in username, blacklisted website in body, blacklisted website in title, phone number detected in title, potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Title - Position 0-73: migrating from <b>call ^833^272^O777</b>Google Drive to Google Team Drive
Title - Position 24-31: 833^272
Title - Position 24-36: 833^272^O777
Title - Phone number: 11 8332720777
Body - Position 0-73: migrating from <b>call ^833^272^O777</b>Google Drive to Google Team Drive

!!/test migrating from google drive to google team drive

> Bad keyword in body, bad keyword in title, bad keyword in username
----------
Title - Position 0-48: migrating from google drive to google team drive
Body - Position 0-48: migrating from google drive to google team drive
Username - Position 0-48: migrating from google drive to google team drive

8:01 PM

that's better

Undo

@Mithrandir Those look heavy

The slight curve would make it awful to get them in/out of a door, too

pretty sure they're fixed into place forever

Undo

Usually they have pegs in the bottom that fit into holes in the floor

Gotta be able to move them if you ever want to properly clean the carpet or change overhead lights without a super complex system

not sure if there's carpet under those, but, god, that chandelier (?) must be challenging

!!/test gmail help

8:07 PM

> Would not be caught as a post, title or username.

I'm sure we're supposed to have a rule for that

!!/test gmail support number

!!/unblacklist migrating(?:\Wfrom)?\W(?:.{0,40})?(?:google\W)?drive\Wto\W(?:google\W)?team\Wdri‌‌ve

> Bad keyword in body, bad keyword in title, bad keyword in username
----------
Title - Position 0-20: gmail support number
Body - Position 0-20: gmail support number
Username - Position 0-20: gmail support number

!!/test gmailhelp

8:07 PM

[ SmokeDetector ] Blacklists reloaded at rev 61588b4 (SmokeDetector: Auto unblacklist of migrating(?:\Wfrom)?\W(?:.{0,40})?(?:google\W)?drive\Wto\W(?:google\W)?team\Wdr‌ive by ArtOfCode --autopull) (running on iBug/EC2)

alright, this was a great ninja

> Would not be caught as a post, title or username.

bah, wrong way round

we're case-insensitive by default, right?

AFAIK yes

!!/blacklist-keyword migrating(?:\Wfrom)?\W(?:.{0,40})?(?:google\W)?drive\Wto\W(?:google\W)?team\Wdri‌‌‌ve

8:09 PM

[ SmokeDetector ] Blacklists reloaded at rev 706dcf3 (SmokeDetector: Auto blacklist of migrating(?:\Wfrom)?\W(?:.{0,40})?(?:google\W)?drive\Wto\W(?:google\W)?team\Wdr‌ive by ArtOfCode --autopull) (running on iBug/EC2)

!!/report webapps.stackexchange.com/questions/34107/…

[ SmokeDetector | MS ] Manually reported answer (94): Get a shortened (minimalist) link to a Google search by Mina Tito on webapps.SE

tpu- by Erik the Outgolfer

!!/watch affiliates\.souq\.com

sits on Smokey and forces it to behave

[ SmokeDetector ] Blacklists reloaded at rev db22c55 (SmokeDetector: Auto watch of affiliates\.souq\.com by Thomas Ward --autopull) (running on iBug/EC2)

@ArtOfCode There are 212 current uses for "gmail help" in SE posts and it's 13/12/1 on MS.

8:12 PM

CI on 0d99e97 succeeded.

@Makyen Happy to accept those for now while WebApps is getting hit. I'll add a comment to remove it later.

Not a problem from my POV, just providing information as to why it might not already exist.

Aye, that's useful, cheers

CI on 41be688 failed.

@ThomasWard careful, remember smoke is coming out of there...

8:15 PM

!!/pull

@ArtOfCode CI build failed! :( Please check your commit.

you suck

[ SmokeDetector | MS ] Bad keyword in answer, blacklisted website in answer, potentially bad keyword in answer (178): Twitter: list of people I am following that do not follow me back! by narli breeez on webapps.SE

tpu- by Glorfindel

CI on 210e2d1 succeeded.

!!/pull

[ SmokeDetector ] FindSpam module reloaded at rev 210e2d1 (ArtOfCode: Thanks ever so much, Flake.) (running on iBug/EC2)

8:18 PM

I'm feeling a !!/pull-force coming on

is it strong?

@EriktheOutgolfer nah there's a smoke stack pipe that takes the smoke another path :p

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (0): how to install xdebug with phpstorm on localhost on ubuntu? by Ahmad Kamal on stackoverflow.com

uh... what hostname

@SmokeDetector why

@ArtOfCode Body - php.info address 85.13.157.191 in ASN 34788

8:27 PM

hah

that's a file, right?

cc @tripleee

@EriktheOutgolfer yeah, PHP system config file of some sort

ok, definitely putting my X up there

fp- by Erik the Outgolfer

[ SmokeDetector | MS ] Offensive answer detected, toxic answer detected (162): Can't move in the 3D view with mouse by esketit on blender.SE

tpu- by Erik the Outgolfer

[ SmokeDetector | MS ] Bad keyword in answer, blacklisted website in answer, potentially bad keyword in answer, blacklisted user (246): How can I pull a value from one column based on the values of another column? by narli breeez on webapps.SE

tpu- by Glorfindel

@SmokeDetector k

8:47 PM

[ SmokeDetector | MS ] Blacklisted website in answer, potentially bad keyword in answer (92): android data storage questions ✏️ by athman abed on stackoverflow.com

tpu- by Erik the Outgolfer

!!/test textnow.vip

> Potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Title - Position 0-11: textnow.vip
Body - Position 0-11: textnow.vip
Username - Position 0-11: textnow.vip

[ SmokeDetector | MS ] Bad keyword in answer, blacklisted website in answer, potentially bad keyword in answer (178): Auto approve FB members using a web app that's connected to "passwords" DB? by karan sharma on webapps.SE

Just thought y'all should know that @Glorfindel is occasionally faster than Smokey. ;)

tpu- by Makyen

8:53 PM

[ SmokeDetector | MS ] Bad keyword in answer, blacklisted website in answer, potentially bad keyword in answer (178): How do you turn on hotkeys in Coursera video player? by karan sharma on webapps.SE

They're making typos, now

tpu- by Makyen

@Catija ah, I don't think that was reported...can you extract the exact markdown if you can, please?

> can [...] if you can, please?

> Gmail and change the gmail help -83-272-O777background. However I would like the background

Gmail and change the **gmail help -83-272-O777**background. However I would like the background

@EriktheOutgolfer that's the one I added "gmail help" for

8:58 PM

This one just popped up @ArtOfCode It's new within the last five ten minutes.

[ SmokeDetector | MS ] Few unique characters in answer, no whitespace in answer (181): How to get Username before Authenticating User in Spring Boot? by tooptoop4 on stackoverflow.com

Sep 5 at 12:29, by ArtOfCode

joke's on you, Glor went hyperintelligent and revoked my access to his source code months ago

tpu- by Makyen

doppelspooker

!!/test Gmail and change the gmail help -83-272-O777background. However I would like the background

> Would not be caught as a post, title or username.

8:58 PM

sigh

@Catija what's the post ID?

[ SmokeDetector | MS ] Few unique characters in answer, no whitespace in answer, blacklisted user (249): Forcing cURL to get a password from the environment by tooptoop4 on stackoverflow.com

@SmokeDetector 162-rep answerer...

tpu- by doppelgreener

@ArtOfCode 121483

!!/watch O777(?#catch some typos by the webapps spammer)

9:00 PM

aye, no catch for that one

[ SmokeDetector ] Blacklists reloaded at rev eb6df9c (SmokeDetector: Auto watch of O777(?#catch some typos by the webapps spammer) by Makyen --autopull) (running on iBug/EC2)

@Makyen While, with only 4 characters, this is a bit loose, it only has 5 hits on SE

doesn't look very loose to me

it's not like "O777" is a very common occurrence

In that case, subbing the 0 for a O probably makes it rarer.

By more than 3 orders of magnitude.

9:07 PM

Yay? :P

[ SmokeDetector | MS ] Bad keyword in answer, blacklisted website in answer, potentially bad keyword in answer (178): Is there some way wherein an end user would see all the entries submitted to a particular form? by karan sharma on webapps.SE

tpu- by Erik the Outgolfer

@Catija Mak does make regex monsters sometimes ;-P

I was mostly excited that, for once, the spammer made it easier on us.

That's the thing. Making it hard for us is hard for them.

Ultimately, all spammers are aiming to push a product or service. There are endless different ways of doing that, but they bear similarities, especially if you start automating them - and similarities are patterns, which becomes regexes and rules, and we get 'em.

9:24 PM

[ SmokeDetector | MS ] Repeating words in body (47): how would you create this using loops? grid of circles 10 x 7 ✏️ by Emily Benett on stackoverflow.com

tp- by Mithrandir

fp- by doppelgreener

doppelspooker

(@Mithrandir that one wasn't vandalism, it was that bad all along)

meh, i would've classified that as 'tp' when it was first posted, because i'd be fine blocking that at a system level

9:39 PM

[ SmokeDetector | MS ] Blacklisted user (68): Is it safer or better to separate tables to different databases ✏️ by Titox d boss on stackoverflow.com

tpu- by Mithrandir

@SmokeDetector fp

@Mithrandir Registered question as false positive and removed user from the blacklist.

10:27 PM

[ SmokeDetector | MS ] Bad keyword in body, pattern-matching website in body, potentially bad keyword in body, potentially bad keyword in title (197): How can I fix a QuickBooks error code 6123? by kate cox on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in title, potentially bad keyword in body (99): Is it okay to visualize having sex and rubbing penis (not ejaculated) by Fardeen on islam.SE

[ SmokeDetector | MS ] Offensive body detected (45): Can't remember the name of an anime by Crowe on anime.SE

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): IDL-Python bridge : how to access IDL system variables that starts with '!'? by Irina Tkatcheva on stackoverflow.com

fp- by ByteCommander on Is it okay to visualize having sex and rubbing penis (not ejaculated) [MS]

fp- by ByteCommander on Can't remember the name of an anime [MS]

fp- by ByteCommander

10:50 PM

[ SmokeDetector | MS ] Link at end of body (99): Word formatting only applying to every other page by bob on superuser.com

[ SmokeDetector | MS ] Repeating characters in answer, toxic answer detected (164): UML Use Case Diagram: Do generalisation children inherit include/extends from parent? by ptalmeida on stackoverflow.com

!!/alive

!!/report stackoverflow.com/a/52864694

@FrankerZ ... did I miss something?

I reported it like 3 times in sobotics channel

Not getting reports in SOCVR at any rate. No ack there either

10:59 PM

@SmokeDetector You missed a lot

!!/report stackoverflow.com/a/52864694

!!/location

@ArtOfCode You around? ^

!!/reboot

teward/Solar Flare received failover signal.

Restart: API quota is 19998.

!!/location

11:04 PM

@ArtOfCode teward/Solar Flare

The failover was manual.

!!/report stackoverflow.com/a/52864694

@FrankerZ Post 1: That does not look like a valid post URL.

!!/report stackoverflow.com/a/52864694/4875631

!!/standby ibug

11:05 PM

iBug/EC2 has total socket failure, SE and MS

[ SmokeDetector | MS ] Link at end of body (99): Word formatting only applying to every other page by bob on superuser.com

No response to manual MS control overrides

@FrankerZ Not working in SOCVR either

@iBug Your SD instance appears to have gotten wedged. Looks like it will need a manual kick.

!!/blame

Whelp, looks like no ones to blame

11:07 PM

!!/location

ugh

That's not good.

So much for redundancy

!!/alive

It worked above when !!/location appeared not to.

Failing EC22

Sounds like the right choice.

11:09 PM

ArtOfCode/EC22 received failover signal.

Restart: API quota is 19026.

this probably isn't helping

!!/location

@ArtOfCode ArtOfCode/EC22

good now stay up

[ SmokeDetector | MS ] Link at end of body (99): Word formatting only applying to every other page by bob on superuser.com

Post 1: That does not look like a valid post URL.
Post 2: That does not look like a valid post URL.
Post 3: That does not look like a valid post URL.
Post 4: That does not look like a valid post URL.
Post 5: That does not look like a valid post URL.

Mods nuked that report already

11:11 PM

Maybe we should have a cron job that reboots MS every 24 hours, as the problems appear to develop/worsen over time.

band-aid

needs an actual fix

like maybe migrating back to mysql

Completely agree that it needs a real fix, but a band-aid is beneficial in the short-term.

I have a large MySQL instance at work. For all the gripes it's pretty stable

We were almost completely stable on MySQL. The only outages were down to me being an idiot writing MS code.

fp- by Makyen

[ SmokeDetector | MS ] Mostly punctuation marks in answer, repeating characters in answer (136): "Are you having a good day?" Is it about me or about the weather? by Yusufbablola on english.SE

11:17 PM

Would a Redis intermediate cache help it any? Not sure how MS works

!!/location

@Makyen ArtOfCode/EC22

Whelp, 3 instances not on standby, and no way to communicate with 2 of them.

This is not going to be pleasant.

tpu- by Makyen

11:19 PM

@FrankerZ Roger roger, Roger

Well, at least they only create one MS post report.

@iBug @ThomasWard It looks like your instances (iBug/EC2 and teward/Solar Flare) are stuck in modes where they are active, but not listening to commands. They will probably need to be kicked.

this is what died them earlier

iBug/EC2 is switching to standby

[ SmokeDetector ] SmokeDetector started in standby mode at rev eb6df9c (SmokeDetector: Auto watch of O777(?#catch some typos by the webapps spammer) by Makyen --autopull) (running on iBug/EC2)

@ThomasWard Looks like they accepted commands from Charcoal Test

[ SmokeDetector ] SmokeDetector started in standby mode at rev eb6df9c (SmokeDetector: Auto watch of O777(?#catch some typos by the webapps spammer) by Makyen --autopull) (running on teward/Solar Flare)

11:28 PM

Solar's rebooted

it got an MS explosion/stick

@iBug Problem averted. It accepted commands from Charcoal Test.

!!/location

@ThomasWard ArtOfCode/EC22

thesecretmaster

@ArtOfCode I've haven't been around much recently, but didn't that happen?

@thesecretmaster I think Undo built a fresh Maria server instead

11:32 PM

[ SmokeDetector ] SmokeDetector started in reverted mode at rev 3cc6d04 (iBug ♦: Merge pull request #2452 from kishan-1234/master) (running on ArtOfCode/EC22)

Restart: API quota is 18908.

!!/pull

MS connection flopping again for Solar...

[ SmokeDetector ] SmokeDetector started in standby mode at rev eb6df9c (SmokeDetector: Auto watch of O777(?#catch some typos by the webapps spammer) by Makyen --autopull) (running on teward/Solar Flare)

ugh now I've got failed logins

[23:27:52.525] ChatExchange password loaded from environment
[23:29:56.381] Last metasmoke ping with a response was over 120 seconds ago, forcing SmokeDetector restart to reset all sockets.
[23:30:26.392] Last metasmoke ping with a response was over 120 seconds ago, forcing SmokeDetector restart to reset all sockets.
[23:30:56.573] Last metasmoke ping with a response was over 120 seconds ago, forcing SmokeDetector restart to reset all sockets.
[23:31:26.603] Last metasmoke ping with a response was over 120 seconds ago, forcing SmokeDetector restart to reset all sockets.

@ArtOfCode MS explodifying?

11:34 PM

don't think so

timings look stable to me

can you kick Solar up to active?

teward/Solar Flare received failover signal.

Restart: API quota is 19859.

@ArtOfCode well I did just restart Solar

that'll do the job

I think I killed iBug/EC2 with manual override

this is the second time I got MS Ping problems though

today

I think there's a bug in that logic somewhere, actually - it says no ping in the last 120 seconds, but look at the timestamps - it's logging that every 30 seconds.

11:39 PM

indeed. well we can poke that logic to see what's up

and it didn't even reboot lol

we may want to rip that logic out.