Charcoal HQ

FWIW the new hoster for Babasupport is not going to cut them off (at least immediately) by the looks of the reply I got from them

!!/test-u mega testo

7:13 AM

> Would not be caught as a username.

So at what ballpark TP/FP ratio should we be adding things to the watchlist? In other words, I tend to go to metasmoke and search/test regexes prior to considering them for addition, and to be able to tune them for either wide detection, or a high TP/FP ratio.

@Makyen we are on purpose pretty lenient about watching stuff -- go wild

[ SmokeDetector | MS ] Blacklisted website in body, link at end of body, potentially bad keyword in body, potentially bad keyword in title: power-max-extra-testo? by NicoleWells on drupal.SE

if you want to go really wild, maybe run your own experimental Smokey instance in another room

tpu- by PeterJ

7:17 AM

Alas! We can't blacklist Flipkart!

obviously, if a watch creates a lot of noise, we will probably remove it; that's part of the deal with very relaxed criteria -- easy to add, but also easy to remove

is there something in particular you would like to experiment with?

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body: Schedule e-book weight-loss information by fhvsxlote6 on askubuntu.com

tpu- by K.Dᴀᴠɪs

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, link at end of body, repeated URL at end of long post: There is no chance to get for you to know whether it works. by Wayet19 Virk on superuser.com

tpu- by K.Dᴀᴠɪs

@tripleee Not really. It was the keywords due to which it was caught.

[ SmokeDetector | MS ] URL in title: Is there any security threat of using 'curl ipinfo.io/ip' to find our IP? by Neron Joseph on security.SE

fp- by A J

@AJ oh I mean @Makyen

7:20 AM

Yeah, the thing that can't be determined form MS is how something will match against all the posts which aren't in the MS database, which, of course, is the vast majority of posts.

@tripleee oh no worries

@Makyen I ran findspam.py locally for a while when there was something I was unsure of, that seemed to work pretty well for figuring out whether something was extremely FP-prone or not

we should probably make this easier or at least document how to do it though ...

@tripleee I tend to play around with regexes form time to time. It can be an interesting optimization problem. :-)

makes it kind of annoying that the SEDE regex option is so limited

else that would have been a useful place to start

but if it's not a massive thing, just watch and see what happens

7:22 AM

@tripleee One thing that would help quite a bit is full regex support on metasmoke.

@Makyen yeah, I have been hoping for that too, but the real problem as you say is what isn't in Metasmoke

technically the MySQL regex support is "full", just not as featureful as the regex dialect we use in Smokey

PeterJ

@tripleee IMO a host probably shouldn't cut a site for spam unless it's coming from the same IP address. After all if it was a common practice and I had a competitor I could just spam their site all over SE knowing it might get them shut down while also getting deleted so fast it wouldn't give them any benefit.

Yeah, it's just a bit frustrating constructing a regex on MS, as somethings just aren't possible. :-)

[ SmokeDetector | MS ] Blacklisted website in answer: Google analytics referral path by steve on webmasters.SE

naa or spam?

7:26 AM

@PeterJ that's a huge loophole for anyone who wants to spam, we all know that the spam economy specifically works through a lot of plausible deniability etc etc; but as you say, they should probably not cut them off just on the basis of a single complaint

Also, technically we have SEDE as a huge list of FPs, but it's hard to apply regex on SEDE

@SmokeDetector n

tpu- by A J

@JAD spam actually; it's advids again

yeah, was searching MS to check

@SmokeDetector k

Why do I still have a 200+ deep backlog of things to flag

7:32 AM

would it be useful if I posted the correspondence I have had with Budgetnode to Teams? I feel the visibility might be vaguely useful to someone but I don't want to clutter the site too much

@tripleee could be done under a general correspondence with hosts thread

We don't have to rigidly adhere to the Q/A format in teams

I'm thinking I would post a "question" about what is being done to track Babasupport and then the correspondence as an individual answer ... but my main question is whether it's worth the effort

@tripleee Question about what has been done to contact spam hosts

@Magisch I got that, but I think it's too broad -- one per incident is more manageable IMHO, and will naturally float to the bottom of the pile when that particular event is no longer topical

!!/blacklist-keyword power\W?max\W?extra

@tripleee Blacklisted power\W?max\W?extra

7:40 AM

Is there a way to sort your flag summary by recently handled?

CI on 8d5722b succeeded. Message contains 'autopull', pulling...

@SmokeDetector still up

[ SmokeDetector ] SmokeDetector started at rev 8d5722b (SmokeDetector: Auto blacklist of power\W?max\W?extra by tripleee --autopull) (running on teward/Solar Flare)

Restart: API quota is 11969.

[ SmokeDetector | MS ] Blacklisted website in body, pattern-matching website in body, repeated URL at end of long post: Primal Surge XL That code for health and longevity by hatentook1950 on stackoverflow.com

tpu- by K.Dᴀᴠɪs

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body: of shape tight created. Similarly, by Scry emeen on drupal.SE

tpu- by tripleee

[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body: There are a few alterations that can be made to your program? by mariachappell on askubuntu.com

[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +6 more: www.healthyorder.org/enduraflex/ by Earom1993 on askubuntu.com

tpu- by K.Dᴀᴠɪs on There are a few alterations that can be made to your program? [MS]

tpu- by tripleee

tpu- by K.Dᴀᴠɪs

[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +6 more: getnutritionshelp.com/luna-trim/ by erqufeuvx on askubuntu.com

tpu- by K.Dᴀᴠɪs

[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body, link following arrow in body, pattern-matching website in body, +1 more: IS IT SAFE TO USE? by Fretty 19 on drupal.SE

tpu- by K.Dᴀᴠɪs

[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: getnutritionshelp.com/luna-trim/ by tuprtupr on apple.SE

tpu- by Glorfindel

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, pattern-matching website in body: The Body Building Plans 03 by Ritawhite on drupal.SE

tpu- by K.Dᴀᴠɪs

[ SmokeDetector | MS ] Blacklisted website in body, pattern-matching website in body, potentially bad keyword in body: Methods So That It Will Enhance Dude Fertility by resarvine on graphicdesign.SE

tpu- by K.Dᴀᴠɪs

[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: getnutritionshelp.com/luna-trim/ by erqufeuvx on apple.SE

tpu- by K.Dᴀᴠɪs

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, link at end of body: unfortunate bundled sustenances and additives by Annasendezboyz on superuser.com

tpu- by K.Dᴀᴠɪs

[ SmokeDetector | MS ] Potentially bad keyword in body: Freelance Marketplace by kumarfield28 on superuser.com

tpu- by K.Dᴀᴠɪs

[ SmokeDetector | MS ] Link at end of answer: Audio Amplifier PCB Design Tips by ling on electronics.SE

8:31 AM

!!/blacklist-website fieldengineer\.com

@SmokeDetector K

@Glorfindel Blacklisted fieldengineer\.com

@SmokeDetector n

@SmokeDetector K

!!/watch pcbdesigncourse\.blogspot\.com

8:32 AM

@Glorfindel Added pcbdesigncourse\.blogspot\.com to watchlist

affiliation is likely but hard to prove from a single post

@SmokeDetector N

[ SmokeDetector ] SmokeDetector started at rev 2afd6b1 (SmokeDetector: Auto watch of pcbdesigncourse\.blogspot\.com by Glorfindel --autopull) (running on teward/Solar Flare)

Restart: API quota is 11469.

@Glorfindel right, but I just considered the possibility of vaguely answering the question

@M.A.R.ಠ_ಠ it seems related, yes. That's another reason for me to flag as NAA.

8:34 AM

Well I thought of it first!

@Glorfindel o/

\o

What are you looking at, anyway?

Your avatar is constantly looking at me. It's freaking me out. :P

to the photographer

Anyway, how we all doin' at this fine Tuesday?

Henders

8:47 AM

@Glorfindel Haha :p

@Glorfindel You look like that you're about to say "you're doomed" to that photographer or there is something evil going in your mind. ;)

I know that kind of smile.

@Henders And you look like you did something evil already and found someone to blame. :P

[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, bad keyword in username, bad pattern in URL body, +5 more: healthsupplementzone.com/turmeric-forskolin/ by Turmeric Forskolin on askubuntu.com

tpu- by K.Dᴀᴠɪs

@AJ Oh? Really? Now I'm curious!

[ SmokeDetector | MS ] Few unique characters in answer: Node FS ENOENT error by Hmmm on stackoverflow.com

tpu- by K.Dᴀᴠɪs

naa- by Mithrandir

@SmokeDetector nope, wrong button

8:55 AM

Anyway, I was getting bored so I mentioned what everyone's avatar may depict. :P

9 tpus...

sheesh

K.Dᴀᴠɪs

SOBotics helped with that one

And SOCVR

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, pattern-matching website in body, repeated URL at end of long post: To ensure that it works and is the perfect supplement to tackle your issues, by Plards19 Virk on graphicdesign.SE

tpu- by K.Dᴀᴠɪs

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +2 more: Created testosterone: Testosterone helps sex organs when infant young men are creating. by Plards19 Virk on superuser.com

tpu- by K.Dᴀᴠɪs

I don't know if I can endura this spama

@Mithrandir don't be too happy. your avatar looks like you did something evil but your plan went wrong :P

@CalvT븃 Why so sad?

iBug

9:02 AM

Is revision 3 vandalism?

@AJ Not sad - noncommital

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, link following arrow in body, +2 more: About Vidhigra Supplement: by Wiltoped 19 on workplace.SE

tpu- by K.Dᴀᴠɪs

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +1 more: EnduraFlex They are the following main precautionary by Zelmawise on superuser.com

tpu- by PeterJ

Has "babasupport" changed its time to post spams?

@tripleee I'm actually interested in that correspondence, is it posted anywhere yet?

@Magisch nope, didn't get any strong indication that anyone was interested

I'll have to drive my wife to dental surgery (ugh) but after that I'll scrape together something

9:16 AM

Waiting for trains is so much fun

I can't contain my excitement

[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +3 more: colonrejuvenatorsite.com/science-based-green-detox/ by Jennucker on askubuntu.com

Here it comes:

tpu- by micsthepick

o/

I even get an extra half hour thrown in for free because it's delayed, how lucky am I

9:17 AM

>_>

@ArtOfCode Un.

At least you have network access. It could be worse. :-(

the two most exciting aspects of public transport - delays and waits!

we can put together a train for you, though

o/

o/

9:19 AM

o/

o/

o/

o/

Still better than network rail

🚂🚃🚃🚃🚃🚃🚃🚃🚃

9:21 AM

I might be here a while... The 0928 still hasn't arrived, it's 1021, and my train was nominally 1028

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, bad keyword in username, blacklisted website in body, pattern-matching website in body: Luna Trim is a small bit disparate than large approach? by luna trim on 3dprinting.SE

tpu- by PeterJ

@ArtOfCode going on vacations?

@Makyen I remember that one, it was a bit of a borderline case. I was leaning towards spam, but the general consensus when I asked around in the Tavern was that we should simply close it as they're a student, not some commercial marketer trying to do market research

[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +2 more: healthguidewebs.com/joint-flx/ by eggysheed on graphicdesign.SE

tpu- by CalvT븃

Restart: API quota is 10959.

[ SmokeDetector | MS ] Bad NS for domain in body, blacklisted website in body, pattern-matching website in body, potentially bad keyword in body: few several weeks to acquire by user282739 on apple.SE

tpu- by micsthepick

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body: Work Movement will help you increase your by painetim8 on stackoverflow.com

tpu- by Makyen

9:41 AM

@ArtOfCode Pass the time by waiting for election results instead

@angussidney I understand wanting to go easy on the person, despite that they really should have known what they were doing was a bad idea. I don't really agree with the "not a commercial marketeer" argument, as a considerable number of these types of requests are sourced from academics, rather than commercial. It's also not clear to me that SD/MS should be considering it fp, even with leniency for this person. I'd guess that comes down to: would we want a system level block?

here's hoping you'll get elected so I can bury you in flags

[ SmokeDetector | MS ] Bad NS for domain in body, blacklisted website in body, link at end of body, pattern-matching website in body: which is open in a considerate of by Abook emeen on drupal.SE

[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: getnutritionshelp.com/luna-trim/ by hzoulaoho on askubuntu.com

tpu- by Magisch on which is open in a considerate of [MS]

tpu- by Magisch

[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +4 more: mylaviveeyeserum.com/fxx-me/ by mainelnerx on askubuntu.com

in SOBotics on Stack Overflow Chat, 13 hours ago, by Mithrandir

i'll take that as official permission to flood the comment flag queue

tpu- by micsthepick

[ SmokeDetector | MS ] Bad NS for domain in body, blacklisted website in body, link at end of body, pattern-matching website in body, repeated URL at end of long post: This is a trademark substance by Coles1961 on askubuntu.com

9:43 AM

@Mithrandir I don't even need official permission to flood the custom flag queue

tpu- by A J

@Makyen yeah, good point

[ SmokeDetector | MS ] Bad keyword in username: Сan not start scadalts in Eclipse by beastmode on stackoverflow.com

fp- by CalvT븃

I can't see anything about supplements in that

Conflicting feedback across revisions: current, #1

9:50 AM

@SmokeDetector why

fp feedback on autoflagged post: Career Questions for Animators MS (@doppelgreener)

@Mithrandir Username - Position 1-10: beastmode

@SmokeDetector oh sush you

Don't worry @doppelgreener

!!/feedback workplace.stackexchange.com/questions/106804 tp

Conflicting feedback across revisions: current, #1

@ArtOfCode any chance you could nuke this post?

10:02 AM

[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +3 more: maxxmalesite.com/fxx-me/ by wsmlxwsvah on meta.SE

tpu- by micsthepick

tpu- by PeterJ

@SmokeDetector why-

[ SmokeDetector | MS ] Potentially bad keyword in answer: Deploy a c++ application, what redistributables by billyhenry on stackoverflow.com

tpu- by micsthepick

!!/watch braindumps?

@micsthepick You don't have code privileges, but I've created PR#1925 for you.

@SmokeDetector why

10:05 AM

@micsthepick Body - Position 349-366: braindumps4it.com, Position 429-446: braindumps4it.com

take note of metasmoke.erwaysoftware.com/post/55539

@micsthepick was the ? intentional?

yes

is it a bad idea?

I think Smokey does that anyway

@CalvT븃 no it doesn't

10:10 AM

Aye just realised I misunderstood what it does

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, link following arrow in body, pattern-matching website in body, +1 more: Lunatrim>Lunatrim>Lunatrim by wilfrdon on askubuntu.com

tpu- by PeterJ

!!/test-a supplements2020.com

> Pattern-matching website in answer
----------
Body - Position 1-19: supplements2020.co

doppelgreener

@ArtOfCode i feel like instead of charcoal emblems around the clock, the clock digits should be replaced by SPAM

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, pattern-matching product name in body, pattern-matching website in body: Can you get viruses on from downloaded app? by Swi bfk on apple.SE

doppelgreener

10:12 AM

it is spam o'clock at every o'clock

tpu- by micsthepick

Maybe we should have multiple variants

@angussidney Hmmm? Why's that need nuking?

@micsthepick subject to correction, I'd say it would have been simpler (and perhaps lighter in processing load?) to watch "braindump" as smokey matches anywhere in a string.

But I've approved your PR anyway

@ArtOfCode duplicate report, literally created one after the other

Also I'm annoyed that there isn't a way to provide feedback to the second one, given that there's nothing on it :P

10:16 AM

Meh, an extra optional token in a regex ain't going to knock CPU load by much

@angussidney review should have it

@angussidney eh, dupes can stay

@ArtOfCode nope

rene

is this spam: meta.stackexchange.com/questions/308400/… given it brings you on a site where you have to pay for the download?

I think the criteria for review is <=2 feedbacks, not valid feedbacks

Merged SmokeDetector #1925.

@rene Seems to fit the template, as it says who can share in the title, then shares it in the question body

10:19 AM

@angussidney valid as in not invalidated? Those are default scoped out

!!/scan meta.stackexchange.com/q/308400/203553

@CalvT븃 Post Who can share the CompTIA N10-006 exam dumps? does not look like spam.

@ArtOfCode that's what I meant

!!/report meta.stackexchange.com/q/308400/203553

[ SmokeDetector ] SmokeDetector started at rev 78068ac (metasmoke: Merge pull request #1925 from Charcoal-SE/auto-blacklist-1522145135.4359543 --autopull) (running on teward/Solar Flare)

rene

10:19 AM

Oy, I didn't know the scan command

3

[ SmokeDetector | MS ] Manually reported question: Who can share the CompTIA N10-006 exam dumps? by user386948 on meta.SE

Restart: API quota is 10441.

Actually, maybe it's not appearing because there's already an invalidated feedback by me on the post

@rene It scans a post, and if it looks like spam reports it automatically

tpu- by suraj

Should show up for someone else

10:20 AM

!!/watch dumps4download\.com

@angussidney what am I looking for?

@CalvT븃 Added dumps4download\.com to watchlist

@angussidney I have nothing on review

rene

@CalvT븃 nice!

[ SmokeDetector | MS ] Bad NS for domain in body, blacklisted website in body, pattern-matching website in body, repeated URL at end of long post: This cycle will never stop till you locate an awesome arrangement. by Therry19 Virk on graphicdesign.SE

[ SmokeDetector ] SmokeDetector started at rev d041a4e (SmokeDetector: Auto watch of dumps4download\.com by CalvT븃 --autopull) (running on teward/Solar Flare)

10:21 AM

@CalvT븃 well, that disproves that idea

Restart: API quota is 10421.

Proposal: why not unrestrict the !!/scan command, since it won't actually do anything unless we were going to catch the post anyway?

+1

Works for me, ton of bricks is good for abuse prevention

My point is, there is no method of abuse

Unless if you want to burn out our API quota

10:30 AM

smokey is pretty fast as scanning a post right?

Assuming we have ~8000 remaining, they would have to run the command at least once every 10.8 seconds for 24 hours straight

Aye, I'm thinking more if anyone just scans all teh postz because it's fun

Will chat ratelimiting stop that?

Which would get annoying fast

Should do, yeah

hmm, how does rate limiting actually work?

Q: The Complete Rate-Limiting Guide

10:32 AM

242

I noticed that I can only perform certain actions such as commenting a finite number of times in a given period of time. Obviously, rate limiting is in place to prevent accidental misuse or intentional abuse of certain features. Where else is rate limiting applied on Stack Exchange sites, and wh...

I would actually prefer it if the axes were swapped

that graph would just make more sense to me

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +1 more: Master Testo Pro The non by user811844 on askubuntu.com

so, IIUC, if you have 20+ seconds in between each message, you should not be rate limited?

tpu- by J F

@micsthepick yep

10:38 AM

[ SmokeDetector | MS ] Username similar to website in answer: How to install wearable apk into wearable device in android by 42Gears on stackoverflow.com

tpu- by A J

CI on 4bef513 succeeded.

!!/pull

[ SmokeDetector ] SmokeDetector started at rev 4bef513 (angussidney: Unrestrict !!/scan) (running on teward/Solar Flare)

Restart: API quota is 10247.

I've updated the wiki appropriately

Suraj Rao

hope it wont be (ab)used like why and autoflag commands that I see occasionally

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body: To look at them ourselves we should take a gander at by Therry19 Virk on superuser.com

10:44 AM

If it is, well we enforce pallet of bricks

!!/watch 42gears\.com

tpu- by angussidney

@tripleee Added 42gears\.com to watchlist

@SurajRao generally they aren't too much of a problem I've found

[ SmokeDetector | MS ] Blacklisted website in answer: What is the difference between "flat style" and "material design"? by Patrick on graphicdesign.SE

[ SmokeDetector ] SmokeDetector started at rev b8ec8e4 (SmokeDetector: Auto watch of 42gears\.com by tripleee --autopull) (running on teward/Solar Flare)

Restart: API quota is 10200.

tpu- by A J

!!/isblu law.stackexchange.com/users/4880/patrick

10:45 AM

@CalvT븃 User is not blacklisted (4880 on law.stackexchange.com).

!!/test-a erminesoft.com/flat-design-vs-material

> Url in title
----------
Title - Position 1-23: https://erminesoft.com

[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body: Protection health insurance fitness by TrulifeForsk on apple.SE

!!/scan graphicdesign.stackexchange.com/a/86761/37264

@CalvT븃 Post What is the difference between "flat style" and "material design"? does not look like spam.

tpu- by PeterJ

> Would not be caught as an answer.

Ah ok

10:50 AM

!!/watch tru\W?life

@tripleee Added tru\W?life to watchlist

!!/blacklist-website supplements2017\.com

@tripleee That pattern looks like it's already caught by Pattern-matching website in answer and Pattern-matching website in body; append -force if you really want to do that.

CI on d8d1179 succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev d8d1179 (SmokeDetector: Auto watch of tru\W?life by tripleee --autopull) (running on teward/Solar Flare)

Restart: API quota is 10128.

[ SmokeDetector | MS ] Bad keyword in answer: accessing the user profile by clicking a link by Mathew on stackoverflow.com

@FIRE you're messing up again

sd k