Charcoal HQ

!!/test Glor-TV-findel

> Potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Title - Position 1-15: Glor-TV-findel
Body - Position 1-15: Glor-TV-findel
Username - Position 1-15: Glor-TV-findel

@user5389107 I doubt so.

@user5389107 we did the test, but that was it.

we are pending on a clear community mandate before we can proceed with that

user5389107

12:01 PM

Any firm criteria on that?

angussidney

Also, we need to make changes

yeah, more changes before the 5-flag is ready to roll out

[ SmokeDetector | MS ] Pattern-matching website in answer, username similar to website in answer: Tools for Oracle DB migration from AIX to Linux by MikeDietrichDE on stackoverflow.com

angussidney

@user5389107 I know Undo is happy to proceed if all the concerns raised are adressed, I'm not sure what the concensus is though

tpu- by iBug

12:03 PM

@SmokeDetector f

No, there's disclosure.

LOL, Smokey 'thinks' it's a site for diets ...

Interesting. I'm thinking it's "Diet Rich", too

It took me quite a while before I realize it's "Die-trich"

[ SmokeDetector | MS ] Chinese character in title, bad keyword in body, messaging number in body, messaging number in title, mostly non-Latin body, +2 more: 【加拿大毕业证公证】办加拿大温莎大学Windsor毕业证【QQ/微信744043126】买外国学历修改成绩单/国外假文凭购买/加拿大学历公证Universit‌y of Windsor by tjkhkljgk09 on bitcoin.SE

tpu- by iBug

!!/blacklist-keyword 744043126

fp by Ashish Ahuja on Tools for Oracle DB migration from AIX to Linux [MS]

[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +4 more: www.garciniacambogialean.com/turmeric-forskolin by Sucts1937 on drupal.SE

@iBug Blacklisted 744043126

tpu- by iBug

12:06 PM

Curious why no one thought of it...

[ SmokeDetector ] SmokeDetector started at rev 9fa1621 (SmokeDetector: Auto blacklist of 744043126 by iBug --autopull) (running on teward/Solar Flare)

Restart: API quota is 15085.

[ SmokeDetector | MS ] Potentially bad keyword in answer: A list of path to a dictionnary by Julien Nzb on stackoverflow.com

fp- by iBug

Some Chinese spam on forged university diploma.

[ SmokeDetector | MS ] Few unique characters in body: Return Max and min not working right by Nishant Singh on stackoverflow.com

tpu- by tripleee

tp- by iBug

@SmokeDetector vandalism reverted

@tripleee Registered question as true positive. If you want to blacklist the poster, use trueu or tpu.

12:10 PM

hey, Glorfindel is too fast.

@SmokeDetector v

@iBug they've been hitting Bitcoin repeatedly over the last few hours

!!/rmblu stackoverflow.com/users/4482582/nishant-singh

@WELZ User removed from blacklist (4482582 on stackoverflow.com).

@iBug R-O-B-O-T

12:11 PM

[ SmokeDetector | MS ] Few unique characters in answer, offensive answer detected, potentially bad keyword in answer, toxic answer detected: CameraLens QML component not found (M300) by user9794059 on stackoverflow.com

tpu by Stephen Kennedy on Return Max and min not working right [MS]

tpu- by Stephen Kennedy

!!/rmblu stackoverflow.com/users/4482582

@Glorfindel User removed from blacklist (4482582 on stackoverflow.com).

Again 🙄

@iBug If you don't know, @Glorfindel is a robot created by Art. ;)

Oh my, how can't I?

12:13 PM

stackoverflow.com/c/charcoal/a/127/4

hmm, how do you interpret "how can't I" ?

@Glorfindel You're a robot. :P

Glorbot

That meme doesn't seem to work. I got no response from @Glorfindel . Maybe there is no such command coded in him. ;)

Ashish Ahuja

@Glorfindel halp

12:23 PM

@Glorfindel Shakespeare sonnet please

[ ZoeBot ] There are too many bots here

fp by Zoe on A list of path to a dictionnary [MS]

[ SmokeDetector | MS ] Potentially bad keyword in body: arguments imply differing number of rows: 20, 0 by demonhawk on stackoverflow.com

fp- by iBug

fp by Zoe

!!/report meta.stackexchange.com/q/310240/158100

[ SmokeDetector | MS ] Manually reported question: Email Filtering Solutions by Brijesh J on meta.SE

tpu- by suraj

sd - k

Suraj Rao

12:26 PM

spam experts are spamming?

yep

That's the most ironic thing I've ever seen.

!!/watch host\.co\.in

@Zoe Added host\.co\.in to watchlist

@SmokeDetector k

12:28 PM

[ SmokeDetector ] SmokeDetector started at rev 73ee741 (SmokeDetector: Auto watch of host\.co\.in by Zoe --autopull) (running on teward/Solar Flare)

Restart: API quota is 14872.

oh, belated happy first birthday, watched_keywords.txt (created May 12 2017)

9

@user5389107 cc @angus @trip Undo is talking to people and finding out what solutions mitigate the issues raised in our meta post. Once we have a decent idea of that, we can start upping the flags

Suraj Rao

happy birthday

We'll probably hit 4 flags first

3400+ watches, and probably around 1,000 more promoted to blacklist

Suraj Rao

12:30 PM

@tripleee on that note.. what was its first words ?

needsupplementhelp\.com

it was already addicted as a baby :(

the oldest remaining entry is essayssos\.com

It's averaged about 10 items/day

!!/blacklist-keyword trimfire

that was the second oldest

12:33 PM

@tripleee Blacklisted trimfire

CI on c8a78a8 succeeded. Message contains 'autopull', pulling...

oh wait no, that was meta-spammed by the guy who posted the watchlist as troll posts

[ SmokeDetector ] SmokeDetector started at rev c8a78a8 (SmokeDetector: Auto blacklist of trimfire by tripleee --autopull) (running on teward/Solar Flare)

Restart: API quota is 14798.

Andy

@tripleee Really? I don't remember that.

@Andy metasmoke.erwaysoftware.com/…

Andy

Hm, nope. shrugs

12:38 PM

@tripleee and, it still only had 236 reason weight :D

most of the regexes have a backslash so they don't match themselves ... and multiple matches on a reason don't add to the weight

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, email in answer, pattern-matching email in answer: Using more than one spell on a scroll by Debbie Kladke on rpg.SE

If a post has two watched kewords it still gets one reason weight.

tpu- by iBug

in RPG General Chat, 25 secs ago, by doppelgreener

@SmokeDetector [spam appears] [clicks on flag button to destroy it] [error message: post has already been removed]

paper1111

12:46 PM

@doppelgreener Lol did you intend to make a comment in MS

@paper1111 we also get smokedetector notifications in rpg general chat :)

i'm just sharing here as well

!!/blacklist-keyword 234\W*905\W*791\W*5709

@tripleee That pattern looks like it's already caught by Bad keyword in answer and Bad keyword in body; append -force if you really want to do that.

OH

I removed it already

12:47 PM

hahaha thanks

paper1111

ah ok XD

it's just recording any reply to the smokedetector report message as a MS comment, right?

@doppelgreener yeah, since about a week back

The [Create abuse report] button always throws me off - due to its awkward location.

Like I'm abuse reporting the ms post to something

s/it's/its

12:59 PM

[ SmokeDetector | MS ] Bad keyword in link text in answer: How to sync iCloud contacts with Google? by John A on apple.SE

[ SmokeDetector | MS ] Link at end of answer: How to sync iCloud contacts with Google? by russwd on apple.SE

tpu- by iBug on How to sync iCloud contacts with Google? [MS]

tpu- by iBug

[ SmokeDetector | MS ] Potentially bad keyword in answer: Azure Data lake packages by Nedzad G on stackoverflow.com

tpu- by iBug

@SmokeDetector naa

@WELZ Recorded answer as an NAA in metasmoke.

@SmokeDetector n

@SmokeDetector They are both first time offenders - and legitimate links (which technically answer the question)

naa- by rene on How to sync iCloud contacts with Google? [MS]

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body, +1 more: phenomenally unquestionably comprehended and trademark settling in the accommodating scene. by Lorrainehutchi on superuser.com

[ SmokeDetector | MS ] Potentially bad keyword in answer, blacklisted user: How to query Azure Data Lake? by Nedzad G on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, pattern-matching email in answer: Modify x- y- coordinates by hand (RD) by Debbie Kladke on gis.SE

tpu- by Zoe on phenomenally unquestionably comprehended and trademark settling in the accommodating scene. [MS]

tpu- by Zoe

[tag:waffles]

1:13 PM

@Zoe That pattern looks like it's already caught by Pattern-matching email in body and Pattern-matching email in answer; append -force if you really want to do that.

1:26 PM

for what it's worth, submitted two reports to wix.com for the recent wixsite.com spams

1:37 PM

[ SmokeDetector | MS ] No whitespace in answer, repeating characters in answer: Usage of 'cool' by ADDADADADADDADAD on ell.SE

tpu- by suraj

@SmokeDetector k

@SmokeDetector n

[ SmokeDetector | MS ] Few unique characters in answer, no whitespace in answer, repeating characters in answer: Scrolling to element with onscroll or similar event by user9794528 on stackoverflow.com

tpu- by iBug

naa- by Glorfindel

@SmokeDetector Still garbage before edit.

yeah, maybe it counts as vandalism.

They left a comment explaining their mistake.

err, comment...

1:50 PM

!!/rmblu stackoverflow.com/users/9794528

@Glorfindel User removed from blacklist (9794528 on stackoverflow.com).

Unregistered users can't delete their posts.

> Suprisingly I can't delete it. I have to create an account, but I gave accidently wrong e-mail address. So sorry for that

Looks like I just forgot that.

It took a while before I got that 'rule' in my system as well.

!!/blame᠎ ᠎⁠‌᠎᠎

@Glorfindel It's ArtOfCode's fault.

2:01 PM

Hello, I thought of something and just thought to get a quick confirmation/direction: Smokey doesn't watch spam comments, and that's because:

1. (primarily) many spam postings are by one-time 1-rep posters who don't even have the necessary rep to spam comment
2. spam posts have more visibility than spam comments, so getting the former deleted should be higher priority
3. more comments are posted everyday than posts are, and scanning comments as well would exhaust the daily API quota very quickly

4. it's hard to watch comments in real-time. The SE API doesn't expose them; I know IPS has a bot which does, maybe @Mithrandir can tell more about it.

@GaurangTandon those reasons are factors, but they're secondary factors - primarily, we don't look at comments because we get our feed of stuff from a websocket that doesn't send us comments.

@Glorfindel The API exposes them, that's what IPS Comment Bot uses; it's the websocket that doesn't

ah, OK.

@ArtOfCode ohh interesting

As for 1., we recently had some troll comments on a site where that's allowed without privileges. Also, some spammers leave the spam links in comments to their own posts, so it's not foolproof.

2:05 PM

[ SmokeDetector | MS ] Blacklisted user: convert cXML to EDIfact by Lazy worker on stackoverflow.com

[ SmokeDetector | MS ] Few unique characters in answer: convert cXML to EDIfact by user9794682 on stackoverflow.com

@SmokeDetector f

tpu- by Glorfindel

fp- by iBug on convert cXML to EDIfact [MS]

@Glorfindel comments allowed without 50-rep? was it some beta site?

fp by Stephen Kennedy on convert cXML to EDIfact [MS]

@GaurangTandon Yes. Private Beta allows so.

2:06 PM

Ask Patents.

but iBug is right, private betas have this potential problem as well

@GaurangTandon I think the primary reason we're not currently doing so is that the SE Websocket doesn't feed comments.

why'd they get spam on private beta anyway? o.O i wonder if spam's ever happened on a private beta

@Glorfindel oh!

@Glorfindel whoa, AP is a really special site

@iBug yep

Ask Patents is a beta site

2:08 PM

Not private beta, though

true which makes it weird but

There are 4 kinds of privilege levels. Graduated, Public Beta, Private Beta and Ask Patents.

basically

Q: Reputation requirements compared

@quartata eh, not really. For starters, it has no Area 51 proposal.

and it does have a custom design.

103

How do reputation requirements for various privileges compare on Stack Overflow vs a graduated Stack Exchange 2.0 site vs a site in public or private beta? Return to FAQ Index

@Glorfindel That's what I was going for.

2:12 PM

Mathematics has a higher level for tag creation (and for running for moderator)

Yep. Just forgot Mathematics

And it looks like I didn't know about MO Meta and PPCG Meta at all :(

@Glorfindel Sure, but it technically is a beta site behind the scenes.

because it has appointed moderators, not elected ones?

StackApps has that as well

I don't know, and unfortunately I can't quote my source here for reasonz.

Q: How did this site get out of beta?

3

Ask patents to me appears, whilst possibly useful, to be significantly less healthy and less active than what Stack Exchange typically expects from a site before graduation. How did Ask Patents get out of beta?

discussion

i guess that's the answer

2:14 PM

wait, the only sites where all mods are appointed should be MSE and AP, right?

As I understand it, there's effectively a SiteType switch behind the scenes - either it's beta, or it isn't. Sites can have designs and mods and things without leaving beta, and the site will still technically remain a beta site until that switch is flipped.

@Mithrandir not really a secret

!!/scan puzzling.stackexchange.com/questions/65860/…

@Mithrandir Post Why This Chore is Challenging does not look like spam.

!!/report puzzling.stackexchange.com/questions/65860/…

2:23 PM

[ SmokeDetector | MS ] Manually reported question: Why This Chore is Challenging by Jaredballweg on puzzling.SE (@Mithrandir @micsthepick @TetsuyaYamamoto)

tpu- by suraj

!!/watch phdify\.com

@Mithrandir Added phdify\.com to watchlist

[ SmokeDetector ] SmokeDetector started at rev dee9b55 (SmokeDetector: Auto watch of phdify\.com by Mithrandir --autopull) (running on teward/Solar Flare)

Restart: API quota is 13587.

Funny, that should have already been watched

2/2 now

Did the watchlist exist a year ago?

Don't think so

2:27 PM

Um @ArtOfCode you should not have merged #426

I already fixed it on the Smokey side, all that does is prevent manual comments from containing them too...

2 hours ago, by tripleee

oh, belated happy first birthday, watched_keywords.txt (created May 12 2017)

I suppose you could keep the "show feedback in the header" part but definitely take out stripping the feedback

!!/watch buy.{1,4}essay

@Mithrandir Added buy.{1,4}essay to watchlist

CI on 0386d9a succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev 0386d9a (SmokeDetector: Auto watch of buy.{1,4}essay by Mithrandir --autopull) (running on teward/Solar Flare)

Restart: API quota is 13503.

[ SmokeDetector | MS ] Bad keyword with email in body: High Conductivity of plasma combined with Super conductivity of Some metals might give the perfect electric-circuit setup for "space ships" by Not-so Smarty pants on physics.SE

[ SmokeDetector | MS ] Few unique characters in answer, no whitespace in answer: If I can't flag a post, don't wait until after I've typed an explanation to tell me so by myasadefa on meta.SE

tp- by suraj

@SmokeDetector tp-

2:36 PM

tpu- by Mithrandir

@SmokeDetector v

!!/rmblu meta.stackexchange.com/users/380893

@Mithrandir User removed from blacklist (380893 on meta.stackexchange.com).

fp by Nisse Engström on High Conductivity of plasma combined with Super conductivity of Some metals might give the perfect electric-circuit setup for "space ships" [MS]

@Mithrandir the previous hit is from April 2017 though, so before the watchlist

@user5389107 I tend to think that's the current reason, yes. Terrified about what the next political movement could turn this into, though.

[ SmokeDetector | MS ] Link at end of answer: Form fails to proceed on submit by Pantherax on stackoverflow.com

2:49 PM

do we think this site is hacked, abandoned, or a spammer site? metasmoke.erwaysoftware.com/domains/17005

looks like spammers are abusing it

there's an email in the whois; maybe try contacting them?

[ SmokeDetector | MS ] Potentially bad keyword in answer, toxic answer detected: Validating arrays with AJV / JSON Schema by 343bapiwi on stackoverflow.com

tpu- by Makyen

@tripleee that whole erwaysoftware.com is riddled with spam ...

@rene my gosh, you are right!

I had an unblurred moment to notice that ...

@tripleee the shop seems legit ... give them a call? I bet they didn't notice their wp site gets ... leveraged for other purposes.

3:00 PM

[ SmokeDetector | MS ] Bad keyword in answer: How can I regain my Instagram account after the phone number got invalid? by Rahul choudhary on webapps.SE

naa- by Glorfindel

@rene aww, can't get any useful information from the Whois

>:D

[ SmokeDetector | MS ] Offensive answer detected, potentially bad keyword in answer: How do disable control by iPhone headphones? by user289088 on apple.SE

my whois cleansing has worked

the email address probably forwards to the client more or less directly, but I put €5 that the forwarded address will turn out to be out of date or a black hole with no response

3:04 PM

tpu- by quartata

@Undo yay, thanks!

?

Talking about getting my personal info off erwaysoftware.com whois

i mean, there's an address, but seems to be offices

same for charcoal-se.org

@Undo ah okay ... I was thinking of the cleanup I requested, is the information I provided sufficient or do you need more details?

github.com/Charcoal-SE/metasmoke/issues/405

wait... @art you can opt to not have your address in the whois?

Catija

3:09 PM

I thought that was just a matter of paying to have it removed ?

> Registrant type:
UK Individual

Registrant's address:
The registrant is a non-trading individual who has opted to have their
address omitted from the WHOIS service.

depends on the registrar, many domain sellers will happily let you tick a box at no extra charge

!!/report apple.stackexchange.com/a/325414/121968

[ SmokeDetector | MS ] Manually reported answer: How do disable control by iPhone headphones? by user289088 on apple.SE

sd k

3:11 PM

tpu- by Glorfindel

@Mithrandir [:44616197] That message is not a report.

ah, it was already reported

Catija

Yeah, I saw it in the Tavern already. :D

Going to need to split up the message queue into one per site when I do the async bits

@tripleee So you basically want all the domains in metasmoke.erwaysoftware.com/data/sql/queries/… to gain a www.?

You can see it's super slow because it has to post to four rooms now

3:13 PM

@quartata Per chat domain, right?

Yeah that's what I meant

Because backoffs aren't shared across them is all

So you can do them at the same time if they're on separate hosts

@Undo no not all of them, when there's a duplicate then probably one of them requires the www. but they still need to be investigated one by one

[ SmokeDetector | MS ] Pattern-matching website in body: Dynamic QR Code reader by James on raspberrypi.SE

fp- by Glorfindel

3:33 PM

fp by Nisse Engström

[ SmokeDetector | MS ] Potentially bad keyword in username: VBA Get Data from Closed WorkBook using Named Range by John on superuser.com

fp- by tripleee

3:50 PM

[ SmokeDetector | MS ] Bad keyword in answer, offensive answer detected, potentially bad keyword in answer, toxic answer detected: Drying a cup on Shabbos with a paper napkin by Charles Rane on judaism.SE

[ SmokeDetector | MS ] Bad keyword in answer, offensive answer detected, potentially bad keyword in answer, potentially bad keyword in username, repeating characters in answer, +1 more: Drying a cup on Shabbos with a paper napkin by Umar on judaism.SE

tpu- by Undo

tpu- by Undo on Drying a cup on Shabbos with a paper napkin [MS]

@tripleee So the goal here is to merge duplicates?

I'm kinda distracted with some other stuff, sorry

@Undo yeah, they became duplicates when I removed the www. from entries which should have the prefix

[ SmokeDetector | MS ] Repeating characters in answer: Operator norm vs spectral radius for positive matrices by jason on mathoverflow.net

@Undo well not merge, more like disambiguate actually

tpu by Mithrandir on Drying a cup on Shabbos with a paper napkin [MS]

fp by Mithrandir on VBA Get Data from Closed WorkBook using Named Range [MS]

tpu by Mithrandir on How to query Azure Data Lake? [MS]

naa by Mithrandir

naa by Mithrandir on Form fails to proceed on submit [MS]

[ SmokeDetector | MS ] Few unique characters in answer: Widget.sinkEvents is not a function by Sergey M. on stackoverflow.com

tpu- by doppelgreener

tpu- by doppelgreener on Operator norm vs spectral radius for positive matrices [MS]

tpu by Stephen Kennedy

4:38 PM

@Mithrandir correct

Ummmmm why was this marked NAA? metasmoke.erwaysoftware.com/post/119558

Question should also have been reported...

naa what naa

tpu by WELZ on Is Donald Trump a GOOD GOYIM? [MS]

@quartata I believe I did

[ SmokeDetector | MS ] Offensive body detected, potentially bad keyword in body, toxic body detected: Windows 10 user СИСТЕМА wtf!? by user9795531 on stackoverflow.com

4:40 PM

metasmoke.erwaysoftware.com/post/119559

@ArtOfCode could've given him a chance to change it

tpu- by WELZ

@WELZ can't, there's a time limit

@tripleee ah yes