Login lives in CE, no?

Yes but CE already provides individual (ostensibly private but) methods for login to site vs login to OpenID

I just have to do a little bit of the login logic manually

(which I already do some of anyways, e.g. retries)

@quartata Yes, but how does it get a stackexchange.com cookie?

You need universal.gif

@quartata Think so. Might not have the most recent sites.

@thesecretmaster logging into Meta SE works

for at least two hosts... I'll have to check to see if I need to log into SO separately

@quartata That'll give you a meta.se cookie, not a se cookie, right?

no it definitely works for logging into chat

I know this because I can't log into global SE anymore, due to a bug with SO Teams

I log into PPCG + SO instead and it works fine

@quartata Oh, is that what it is? Chat login has been weird for me for a while.

Yeah so like

when you hit log in on chat, it redirects to the global login right

but then you do that and it takes you to SO to log in because you're in a team

when you do that though it doesn't log you into SE

you have to go to a specific site

@quartata No, it should just use the se.com cookie

I'm talking about in the frontend

there's a log in button that links to the global SE login

There's no global se login?

stackexchange.com/users/login

@quartata Yep, exactly

@quartata But that goes away with openid, right?

@Undo I don't know why it does that but it's very annoying and I don't think it worked the way they thought

I've been logging in to mSE chat, then it magically works on c.SE

@thesecretmaster yes

@Undo yeah that's why I think MSE and SO separately should work fine for SD

I'm lost

we're talking about an SO teams thing

If you're a member of an SO Team, it won't let you log in that way -- it tries to redirect you to SO's login page instead when you submit it

But that causes problems with chat

I'm on 2 teams and everything works fine for me?

log out and try using that

I have, and it works fine. You get cookies via the universal gif!

Better yet, go to chat.stackexchange.com and use the log in button there

@thesecretmaster ...?

/users/login/universal.gif with tokens from /users/login/universal/request

Which comes from /users/login

you don't see this?

??

I... don't think so? I'll try again

It's been like this since the Channels beta

do you use Google login or something

I use the Google login and get the same thing

uh

let's hope TSM can get back in

lmao

> last seen 3m ago

oops

is this death?

if you're there TSM, log in to CSE instead

Logging in to c.mSE first works

I haven't logged out yet

But here goes

oh lol

Yep, just got in via cseducators

You try, and tell me if you see get requests for universal.gif in your console.

Oh, wait, you get the error

And *.stackexchange.com will get you the stackexchange.com cookie, I forgot.

It does log in, just redirects to the Team add-login thing

Then use the universe gifs to get all the other cookies

Weird. Lemme look at my login settings, maybe something is different there.

I have a google account connected, but I login via SE.

Yeah, I login via SE to cseducators.se, then I'm everywhere because magic cookies from the universal gif

@Undo What's the teams add-login thing? Is that the normal "My Logins" page?

Not completely sure - it takes me to a page where I'm logged in according to the top bar, but still showing the login box with the error quartata showed

@quartata The login_site method calls _se_openid_login_with_fkey

Even if I login through SO, I just get logged in normally

And I can go to chat.se without any additional logging in.

Anymore metasmoke stuff I need to break?

(this is for future reference for me) MS Todos: #444, #459, #428

@Undo yeah but when I do that it doesn't work for chat

> _handle_se_openid_prompt_ if_neccessary

it's still hitting <site>/users/login like normal

and posting to /users/authenticate

Things which Art/Undo might want to review/close: #183, #251, #286, #396, #428

@quartata Yeah, nevermind, that should work, but isn't the "right" way.

@quartata That's called by _se_openid_login_with_fkey

uh-huh, which is what login_site calls

it's a misleading method name, it's not OpenID specific

Oh

Nevermind then

That method will need to be changed through, right? Because it currently passes openid_identifier.

uhhh, whoops my bad

Not a big deal, I just call _se_openid_login_with_fkey manually with the right params

Anyways, the "right" way is to use the universal gif. But that workaround should work.

@thesecretmaster @Undo (since your here)

kk. Chasing an iMessage issue, then can look

iMessage usually just works, this is weird

What happened? I had to dig into it a bit, so I might be able to help.

Activation errors

As in, with a new device?

Yep. New Mac

(this is on Mojave, but I'm seeing the same thing on HS)

Have you tried turning it off and on again? /s

yeah, even NVRAM

I forget where they keep the auth stuff, but I'd nuke the DB and let it recreate it.

FaceTime also borked

/s/nuke/move

Tried signing out of appleid globally and signing back in?

Trying that now

Signing out of iCloud

[ SmokeDetector | MS ] Mostly dots in answer: What's the translation of 'dates' as a fruit? by Plg on spanish.SE

fp- by thesecretmaster

Prolly low quality, but it does answer the question

Also, any chance we can get all the folks involved in helios together to make a final push to finish it and connect it to SD and MS?

I made an issue, but got no response

I'd be happy to help out if we could get all of the people who know how it works and everyone who's interested in one place so that we can have a proper discussion about it

Yeah, the 'people are busy' thing makes it hard

I can build the MS bit, if someone can tell me what "the MS bit" will be/tell my that my idea (as outlined in the issue) is correct.

@Undo exactly

@angussidney Aren't those people you and Undo?

Andy

@thesecretmaster nope, Andy and undo

Oh, OK. Wasn't sure who AWegnerGitHub was

My only knowledge was from what I could work out from looking at the code (and I don't know anything about serverless/lambda, so that's rather limited)

Well, @Undo, since you're here, can you look over my roadmap here? (after those MS issues I pinged you about) (after you fix your imessage thing)

tentative yes

Ok. I know it's getting late in your timezone, so maybe tomorrow?

Okay, giving up on the iMessage thing

Have you tried applying percussive force?

@Undo What time zone are you in, if that's not too location identifying? The US is a big place.

Mountain. So fairly early, actually

We're watching Force Awakens; should be able to look at MS issues & roadmap after that. Or maybe tomorrow morning.

(kinda behind the times on SW movies :/)

Ah, for some reason I thought you were central/eastern. I gotta head out, and probably won't be back til tomorrow, but ping me if you get around to any/all of that.

[ SmokeDetector | MS ] Mostly dots in answer: How to remove flashlight from iPhone X lock screen? by Andrew Le on apple.SE

naa- by Catija

[ SmokeDetector | MS ] Link at end of answer: Permalink with WORDPRESS by José Frederico on wordpress.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer: are mundane acts of compassion meaningful? by Netu on buddhism.SE

@SmokeDetector ignore-

fp- by Makyen

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title: Want to buy 5 kwk solar system from loomsolar.com by Amod Anand on electronics.SE

tpu- by Makyen

@Makyen AIM is known to duplicate all feedbacks when MS sends an autoflag

@quartata News has reported that Stylish has been taken down from Chrome Web Store

@iBug Thanks. I, now, vaguely remember something along those lines, but hadn't written it down as an issue.

plus another message of your own not far after the above one.

@iBug Yeah, the general issue is maintaining consistency between what AIM reports and what's actually in MS.

@iBug Given that I described it (just below what you linked to, as you mentioned), I really should have been remembering the issue. :-)

:P

Has there been random websocket exceptions from Smokey?

Looks good

[ SmokeDetector | MS ] Blacklisted user: Localhost Error connection refused " Ionic serve " by Retchak Amine on stackoverflow.com

fp- by Makyen

[ SmokeDetector | MS ] Offensive answer detected, toxic answer detected: Is there a way to see how many covenant items I have turned in? by The God of dark souls on gaming.SE

[ SmokeDetector | MS ] Link at end of answer: Getting input from barcode scanner internally without textbox by Mubashir Murtaza on stackoverflow.com

fp- by Makyen on Is there a way to see how many covenant items I have turned in? [MS]

naa- by Makyen

naa by Undo

[ SmokeDetector | MS ] Url in title, blacklisted website in body, blacklisted website in title, repeated url at end of long post: mumybear.com/keto-thermo-diet/ by user45677 on rpg.SE

@SmokeDetector tpu-

@SmokeDetector fp-

@SmokeDetector fp-

fp by Nisse Engström on are mundane acts of compassion meaningful? [MS]

tp by Nisse Engström

[ SmokeDetector | MS ] Potentially bad keyword in body: Turn several nested json into multi dimensional list in python by Matthew Love on stackoverflow.com

fp- by iBug

[ metasmoke ] ci/circleci failure on 194e4a3: Your tests failed on CircleCI

@thesecretmaster Took a look at everything except 251 (too involved for now). Thanks for all your work :)

@SmokeDetector fp-

tpu- by Makyen on https://mumybear.com/keto-thermo-diet/ [MS]

[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, bad pattern in url body, potentially bad ns for domain in body, +1 more: www.godiply.com/turmeric-slim-reviews/ by user123465 on graphicdesign.SE

tpu- by paper1111

[ SmokeDetector ] SmokeDetector started at rev acf7c0f (Makyen: Add Erik the Outgolfer to CHQ) (running on teward/Supernova)

Restart: API quota is 15036.

Restart: API quota is 14995.

[ SmokeDetector | MS ] Blacklisted website in body, body starts with title and ends in url, link at end of body: Keto Thermo Diet Of the soup by gopapir on askubuntu.com

tpu- by DavidPostill

@SmokeDetector k

!!/blacklist-keyword keto\W?thermo\W?diet

@iBug Blacklisted keto\W?thermo\W?diet

Maybe we should blacklist keto <any word> diet?

Like keto\W?\w+\W?diet

[ SmokeDetector ] SmokeDetector started at rev b3c57b1 (SmokeDetector: Auto blacklist of keto\W?thermo\W?diet by iBug --autopull) (running on teward/Supernova)

Restart: API quota is 14857.

@iBug You should block ketogenic as well

[ SmokeDetector ] SmokeDetector started at rev 780a5ea (iBug: Update pattern product names, autopull) (running on teward/Supernova)

Restart: API quota is 14799.

@Seth ??

Looks like something smokey missed?

Ah

!!/test los-movies.com

> Would not be caught as a post, title or username.

@Seth Would you mind undeleting and reporting it to Smokey, then delete it again?

!!/watch los-movies\.com

@Makyen Added los-movies\.com to watchlist

@iBug eh, that's messy. If I have to?

No, just a preference.

What happens if I do that, specifically?

(for future reference)

We get a record of that instance in MS

Ah, ok.

CI on e869dec succeeded. Message contains 'autopull', pulling...

!!/report askubuntu.com/a/1053129/44179

[ SmokeDetector ] SmokeDetector started at rev e869dec (SmokeDetector: Auto watch of los-movies\.com by Makyen --autopull) (running on teward/Supernova)

hmm

!!/report askubuntu.com/a/1053129/44179

I guess I'm getting old?

wait a second

[ SmokeDetector | MS ] Potentially bad keyword in answer: How to enable Ubuntu to read/play Arabic subtitles? by Hannah Barton on askubuntu.com

aha, there we go

Restart: API quota is 14778.

Unfortunately, bad timing. SD is rebooting. Give it a moment. Nows good.

tpu- by iBug

fuck. messier than I remember. Remind me not to do that again.

"than you remember"?

It's not often you have to undelete spam

I see.

Anyway, thanks a lot for your help.

I remembered it caused problems when you tried to re-delete it but I couldn't remember what problems so I figured I was misremembering. I wasn't.

it's not a huge deal, don't worry about it.

I guess, the action of undeleting spam feeds into SE's SpamRam?

I don't think so. The spam flags are still on it.

It'd be nice if we had a way for a mod (or user that can see deleted posts) to report a deleted post. SD primarily uses the HTML for the post along with the title and user. That's all available from the displayed deleted post. It would be possible to have a userscript scrape that data and send it to MS.

Which is kinda the problem. When I go to spam flag it again it says "you have already cast this flag".

@Makyen That would be much easier and better.

I have no idea how much work it would cause you guys however.

@Seth huh. R/A works exactly the same way unless you have audits, FWIW

@Mithrandir yes it's the same flag internally

I've thought of contacting SE to grant us (Smokey's API key) access to deleted posts.

@iBug That might be a good idea too actually. I bet they'd do it.

Well, the userscript would be relatively easy, but there'd need to be an MS API endpoint to do it.

@iBug The SE API has no access to deleted posts, even if the user has the right to see them.

@Makyen Deleted posts are only visible from the web page?

Yes.

How is SE API related to any specific user?

You can have an auth token. MS has one for each user for which it casts flags. Users can auth other applications or scripts.

@iBug You (can) get access to your own user data through the API, eg access to /inbox for notifications

IIRC the "get post" API doesn't accept an auth token, so you can't "read post with user X's privs"

For instance, FIRE has a read auth token so it can get some additional information from the SE API specific to the user.

[ SmokeDetector | MS ] Blacklisted website in body, link at end of body, pattern-matching product name in body, pattern-matching website in body, potentially bad ns for domain in body, +1 more: bloated, having flatulence, and possibly abdominal pain by corry201 on askubuntu.com

tpu- by iBug

Most APIs that are read-only, not specific to any user don't accept an auth token

@iBug /posts/{ids} does take an auth token. It has a couple of available/optional fields which require a read token. Specifically upvoted and downvoted say if the user has voted, and require a private_info auth token.

uhm

Most of the SE APIs have the default filter set such that no private information is provided, but most of the ones I've looked at have optional private info. Some few of the SE APIs are only private info, only write, or about reading the user's inbox.

It'd be really nice if deleted posts are accessible via API

and before someone invents a "post viewer" app, it won't defeat the purpose of post deletion

The potential of being abused can be cut down by limiting access this way, for example revisions of a deleted post is not accessible, only the number of edits and the content of the current version

@iBug Yes, it would. It would be quite helpful for a number of things, but there's been a clear decision not to permit it. Deleted posts are only available through the web interface (there are internal endpoints which you can fetch posts from, but not as SE API responses). Those endpoints require either being in a browser or mimicking a browser session of a logged-in user with authorization.

Guess it's time to give up that idea :(

@iBug If they are going to make it available via the API, then all equivalent information should be available. All equivalent information (e.g. revisions) are available through the web, so it's effectively already available to authorized users.

[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body, potentially bad keyword in body: creation that you have actually by yopi on askubuntu.com

tpu- by iBug

@iBug As I said, a userscript that scrapes the page (upon command) when the user is looking at a deleted post, combined with an API endpoint that allows MS to accept a report (such an endpoint is already available to SD), would be sufficient for creating the MS post with the minimal required data, and a manual report reason.

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, body starts with title and ends in url, link at end of body, +4 more: Rapid Tone diet strange absurd indifferent by Mone19 on askubuntu.com

tpu- by Makyen

[ SmokeDetector | MS ] Bad ns for domain in body, bad keyword in body, bad keyword in title, bad pattern in url body, blacklisted website in body, +1 more: Go get your "Luna Trim"? by oyeenawaazshareef on cs.SE

tpu- by paper1111

[ SmokeDetector | MS ] Offensive answer detected, toxic answer detected: How to calculate the enthalpy change of water? by bins on chemistry.SE

tpu- by paper1111

What happened to my "notify"?

@Loong it's possible that it was lost when Smokey switched instances

@Loong Smokey switched instances; it's being run in a different location. Notifications aren't synced between instances.

Notifications are stored locally to each smokey instance, so you'll have to run the command again

I see.

!!/notify 11540 chemistry.stackexchange.com

@Loong You'll now get pings from me if I report a post on chemistry.stackexchange.com, in room 11540 on chat.stackexchange.com

[ SmokeDetector | MS ] Bad keyword in body, bad pattern in url body, blacklisted website in body, pattern-matching website in body, potentially bad ns for domain in body: Then, the answer is converted to the theme by user123467 on graphicdesign.SE

tpu- by Mithrandir

!!/watch facebook\.com/NutritionsOfHealth

@Makyen Added facebook\.com/NutritionsOfHealth to watchlist

!!/watch twitter\.com/nutritions_of

@Makyen Added twitter\.com/nutritions_of to watchlist

CI on 8a84410 succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev 8a84410 (SmokeDetector: Auto watch of twitter\.com/nutritions_of by Makyen --autopull) (running on teward/Supernova)

Restart: API quota is 14410.

Tweet reported as spam

!!/report superuser.com/a/1337405/337631

[ SmokeDetector | MS ] Manually reported answer: How to let outlook not to insert MARKETING to emails from a sender by emailextractor on superuser.com

tpu- by paper1111

!!/watch eyesbit\.com

@paper1111 Added eyesbit\.com to watchlist

CI on ea55544 succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev ea55544 (SmokeDetector: Auto watch of eyesbit\.com by paper1111 --autopull) (running on teward/Supernova)

Restart: API quota is 14331.

[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, body starts with title and ends in url, link at end of body, pattern-matching product name in body: With ok nutrients by pavuk on askubuntu.com

tpu- by paper1111

[ SmokeDetector | MS ] Potentially bad keyword in body: I NEED your help guys! This is probably an easy answer by Quinn on stackoverflow.com

fp- by paper1111

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, body starts with title and ends in url, link at end of body, +3 more: Rapid Tone Shark Tank would have it by aise19 on askubuntu.com

tpu- by paper1111

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title, toxic body detected: Is ghusl (bath) is mandatory after masturbation? by Mohammad ahmed on islam.SE

fp- by paper1111

@SmokeDetector ignore-

[ SmokeDetector | MS ] Toxic answer detected: Installing a deadbolt on a door with a circular hole for the deadbolt location? by Gay on diy.SE

tpu- by paper1111

tpu- by DavidPostill on Is ghusl (bath) is mandatory after masturbation? [MS]

@SmokeDetector fp-

!!/isblu islam.stackexchange.com/users/28312

@paper1111 User is not blacklisted (28312 on islam.stackexchange.com).

[ SmokeDetector | MS ] Link at end of answer: Shortcodes: Pros and Cons by David Smith on wordpress.SE

naa- by paper1111

tpu- by DavidPostill

tp by Nisse Engström on How to let outlook not to insert MARKETING to emails from a sender [MS]