@Shree np. It actually does search titles and bodies too. It's just that those can't match it: titles must be at least 15 characters, while bodies always have some HTML (e.g. <p>iv cannula</p>).
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, pattern-matching website in body, +2 more (490): Nitro strength apprehensive method is by tsjhdtkskz on wordpress.SE
tpu- feedback received
[ SmokeDetector | MS ] Bad pattern in url body, body starts with title and ends in url, potentially bad ns for domain in body, potentially bad keyword in body, repeated url at end of long post (294): Auto Chat Profits by steffandevin on english.SE
@Makyen That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.
[ SmokeDetector | MS ] Blacklisted website in body, body starts with title and ends in url, link at end of body, pattern-matching website in body, potentially bad keyword in body, +1 more (395): Essential CBD Extract Denmark by anetteuckere on askubuntu.com
[ SmokeDetector | MS ] Bad ns for domain in body, blacklisted website in body, link following arrow in body, potentially bad keyword in username, potentially problematic ns configuration in body (296): Why Basement Ventilation is important? by Ajay Singh on superuser.com
There's two tpu- posts with that email, 3 tpu- from the user. There's extremely little chance the email will be used for anything but spam, so is it blacklistable, or does it need to be watched until it reaches 3 (the ongoing campaign threshold)?
[ SmokeDetector | MS ] Potentially bad keyword in body, potentially problematic ns configuration in body, blacklisted user (72): Award - Question by kahraman on crypto.SE
@SmokeDetector put on hold as unclear what you're spamming: Please include a link to the website you are spamming because as your post is currently written, it is impossible to know what you're spamming. See the How to Spam? page for more details.
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, pattern-matching product name in body, potentially bad ns for domain in body, potentially bad keyword in body (294): Should I Buy Joyelle derma cream online? by medfolix on hardwarerecs.SE
@Olivia That is not what ongoing campaign means. An ongoing campaign is a spam campaign which has been going on for long enough for us to already have at least one entry in the blacklists which has qualified under the normal rules. It is that new things for that already blacklisted campaign can be added with the lower criteria.
@Olivia It does not fulfill the blacklisting criteria. If you want to bend the blacklisting criteria, that is a different choice, but not justifiable as "ongoing campaign". Personally, now that the user has been destroyed, I would have waited to see if the user returned and continued posting. Having the first account destroyed (and the IP block that goes with it) is something that stops some spammers, at least a good number of the non-professional spammers.
@Makyen That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.
@double-beep No, I specifically meant tpu in order to put the user on the blacklist. The user appeared to be engaged in a pattern of vandalizing their posts. I wanted to have all of their edits reported until such time as they stopped vandalizing or were suspended [they got a 24 hours suspension to cool down]. In the past, we have sometimes had posts vandalized which don't get detected. In other cases, I've seen this as a result of going through the users recent edit activity.
As it turned out, this was not the case for this particular user, but I find it convenient to have the extra monitoring for users that are vandalizing multiple posts (i.e. not just one). As a part of that, I know it's my responsibility to be closely watching what is detected of theirs in order to remove them from the blacklist as soon as the situation changes and to verify that posts are not inappropriately flagged.
SD however, is made to catch spam/offensive posts, there are other bots to catch bad edits (which are currently dead xD). BTW, if they vandalized their post again, wouldn't it be caught?
@double-beep Detecting vandalism depends on if the vandalism triggers any of our detections. While we do, generally, detect vandalism, our detecting it depends mostly to people being lazy in what they put in as the new content. I have seen, more than once, where a user that is vandalizing several of their posts replaces them with content that we don't detect as vandalism. Blacklisting results in all of the user's edits being reported, allowing us to rapidly revert any such edits.
If the person is not actually engaged in a spree of vandalizing their posts, then blacklisting them results in one of their posts being reported and getting FP feedback. I don't see this as being all that negative compared to not reverting vandalism which we don't otherwise detect.
Note: I am not advocating changing the default feedback on vandalism to be tpu. It should normally be tp. However, when the user appears to be vandalizing multiple posts in a row, monitoring all of their edits seems like a good idea.
