Charcoal HQ

12:00 AM

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Mixture of romaji and hiragana in NHK "Meet and Speak" by 岩崎美紀子 on japanese.SE

metasmoke

tpu- feedback received

Ryan M

!!/watch ilpd\.jp

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev a18f528 (SmokeDetector: Auto watch of ilpd\.jp by Ryan M) (running on teward/Osiris)

metasmoke

fp- feedback received on [MS] HW Help error **Exception in thread "main" java.lang.NullPointerException** , program runs fine in command line but not eclipse or neat beans

Makyen/EC2-num02: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started at rev 342a3ba (Makyen: This is the MS instance, so needs to post feedback) (running on Makyen/EC2-num02, Python 3.6.12)

Ryan M

@Makyen I'd recommend changing that watch to ^distance[\W_]*+matrix[\W_]*+api$ to catch the username only, or removing it entirely, as "Distance Matrix API" is the name of a Google product that isn't being spammed.

That said, I'm not making that change myself since I'm affiliated with the company whose product name is being (unintentionally, I believe) caught, and I'd like to avoid any appearance of bias :-)

That would catch both TP with none of the FP.

SmokeDetector

12:18 AM

[ SmokeDetector | MS ] Blacklisted user (71): Usage of と particle in this specific case by 岩崎美紀子 on japanese.SE

Makyen

@SmokeDetector @RyanM While this is reasonably TP from SD/MS' POV (disclosed, but doesn't actually answer the question and does link their stuff), I think the site moderators would much prefer that it was handled through a custom mod-flag, rather than spam flags.

Given the user's claimed direct involvement with what's being asked about, they might want to adopt a course of action which informs and educates the user, in an attempt to get them to contribute in a way which fits with SE's rules and requirements, rather than just slapping them with the "spam" label.

Yes, I see the second answer. Hopefully a mod will be able to step in and educate soon.

Ryan M

Given the second answer, I'm now inclined to agree with you. With just the first, it's pure spam in my book: there's not even an attempt at answering, just pure self-promotion. The first answer "[e]xists only to promote a product or service." I'll retract my spam flag and send a custom flag. Thanks for the ping :-)

@SmokeDetector fp- repairable spammy "signature," custom flagged the user's other answer

Makyen

12:36 AM

@iBug FYI: Coral has been down for about 15 hours.

SmokeDetector

12:52 AM

[ SmokeDetector | MS ] Bad keyword in answer, potentially bad ns for domain in answer (87): GRUB fails to install during Debian 10 installer (re: UEFI, SuperMicro motherboard) by ndavidow on unix.SE (@Pandya)

[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): How to use TF CTC loss with variable length features and labels ✏️ by Pablo on stackoverflow.com

metasmoke

fp- feedback received on [MS] GRUB fails to install during Debian 10 installer (re: UEFI, SuperMicro motherboard)

Ryan M

sdc bisect pcpartpicker.com/product/WfF48d/…

SmokeDetector

@RyanM Matched by

(?<=:?//(?:[\w-]*\.)*[\w-]*(?<![./](?:stackexchange|stackoverflow)\.com)(?<![.\/]serverfault\.com)(?<![.\/](?:superuser|askubuntu|stackapps)\.com)(?<![.\/]mathoverflow\.net)(?<![.\/](?:costco|lenovo|github)\.com)(?<![.\/](?:imgur|epson|canon|apple)\.com)(?<![.\/]asus\.com)(?<![.\/]ibm\.com)(?<![.\/]bestbuy\.com)(?<![.\/]cnet\.com)(?<![.\/]drivereasy\.com)(?<![.\/]example\.com)(?<![.\/]flipkart\.com)(?<![.\/]localserver)(?<![.\/]michael-peeters\.blogspot\.ca)(?<![.\/]microsoft\.com)(?<![.\/]needrom\.com)(?<![.\/]paytmmall\.com)(?<![.\/]projektar\.hu)(?<![.\/]r1\.ilikewallpaper\.net)(?<![.\/]usccb\.org)(?<![.\/]robsworldoftech\.blogspot\.com\.au)(?<![.\/]www\.amazon\.co\.uk)(?<![.\/]www\.amazon\.in)(?<![.\/]www\.ebay\.com)(?<![.\/]www\.ebay\.fr)(?<![.\/]www\.johnlewis\.com)(?<![.\/]zoom\.cnews\.ru)(?:/[\w-]*)*)/(?:(?:how-to-)?fix-(?:error-(?:\d+-in-)?)?)?(?:asus|canon|epson|fire-tv|ipad|hotmail|hp-printer|lenovo|lexmark|quickbooks)-(?!(?:[^<]|<(?!\/?code>))*+<\/code>)(?#XXX)

on line 1652 of bad_keywords.txt

Ryan M

oh good grief, what on earth is that supposed to be?

whatever it is, it's picking up things it shouldn't be

SmokeDetector

1:15 AM

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Why on earth are o-scopes earth referenced? by thobie on electronics.SE

[ SmokeDetector | MS ] Toxic body detected (60): How to check if specific input file upload is empty and if empty still upload with a value of N/A into database by Johnny on stackoverflow.com

Makyen

@RyanM It doesn't look that bad. Even without the exclusions, it's 707 Total / 539 TP (76.24% TP) / 161 FP / 11 NAA, which doesn't look that bad. I'm sure it could be improved. For example, you could go through all of the FP and see which domains occur more than once, have not yet been excluded, and which have no FP. Then any additional such domains could be added to the exclusions.

OTOH, I do agree that it can easily be, and should be, made to be significantly less CPU intensive.

SmokeDetector

Makyen/EC2-linux: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev 7a83eb9 (SmokeDetector: Auto watch of medicalpillsforsale\.com by Spevacus) (running on Makyen/EC2-linux)

Makyen

With the domain exclusions, it's 636 Total / 536 TP (84.28% TP) / 94 FP / 9 NAA, which seems quite reasonable.

@Makyen Although, that's still a bit low for a blacklist entry. I had been thinking it was on the watchlist.

Ryan M

1:44 AM

@Makyen Yeah, that was my general thought (though I didn't know the numbers since search didn't like the regex)

That TP rate is certainly more than reasonable for a watch

SmokeDetector

[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): logged in user's comments in wp my-account page by Behzad r on stackoverflow.com

[ SmokeDetector | MS ] Link at beginning of answer (33): Is there a browser extension to pronounce the words? by Pomme_de_Gavin on languagelearning.SE

metasmoke

fp feedback received

NobodyNada

2:05 AM

room topic changed to Charcoal HQ: Where diamonds are made, smoke is detected, and we break things by developing on production. 170k true positives and counting. This room is for Charcoal, which focuses on detecting and eliminating spam and rude/abusive posts on all SE sites. For more information, see charcoal-se.org/about. Handy links: metasmoke.erwaysoftware.com, github.com/Charcoal-SE [dev-on-prod] [flag-based-fraternity] [programmatic-crowbars]

the joke has run its course

scaaahu

!!/report academia.stackexchange.com/q/157571/546

SmokeDetector

[ SmokeDetector | MS ] Manually reported question (93): Performed cunnilingus on my professor, now I've been suspended by Horny Student on academia.SE

NobodyNada

good grief

metasmoke

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): How do you identify a SMD marking codes? by flcs2020 on electronics.SE

metasmoke

2:13 AM

fp- feedback received

SmokeDetector

2:26 AM

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): What is the 201 Philadelphi Eagles Champions Ring by Ringsofcustom on stackoverflow.com

[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): How to find the number of nodes within a XML API response? by Rajiv Rathore on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Performed cunnilingus on my professor, now I've been suspended by Jack Enhoff on academia.SE

metasmoke

tpu- feedback received on [MS] What is the 201 Philadelphi Eagles Champions Ring

Spevacus

!!/watch ringsofcustom\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 464e0c8 (SmokeDetector: Auto watch of ringsofcustom\.com by Spevacus) (running on teward/Osiris)

metasmoke

fp- feedback received on [MS] How to find the number of nodes within a XML API response?

tpu- feedback received

SmokeDetector

2:47 AM

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Bash prompt - octal representation of multibyte unicode characters works for prompt but not when run manually (same script)? by Alexander D'Attore on unix.SE (@Pandya)

metasmoke

fp- feedback received

Daniel Widdis

!!/report stackoverflow.com/questions/64345963/…

SmokeDetector

[ SmokeDetector | MS ] Manually reported question (93): is the businesssitebook is right？ by Johnchen969 on stackoverflow.com

metasmoke

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in body, potentially bad keyword in body, potentially bad keyword in title (3): Free Robux Generator by FreeRobuxGenerator on academia.SE

metasmoke

3:01 AM

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Repeating characters in answer (80): sharepoint online workflow content approval doesn't send email for some reason ✏️ by Julie_MSFT on sharepoint.SE

metasmoke

fp- feedback received

Daniel Widdis

!!/watch businesssitebook\.com

SmokeDetector

@DanielWiddis The regex contains an unescaped "."; in most cases, it should be "\."; append -force if you really want to do that.

@DanielWiddis You don't have blacklist manager privileges, but I've created PR#5049 for you.

metasmoke

PR#5049 ("Daniel Widdis: Watch businesssitebook\.com") opened by SmokeDetector

SmokeDetector

3:07 AM

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Failed to load response data ✏️ by Felipe on es.stackoverflow.com

Ryan M

!!/approve 5049

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 3325ef5 (SmokeDetector: Merge pull request #5049 from Charcoal-SE/auto-blacklist-1602644750) (running on teward/Osiris)

Ryan M

!!/watch free-robuxgenerator\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 0c4a675 (SmokeDetector: Auto watch of free-robuxgenerator\.com by Ryan M) (running on teward/Osiris)

Daniel Widdis

I almost think robux by itself is near-watchable.

SmokeDetector

3:15 AM

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Can't Install ImageMagick on Centos using Yum by Navas P on unix.SE (@Pandya)

Daniel Widdis

robux: 29 tp / 3 fp.

I won't tell you how much of my kids' allowance is used to purcase robux, btw. Perhaps i should read some of those spam questions.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Calculating Dividends paid out and Div ratio from finance sheets by Dbrooks on money.SE

[ SmokeDetector | MS ] Few unique characters in answer, no whitespace in answer, repeating characters in answer (263): Electorate legend by truong thanh on meta.SE

metasmoke

tpu- feedback received

fp- feedback received on [MS] Calculating Dividends paid out and Div ratio from finance sheets

Daniel Widdis

Would be nice to whitelist morningstar on the finance SE

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): What is the recommended boot partition size for Windows 7? by Darius on superuser.com

Ryan M

3:37 AM

@DanielWiddis I have a friend who works at Roblox. It's an absolutely fascinating ecosystem.

SmokeDetector

4:07 AM

[ SmokeDetector | MS ] Link at end of answer (61): how to make batch transaction in ethereum? by howe on ethereum.SE

[ SmokeDetector | MS ] Bad keyword in body (95): How to create a diet and exercise recommending machine learning model for android app? by Leesha Parami on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

4:41 AM

[ SmokeDetector | MS ] Potentially bad keyword in body (1): I'm not able install deluge on my Kali by Chaaru Manjuraj on unix.SE (@Pandya)

metasmoke

fp- feedback received

naa feedback received on [MS] Debian 8 apt-get update showing 404 Not Found

SmokeDetector

[ SmokeDetector | MS ] Few unique characters in body, mostly punctuation marks in body, repeating characters in body (191): ¿ turn on my a Samsung a20 moble data remotely? by Toy Gay on stackoverflow.com

metasmoke

tpu- feedback received

Daniel Widdis

@RyanM I think my son was making money (well, robux) back when he played. Now he's costing me money getting a CS degree in college. :D

Ryan M

4:56 AM

@metasmoke Pretty sure this isn't actually spam, this guy's posts are linked in other posts explaining Debian packaging issues

SmokeDetector

teward/Osiris: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started at rev 0c4a675 (SmokeDetector: Auto watch of free-robuxgenerator\.com by Ryan M) (running on teward/Osiris, Python 3.6.9)

Restart: API quota is 17759.

NobodyNada

@DanielWiddis 78 fp, remember that Metasmoke is not representative of the network as a whole

Ryan M

!!/unwatch patreon\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 976fe27 (SmokeDetector: Auto unwatch of patreon\.com by Ryan M) (running on teward/Osiris)

Ryan M

!!/watch patreon\.com/(?=\w)(?!api)(?!oauth2)(?!core-js)(?!zloirock)(?!deluge_cas)(?!nesdis)(?# add others found in log output)

SmokeDetector

5:05 AM

[ SmokeDetector ] Blacklists reloaded at rev 1ffb41f (SmokeDetector: Auto watch of patreon\.com/(?=\w)(?!api)(?!oauth2)(?!core-js)(?!zloirock)(?!deluge_cas)(?!nesdis)(?# add others found in log output) by Ryan M) (running on teward/Osiris)

NobodyNada

@SmokeDetector TERRIBLE question, but I don't know that it counts as spam

Daniel Widdis

@NobodyNada dang all those programmers trying to hack robux. :D

Ryan M

@NobodyNada I can only upvote your Teams question once

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of body (44): End statements for metrics (e.g. jaccard, f1, log loss) are only printing first statements instead of actual numbers? by opk2009 on stackoverflow.com

Daniel Widdis

@NobodyNada I went to flag it R/A but saw smokey autoflagged (for me) as spam. Same effect.

Ryan M

5:08 AM

I flagged R/A under the heuristic of "there was no attempt to write human language into the question box"

NobodyNada

@RyanM That's true, but note that there is a borderline-intelligible question in the title. This is just the even-lower-effort version of "title says it all"

also, the fact that the title starts with a '¿' is a pretty clear indicator that the OP is ESL

Daniel Widdis

@NobodyNada So... this means what? Allow such a question, edit it and answer it? Just close vote? Flag VLQ instead?

Ryan M

We have a number of questions in MS that are tp for far less (adding repetitive nonsense to code-only questions)

NobodyNada

@DanielWiddis Personally, I would close vote. I've written about this before on Teams, but IMO red-flags should really be reserved for users who seem to be acting in bad faith

@RyanM do we really? I'd call those "fp repairable"

Daniel Widdis

Under the heuristic "there should be a system level block" ... there should be a system level block, kindly asking OP to actually write a question.

Ryan M

5:15 AM

@NobodyNada Yeah, I found a bunch while fp-hunting with regex. Let me find a few.

Daniel Widdis

@NobodyNada I may share your opinion, but I also think the vast majority of users are acting in good faith. And there's a lot of useless noise posted in good faith.

NobodyNada

@DanielWiddis again, I wrote about that on Teams:

> My personal opinion is that “system-level” == SpamRam. When we say we want a system-level block on a post, that means the poster deserves all of the harshest consequences that can come with getting red-flagged — including account destruction, IP/subnet ban, and all that. In my opinion, this should be reserved for users that are obviously contributing in bad faith.

Daniel Widdis

Sorry, hadn't read that far back in history. I understood system-level block as "prevent from posting" rather than an automatic "death penalty for slightest transgression"

Ryan M

...okay, the first one I found is a particularly heinous example: metasmoke.erwaysoftware.com/post/253934 but it raises a good point: which of these two questions (this vs "off-topic question in title, ??????????????????????????? in body") is worse?

NobodyNada

@DanielWiddis yes, and there are a lot of people who would disagree with my position on this, including at least one SO mod. But IMO red-flags are designed for spammers and trolls, and I feel uneasy about using them for users who are just lazy or misguided

In the end, your flags are your own and you are free to use them as you wish. Likewise with feedback -- what the admins say goes, but when there's room for interpretation you're free to interpret the guidelines as you wish

Ryan M

5:22 AM

How much of "fnjierguerhgu hg uergu hrueh gueru rue her ugu her e urhguehrughwoighwuiohefuw" does a person have to put into a question before they're no longer acting in good faith?

rene

sdc watch effecttee\.com

NobodyNada

@RyanM That's a pretty bad one indeed. Personally I'd still FP and VTC, as the user is asking a question. The reason for that nonsense is that if you post a huge code dump, the system requires you to add more text before you can submit the post.

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 76e08e8 (SmokeDetector: Auto watch of effecttee\.com by rene) (running on teward/Osiris)

NobodyNada

But there are some who have made the argument that once you've gone to that much effort to work around the quality filters, you're no longer acting in good faith. I don't think I agree with that argument but I could be persuaded otherwise, which is why I raised the Teams question in the first place

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): On average how long would take to give a dog advanced training by connie m on pets.SE

Ryan M

5:24 AM

@SmokeDetector fp- but take a breath

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in body, potentially problematic ns configuration in body (2): Which brand provides the best wine coolers? by Wine Cooler Reviews on superuser.com

metasmoke

tpu- feedback received

Ryan M

I'm trying to edit that Pets.SE post in such a way that the OP won't reject it, and I really want to delete most of it.

rene

Hello Tanks in Advantage

SmokeDetector

[ SmokeDetector | MS ] Bad keyword with email in body (57): C# Homework - System.Char.Parse, value cannot be null by Paul Kim on stackoverflow.com

metasmoke

5:32 AM

fp- feedback received

Ryan M

@RyanM Well, I tried to fix it. Let's see if it's accepted.

oh dear, I should have looked at the rest of their posts. This probably needs a mod flag (example: pets.stackexchange.com/a/28864/18947).

NobodyNada

@RyanM good grief

Daniel Widdis

@NobodyNada Responded to the teams post. :)

NobodyNada

@DanielWiddis awesome!

Daniel Widdis

@NobodyNada RE: "In the end, your flags are your own and you are free to use them as you wish" unless I've delegated to Smokey, who used "spam" rather than the R/A I would have used. ;)

Ryan M

5:41 AM

@SmokeDetector custom-flagged: "This user is posting a bunch of very...ranty answers. I've tried to fix this one up with a suggested edit, but some of them (like this and this) are mostly scolding the OP, with only a morsel of answer. This one was borderline enough that I tried to salvage it before I noticed the others."

!!/watch homeaccessoriestips\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 60987e0 (SmokeDetector: Auto watch of homeaccessoriestips\.com by Ryan M) (running on teward/Osiris)

[ SmokeDetector | MS ] Bad keyword in link text in body, potentially bad keyword in body, potentially bad keyword in title (71): WHAT IS KOLKATA ESCORTS SERVICES? by kolkatanight on meta.SE

metasmoke

tpu- feedback received

Daniel Widdis

how does "escort services" not trigger a higher spam score?

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Can I use access token to view a live youtube video? by jediclustethp on stackoverflow.com

iBug

@Makyen Sorry I forgot to inform you in this room. For cost-management issues I dropped the Lightsail host Coral was on. I am planning to set up some new infrastructure that better combines networking and compute, and (hopefully) I'll get another instance up soon.

NobodyNada

5:49 AM

as always, I have a Raspberry Pi running 24/7 and all set up to run SmokeDetector, so ping me if another instance is ever needed

Makyen

@iBug np. Thanks for keeping us informed.

NobodyNada

I also just discovered I can get a free VM with an Azure student account, so I can run an instance on that too.

Ryan M

@DanielWiddis that is a solvable problem :-)

!!/blacklist-keyword escorts[\W_]*+services

iBug

It's a problem for me, however, as all of my good compute resources are located within China, where as you probably know international connectivity is particularly poor.

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev cc5b854 (SmokeDetector: Auto blacklist of escorts[\W_]*+services by Ryan M) (running on teward/Osiris)

Daniel Widdis

5:50 AM

@RyanM you might want to make the s in escorts optional

Ryan M

(43 TP / 0 FP / 0 NAA, zero hits on SE)

Makyen

@RyanM The 2nd and 4th "s" should probably be optional.

iBug

I'm still trying to find good ways of getting my compute resources connected to the rest of the world in a good way.

NobodyNada

@RyanM maybe add a couple ?'s? escorts?[\W_]*+services?

Ryan M

@RyanM add more question marks to make things optional

Daniel Widdis

5:51 AM

I was first with the "optional" barrage! :D

iBug

@NobodyNada did you mean "escor service"?

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Beginners Guide For T-Shirt Printing Machine - How to Go About It by Sanam Tiwari on superuser.com

NobodyNada

@iBug :/ thanks

metasmoke

tpu- feedback received

Daniel Widdis

what if I want to take my Ford Escort to the dealer for service?

ducks

iBug

5:52 AM

@DanielWiddis probably too rare for us to care

NobodyNada

!!/watch printersmag\.co\.uk

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev f23c758 (SmokeDetector: Auto watch of printersmag\.co\.uk by NobodyNada) (running on teward/Osiris)

[ SmokeDetector | MS ] Bad keyword in body, potentially bad keyword in body (96): Anyone know about Jasypt? by shara james on stackoverflow.com

Ryan M

@NobodyNada @Makyen @DanielWiddis this is too broad, "escort service" and "escort services" are both commonly used outside of spam: stackexchange.com/search?q=code%3A%22escort%20services%22 stackexchange.com/search?q=%22escort%20services%22 stackexchange.com/search?q=%22escort+service%22

metasmoke

tpu- feedback received

SmokeDetector

CI on e2f8087 succeeded.

Ryan M

5:57 AM

"escorts service" is quite spammy, but has 1 FP

iBug

not really an FP, since the user is highly experienced

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): What does each setting on the oven mean and what should you use it for? by Michael Bailey on cooking.SE

Ryan M

!!/unblacklist escorts[\W_]*+services

!!/blacklist-keyword escorts[\W_]*+services?

SmokeDetector

@RyanM No such command 'unblacklist-keyword'.

[ SmokeDetector ] Blacklists reloaded at rev edc3568 (SmokeDetector: Auto blacklist of escorts[\W_]*+services? by Ryan M) (running on teward/Osiris)

NobodyNada

@iBug hmm. Considering that there's 164 TPs, I think the whole thing is at least worth a watch though

SmokeDetector

5:59 AM

[ SmokeDetector ] Blacklists reloaded at rev f8fc95b (SmokeDetector: Auto unblacklist of escorts[\W_]*+services by Ryan M) (running on teward/Osiris)

[ SmokeDetector | MS ] Potentially bad keyword in body (1): How does the Dai stablize? by Thomas Stokes on ethereum.SE

NobodyNada

in terms of accuracy, it's pretty comparable to this thing, which is on the blacklist

Ryan M

I think we already have it on there

!!/bisect Escort Service

SmokeDetector

@RyanM Matched by escorts?\W?service on line 2624 of watched_keywords.txt

Ryan M

lol.

service, not services.

!!/bisect Escort Services

SmokeDetector

@RyanM 'Escort Services' is not caught by a blacklist or watchlist item.

Daniel Widdis

6:02 AM

ooooh

Ryan M

well, that's an easy fix. escorts?\W?service -> escort[\W_]*+services?

(because the version with "escorts" is now blacklisted)

Daniel Widdis

does the watchlist assume a space after the term?

Ryan M

!!/unwatch escorts?\W?service

!!/watch escort[\W_]*+services?

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Game theory question based on consumers by Rohit on math.SE

[ SmokeDetector ] Blacklists reloaded at rev b8eb2fc (SmokeDetector: Auto unwatch of escorts?\W?service by Ryan M) (running on teward/Osiris)

[ SmokeDetector ] Blacklists reloaded at rev 1347521 (SmokeDetector: Auto watch of escort[\W_]*+services? by Ryan M) (running on teward/Osiris)

Ryan M

@DanielWiddis It and the keyword blacklist both assume word boundaries (\b in regex) around the term.

metasmoke

6:04 AM

fp- feedback received

Daniel Widdis

gotcha

Ryan M

!!/bisect sumer

SmokeDetector

@RyanM Matched by sumer on line 2662 of watched_keywords.txt

Makyen

@NobodyNada Yeah, but I'm going to be moving that the the watchlist in a bit.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How to create a website that runs on blockchain by AFO on ethereum.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Meteor server throws error with Accounts.addEmail() in a meteor method by nick mosan on stackoverflow.com

NobodyNada

6:06 AM

@RyanM a rather...dedicated troll

metasmoke

Makyen/EC2-num02: Executing automatic scheduled reboot.

Ryan M

@NobodyNada I wondered...that has about a zillion FP, which I imagine reflected a strong need

metasmoke

[ SmokeDetector ] SmokeDetector started at rev 342a3ba (Makyen: This is the MS instance, so needs to post feedback) (running on Makyen/EC2-num02, Python 3.6.12)

Makyen

@RyanM I haven't looked through all of these yet, but almost all of the ones I've looked through wouldn't be detected.

NobodyNada

@RyanM stackoverflow.com/c/charcoal/a/284/7

Only a few every month, which IMO is a reasonable price to pay given what we went through a few years ago

let's just say he's the reason Metasmoke account IDs are at ~1600 instead of ~600

Ryan M

6:09 AM

oh wow lol. I did actually wonder why there were so many missing.

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of body (44): identify music playing at beginning of cold opening of snl skit in '93 by corietn88 on musicfans.SE

metasmoke

fp- feedback received

Ryan M

75/78 of the TP are either immediately followed by the last name or the last initial

@NobodyNada catches all the posts from him that just the name does: metasmoke.erwaysoftware.com/…

The other three were coincidences (e.g., spam about "con[linebreak]sumer behavior")

NobodyNada

@RyanM nice. Might be worth loosening for now then, we can just tighten it up again if/when he returns

Ryan M

Actually, I take that back. Two of the three were coincidences. The third was so dumb I thought it was a typo the first time.

Makyen

6:23 AM

@RyanM I've looked at all of these posts and almost all of them are excluded from detection due to either the post's score or the user's reputation. For the few which were not, most of those have the text in code format. Excluding matches within code also improves the regex from 178 Total / 171 TP (96.07% TP) / 6 FP / 1 NAA to 174 Total / 171 TP (98.28% TP) / 2 FP / 1 NAA when searching on MS (i.e. doesn't detect 4 FP on MS).

!!/unwatch- escort[\W_]*+services?

!!/blacklist-keyword- escorts?[\W_]*+service(?!(?:[^<]|<(?!\/?code>))*+<\/code>)s?

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev b4b2114 (SmokeDetector: Auto unwatch of escort[\W_]*+services? by Makyen) (running on teward/Osiris)

[ SmokeDetector ] Blacklists reloaded at rev 1357d93 (SmokeDetector: Auto blacklist of escorts?[\W_]*+service(?!(?:[^<]|<(?!\/?code>))*+<\/code>)s? by Makyen) (running on teward/Osiris)

Ryan M

@Makyen Nice!

!!/unwatch sumer

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 5cd2fea (SmokeDetector: Auto unwatch of sumer by Ryan M) (running on teward/Osiris)

Ryan M

waffle

SmokeDetector

@RyanM That pattern looks like it's already caught by Potentially bad keyword in answer, Bad keyword in body, Potentially bad keyword in body, and Bad keyword in answer; append -force if you really want to do that.

@RyanM 'sumer\\Wk(?:olcak)?' is not caught by a blacklist or watchlist item.

[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer (3): Need help in converting the following python code into c code ✏️ by SaltedFish on stackoverflow.com

Ryan M

6:28 AM

...lol. It's already blacklisted with the last name.

SmokeDetector

[ SmokeDetector | MS ] Offensive answer detected, potentially bad keyword in answer, toxic answer detected (159): Revert edited image - android by Miles Ferguson on stackoverflow.com

Ryan M

...and also watched separately with the last name and another name

metasmoke

tpu- feedback received

Daniel Widdis

Another autoflag spam that should have been R/A. Dang smokey. :D

Ryan M

!!/watch sumer\Wk

SmokeDetector

6:37 AM

[ SmokeDetector ] Blacklists reloaded at rev b52cf58 (SmokeDetector: Auto watch of sumer\Wk by Ryan M) (running on teward/Osiris)

NobodyNada

anyway, it's bedtime for me \o

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad ns for domain in body, potentially bad keyword in body (3): Grouping profiles strings having the same words, but occurring out of order Python by Robert Daniel on meta.SE

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Bad phone number in body, link at beginning of body, potentially bad ip for hostname in body, potentially bad keyword in body, potentially bad keyword in username, +2 more (219): Godrej Properties upcoming residential project in Ashok Vihar Delhi? by Godrej Vikhroli Mumbai on mathoverflow.net

metasmoke

tpu- feedback received

SmokeDetector

6:45 AM

[ SmokeDetector | MS ] Bad keyword in answer (86): Internal ads appear to link to external ad network (Google ads) by Fareed Khan on meta.SE

[ SmokeDetector | MS ] Link at beginning of answer (33): Why is if else in the aura component not working? by Jaya Hegde on stackoverflow.com

metasmoke

tpu- feedback received on [MS] Internal ads appear to link to external ad network (Google ads)

naa- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Bioisosteric replacement using SMARTS (KNIME and RDKit) by Antoine Lacour on mattermodeling.SE

[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, body starts with title and ends in url, pattern-matching product name in body, +5 more (588): rapiketoburn.com/keto-slim-bhb/ by LaurDori on apple.SE

metasmoke

tpu- feedback received

fp- feedback received on [MS] Bioisosteric replacement using SMARTS (KNIME and RDKit)

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword in link text in answer, link at end of answer, pattern-matching website in answer, potentially bad keyword in answer, +1 more (370): Why is RFC 7505 (Null MX) necessary? by Dissertation Educators on serverfault.com

metasmoke

tpu- feedback received

SmokeDetector

7:04 AM

[ SmokeDetector | MS ] Bad pattern in url answer (63): How to install salt for python3? ✏️ by Issa Daniel on serverfault.com

Makyen

!!/watch- godrej[\W_]*+properties

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 339de91 (SmokeDetector: Auto watch of godrej[\W_]*+properties by Makyen) (running on teward/Osiris)

[ SmokeDetector | MS ] Toxic body detected (60): insert or touchin private pirt by Rifat on islam.SE

[ SmokeDetector | MS ] Bad keyword with email in body (57): wordpress email checker on domain by huzza on wordpress.SE

metasmoke

fp- feedback received on [MS] insert or touchin private pirt

fp- feedback received

SmokeDetector

7:21 AM

[ SmokeDetector | MS ] Potentially bad keyword in body (1): How to create anagram solver using python? by swapnil ingale on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

Makyen/EC2-linux: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev 7a83eb9 (SmokeDetector: Auto watch of medicalpillsforsale\.com by Spevacus) (running on Makyen/EC2-linux)

[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): Does EvoPdf HtmlToPdfConverter supports emoji character? by Sebastian Gall on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body, potentially bad ip for hostname in body, potentially bad ns for domain in body, potentially bad keyword in body (98): About data science certification by Robert Daniel on datascience.SE

Ryan M

@SmokeDetector glares suspiciously

SmokeDetector

7:36 AM

[ SmokeDetector | MS ] Potentially bad keyword in username (1): How to find missing letters in Python given an array? by cool_guy21 on stackoverflow.com

Ryan M

sdc bisect cool_guy21

SmokeDetector

@RyanM Matched by cool_guy\d+ on line 3088 of watched_keywords.txt

Ryan M

!!/unwatch cool_guy\d+

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 73691ba (SmokeDetector: Auto unwatch of cool_guy\d+ by Ryan M) (running on teward/Osiris)

Ryan M

!!/watch ^cool_guy8\d$

metasmoke

7:42 AM

fp- feedback received

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev b640901 (SmokeDetector: Auto watch of ^cool_guy8\d$ by Ryan M) (running on teward/Osiris)

[ SmokeDetector | MS ] Link at beginning of body (44): Does anyone have sample code for how to use this library? by kazumasa matsumoto on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Use the column of a dataframe that has a list of dictionaries to create other columns for the dataframe ✏️ by sachin kumar s on stackoverflow.com

Ryan M

!!/bisect Navi Mumbai

SmokeDetector

@RyanM Matched by navi[\W_]*+mumbai on line 21759 of watched_keywords.txt

metasmoke

fp- feedback received

fp- feedback received on [MS] Does anyone have sample code for how to use this library?

SmokeDetector

7:59 AM

[ SmokeDetector | MS ] Bad ip for hostname in body, bad ns for domain in body, misleading link, potentially bad asn for hostname in body (220): Check Out The Given Technical Assistance Websites For Quick and instant support by garmin1 on psychology.SE

metasmoke

tpu- feedback received

Ryan M

!!/watch garmin-com-express\.support

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 5485611 (SmokeDetector: Auto watch of garmin-com-express\.support by Ryan M) (running on teward/Osiris)

[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): How can an Indian Citizen Start a Company in Singapore? by SBSgroup on meta.SE

metasmoke

tpu- feedback received

Ryan M

!!/watch sbsgroup\.com\.sg

SmokeDetector

8:09 AM

[ SmokeDetector ] Blacklists reloaded at rev f0f338c (SmokeDetector: Auto watch of sbsgroup\.com\.sg by Ryan M) (running on teward/Osiris)

Jenayah

!!/report meta.stackexchange.com/q/355344/398063

SmokeDetector

@Jenayah Post 1: Already recently reported [ MS ]

Jenayah

Oh nevermind

@SmokeDetector tpu-

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad keyword in body (2): Are you searching for Cheese Pizza in Singapore? by Pizzaddiction on meta.SE

metasmoke

tpu- feedback received

Ryan M

8:13 AM

I don't know if I want to start a company or eat a cheese pizza, but whatever I do, I want to do it in Singapore.

!!/watch pizzaddiction\.sg

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 7f06ac0 (SmokeDetector: Auto watch of pizzaddiction\.sg by Ryan M) (running on teward/Osiris)

[ SmokeDetector | MS ] Bad keyword in link text in body, potentially bad keyword in body (70): ESPP capital gain tax form for non residents in United States by gnsb on money.SE

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): DataServiceContext.SaveChanges() throws Microsoft.OData.Client.DataServiceRequestException ✏️ by Ties Mulder on stackoverflow.com

SmokeDetector

8:26 AM

[ SmokeDetector | MS ] Link at beginning of body (44): Помогите решить задачку ЕГЭ. C++ by Dursinear on ru.stackoverflow.com

[ SmokeDetector | MS ] Post is mostly images (14): Replace value inside the URL of img src attribute using jQuery or javascript by Jibran Mustafa Virk on stackoverflow.com

metasmoke

fp- feedback received

Ryan M

!!/report stackoverflow.com/a/64348934 "Reported by David Buck in SOCVR"

SmokeDetector

[ SmokeDetector | MS ] Manually reported answer (94): How to show user comments in hierarchical fashion in asp.net mvc by fevrceqr3awfc3w on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): List all bosses who have at least 3 staff members by biplob on stackoverflow.com

[ SmokeDetector | MS ] Manually reported answer (94): Repositioning 'Reply' Link in Comments by fsdzvsd on wordpress.SE

Ryan M

!!/watch fashionworld\.co\.za

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev f8e1b2c (SmokeDetector: Auto watch of fashionworld\.co\.za by Ryan M) (running on teward/Osiris)

[ SmokeDetector | MS ] Bad keyword in answer (86): how to use regex in zabbix logrt[] by dmitryaivanov on stackoverflow.com

metasmoke

8:38 AM

fp- feedback received

Ryan M

Experiment, feel free to remove/poke me if it hits too many FP:

!!/watch https?://%3Ca%20href=%22https?

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 8475cf1 (SmokeDetector: Auto watch of https?://%3Ca%20href=%22https? by Ryan M) (running on teward/Osiris)

Ryan M

Currently 17 TP / 2 seriously dodgy FP

SmokeDetector

[ SmokeDetector | MS ] Manually reported question (93): MG Store builds Win10 the world's largest core player community by Miracle Games Platform on stackoverflow.com

[ SmokeDetector | MS ] Mostly non-latin answer (50): ERR node-sass@4.7.2 postinstall: `node scripts/build.js` by Ori on stackoverflow.com

metasmoke

tpu- feedback received on [MS] How to show user comments in hierarchical fashion in asp.net mvc

naa- feedback received

SmokeDetector

8:48 AM

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, link at end of body, potentially bad ns for domain in body, potentially bad keyword in body, +1 more (297): What Are The Active Ingredients Used In Truvalast? by tru7valast on askubuntu.com

metasmoke

tpu- feedback received

Ryan M

!!/watch MG store

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 48a0c45 (SmokeDetector: Auto watch of MG store by Ryan M) (running on teward/Osiris)

metasmoke

tpu- feedback received on [MS] MG Store builds Win10 the world's largest core player community

SmokeDetector

[ SmokeDetector | MS ] Potentially bad asn for hostname in answer (1): How to show a string graph with '\n' in dataframe? by 辜乘风 on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): Was the holocaust caused by allied bombing by user30831 on skeptics.SE

[ SmokeDetector | MS ] Bad keyword in body (95): Issue with date & time by Suganya S on stackoverflow.com

metasmoke

9:02 AM

fp- feedback received

SmokeDetector

9:14 AM

[ SmokeDetector | MS ] Few unique characters in answer, repeating words in answer (173): Is eating straight sugar ok, as long as I eat it with fiber? by user20574 on medicalsciences.SE

SmokeDetector

9:25 AM

[ SmokeDetector | MS ] Toxic body detected (60): The script is displayed in the browser as text, not html by Chebu Pizza on stackoverflow.com

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, bad pattern in url body, blacklisted website in body, +3 more (485): Keto Premiere South Africa in Suomi Reviews by kttoprmire on meta.SE

[ SmokeDetector | MS ] Mostly punctuation marks in answer (36): Python Regex: password must contain at least one uppercase letter and number by Sunil Jangid on stackoverflow.com

[ SmokeDetector | MS ] Blacklisted website in body, potentially bad ip for hostname in body, potentially bad keyword in body, blacklisted user (172): Ambien 10mg Freely go for adequate dosage in Arkansas - Genericambienonline by norcoovernight on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Retrieving a specific data from the JSON data provided (React js) by user10995546 on stackoverflow.com

[ SmokeDetector | MS ] Link at end of answer, potentially bad ns for domain in answer, potentially bad keyword in answer, username similar to website in answer (126): How to log what RPC service is doing? by Tektiks on superuser.com

[ SmokeDetector | MS ] Bad keyword in title, link at end of body, potentially bad ns for domain in body, potentially bad keyword in body (199): IEHSAS Hospitality & Tourism Management Courses in Pakistan by Shahzada Sunny on meta.SE

Nisse Engström

9:42 AM

@SmokeDetector tpu-

metasmoke

fp feedback received on [MS] Retrieving a specific data from the JSON data provided (React js)

Nisse Engström

@SmokeDetector tpu-

metasmoke

fp feedback received on [MS] Python Regex: password must contain at least one uppercase letter and number

Nisse Engström

@SmokeDetector tpu-

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer, username similar to website in answer (64): Video Editing when playing in videoview by Netilly on stackoverflow.com

metasmoke

9:49 AM

fp feedback received on [MS] How to show a string graph with '\n' in dataframe?

Nisse Engström

@SmokeDetector tpu-

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to Install Owl Carousel on Blogspot/Blogger by Đinh Cẩm Nhung on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Why on earth are o-scopes earth referenced? by thobie on electronics.SE

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Cannot upload to azure Blob Storage: The remote server returned an error: (400) Bad Request by Murugan Andezuthu Dharmaratnam on stackoverflow.com

[ SmokeDetector | MS ] Link at beginning of answer (33): Get my eBay listings with PHP using eBay API by vodkaexpans on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword in link text in answer, username similar to website in answer (230): TV Shows for Web Master and Design Firms by Mega Web Design on webmasters.SE

SmokeDetector

10:22 AM

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Sending email to myself : it is safe? by Melvina Norman on stackoverflow.com

[ SmokeDetector | MS ] Offensive answer detected (78): In which chapter of the Mahabharatha the story of Bhisma giving five arrows to Duryodhana for killing the Pandavas is found? by Yadagiri D on hinduism.SE (@Pandya)

[ SmokeDetector | MS ] Username similar to website in answer (63): What was the flower of Empress Taytu? by catch foundation on history.SE

metasmoke

tpu- feedback received on [MS] TV Shows for Web Master and Design Firms

Makyen

!!/watch- megawebdesign\.in

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 2131654 (SmokeDetector: Auto watch of megawebdesign\.in by Makyen) (running on teward/Osiris)

[ SmokeDetector | MS ] Potentially bad keyword in body (1): How to interect with API? by proton on stackoverflow.com

SmokeDetector

10:41 AM

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Preventing referenced assembly PDB and XML files copied to output by Vasanth8891 on stackoverflow.com

metasmoke

fp feedback received on [MS] The script is displayed in the browser as text, not html

SmokeDetector

[ SmokeDetector | MS ] Link at end of answer, potentially problematic ns configuration in answer (62): Gnome Application themes not changing by mbastudent on askubuntu.com

[ SmokeDetector | MS ] Blacklisted username (90): Why does [Ni(gly)2] show optical isomerism despite having no chiral carbon? by Satyajay Mandal on chemistry.SE

Transcript for