« first day (2532 days earlier)      last day (37 days later) » 

!!/watch watermarkremover\.com
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Cut out the start and end of a .mp4 file by Katie Root on superuser.com
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): GSheets copying a row in one sheet to another sheet, which contains the same row by MephobiaYT on stackoverflow.com
 
naa- feedback received
 
12:10 AM
@RyanM yeah, it's a good example for sure. For a first offense I'm inclined to say "no, it doesn't appear to have been posted in bad faith"
 
!!/watch printonlinestore\.com
 
fp feedback received on [MS] Speed optimization shopify store
fp feedback received on [MS] How to add cookie consent div on top
fp feedback received
 
12:17 AM
!!/watch forsage[\W_]*+clone
 
[ SmokeDetector | MS ] Link at beginning of answer (33): Do we need all font-family files to make a font work? by Justin Penner on stackoverflow.com
 
!!/watch crypto\s++broker
 
12:28 AM
[ SmokeDetector ] Blacklists reloaded at rev 87051d6 (SmokeDetector: Auto watch of crypto\s++broker by Ryan M) (running on teward/Osiris)
 
!!/watch pcexmember\.in
 
!!/watch trusted (\w++\W++){0,3}trading platform
 
12:38 AM
[ SmokeDetector | MS ] Few unique characters in answer (87): When does Son Goku learn to fly? by Hackergayboissefattybumfufugar on anime.SE
 
tpu- feedback received
 
[ SmokeDetector | MS ] Link at end of answer (61): Laravel Error: Call to undefined method App\Cart::delete() by Илья Ларин on stackoverflow.com
[ SmokeDetector | MS ] Repeating characters in title (65): The Bootscraasddddddddddddddddddddddddddd by evabb on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Does mercury react with polycarbonate? by loudaslife on chemistry.SE
 
fp- feedback received
 
I assume that's a network-banned troll or something? Or just overly sarcastic/bad faith?
 
Makyen/EC2-num02: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev 342a3ba (Makyen: This is the MS instance, so needs to post feedback) (running on Makyen/EC2-num02, Python 3.6.12)
 
@RyanM Network troll, see stackoverflow.com/c/charcoal/a/613/60 (requires Teams access)
 
@RyanM That pattern is going to be relatively expensive. While I can understand the desire to include the three words prior to "trading platform" in the why data, unless you have a specific reason, it's not worth the CPU cost.
 
1:28 AM
[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): How to clean Lightboard after recording marked with Neon markers by Chuck81 on video.SE
 
@Makyen Shot in the dark, but did you perhaps miss the "trusted" at the start?
@gparyani Oh, that person. Didn't recognize 'em.
 
@RyanM Yes, yes I did. I'm not sure how I mentally completely blocked that word out each time I looked at it. :;
@RyanM Thanks for catching my error.
 
No problem :-) I think I'm one of the few that makes frequent use of actual spaces in watches
 
@RyanM So, you're making space for spaces. Do you feel we don't leave enough space in our regexes? :)
 
:-) just trying to put some space between us and the spammers
 
1:40 AM
Socially distancing ourselves from the spammers?
 
!!/watch shikshaniti\.com
 
1:52 AM
!!/watch echocommunicator\.com
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Como hacer Widgets flotantes en monodevelop y gtk by Ronny Fretel on es.stackoverflow.com
[ SmokeDetector | MS ] Link at end of answer, potentially bad keyword in answer (62): A lecturer is hard to understand, what to do? by Charly Wiliamse on academia.SE
 
@metasmoke pains me to FP that one, but it was technically repairable
 
FYI: I've locked the regex package version in requirements.txt to be <2020.10.22. Today's version prevents any explicitly compiled pattern from being placed in the compiled regex cache (i.e. only implicitly compiled patterns are cached). Using 2020.10.22 will have some performance impact, but what that impact will be is unclear. A quick grep through SD's code indicates we tend to explicitly compile patterns, even in cases where an implicit compile could be easily used.
For a bit more information, please see: Issue #387 in the regex repository on bitbucket.org.
 
!!/watch writeulearn\.com
 
^ lot of spam on that domain still on the network if anyone wants a rabbit hole full of flags. Every post on MS is spam, and so are at least a few unreported ones.
 
!!/report security.stackexchange.com/a/142332 "Undisclosed affiliation: domain has a history of spam, posted same day as the article"
 
!!/report stackoverflow.com/a/46571836 "Undisclosed affiliation: domain has a history of spam, posted same day as the article"
 
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): What are the available options when developing a decoupled, high scalable web application with server pushed events? by Bindu S on stackoverflow.com
 
!!/report stackoverflow.com/a/47271044 "Undisclosed affiliation: domain has a history of spam, posted same day as the article"
 
2:21 AM
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer, blacklisted user (73): Jetty: HTTP ERROR: 503/ Service Unavailable ✏️ by Bindu S on stackoverflow.com
 
!!/report stackoverflow.com/a/44005351 "Undisclosed affiliation: domain has a history of spam, posted same day as the article"
 
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): Verify that given list of nodes of a graph is a correct topological order by bhupesh on stackoverflow.com
 
!!/report stackoverflow.com/a/49413742 "Undisclosed affiliation: domain has a history of spam, posted same day as the article"
 
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer, blacklisted user (73): xSpanner: how leader sync data to replicas? by Bindu S on stackoverflow.com
 
!!/report stackoverflow.com/a/56481672 "Poster has the same display name (Bhupesh) as other accounts spamming this domain. This one was not posted the same day as the linked article"
 
2:27 AM
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): How to dockerized java microservices efficiently by BHupesh on stackoverflow.com
 
!!/report stackoverflow.com/a/56778902 "Poster has the same display name (Bhupesh) as other accounts spamming this domain and has posted another link to this site. This one was not posted the same day as the linked article."
 
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer, blacklisted user (73): Variant of burst balloon ✏️ by BHupesh on stackoverflow.com
 
!!/report dba.stackexchange.com/a/202646 "Undisclosed affiliation: domain has a history of spam, posted same day as the article"
 
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): Do I add read committed after SET TRANSACTION ISOLATION LEVEL SERIALIZABLE? by cccc on dba.SE
 
!!/report codereview.stackexchange.com/a/223010 "Poster has a typo'd version of the same display name (Bhupesh) as other accounts spamming this domain. This one was not posted the same day as the linked article."
 
2:40 AM
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): Cut Off Trees for Golf Event LeetCode challenge by Bhuprsh on codereview.SE
 
!!/report stackoverflow.com/a/40918150 stackoverflow.com/a/40895547 "Undisclosed affiliation: Poster has the same display name (Bhupesh) as other accounts spamming this domain and has posted 2 other links to this site, domain has a history of spam, posted same day as the article"
 
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): How should the C++ standard be used by bhupesh on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): What SQL coding standard do you follow? ✏️ by bhupesh on stackoverflow.com
 
!!/report unix.stackexchange.com/a/360226 "Poster has the same display name (Bhupesh) as other accounts spamming this domain. This one was not posted the same day as the linked article"
 
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): I am trying to fetch the logs for last five minutes through a script ✏️ by bhupesh on unix.SE (@Pandya)
 
Excellent. Down from 20 network-wide to 5 remaining, and I've got flags out for all 5.
I think the moderators managed to obliterate a few before I managed to report them.
So uh, that domain could probably be blacklisted...given that every single one of the 20 hits on the network was spam...
@RyanM or...actually SE search just can't count. That's definitely 15, not 20.
 
@SmokeDetector fp- that blacklisting is questionable, looks like a site where spammers are creating profiles... it's the only FP so far though
 
3:14 AM
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How to properly setup OpenSSL for Qt on Windows 10? by Lucas Izumi on stackoverflow.com
 
@SmokeDetector I just realized that manually reported post is now telling the real reasons instead of "manually reported"
 
[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +4 more (687): BioGrowth BioGrowth Male Enhancement Male Enhancement by LoffiSnop on superuser.com
 
@AndrewT. It does that if the post would be caught if it were scanned today. In this case, it's since acquired a potentially bad NS configuration, and I watched the domain after seeing the first three.
 
tpu- feedback received
 
Makyen/EC2-linux: Executing automatic scheduled reboot.
[ SmokeDetector | MS ] Link at end of answer (61): Can i Change Paypal Business Account URL by GIẢI PHÁP CÔNG NGHỆ MYNET on stackoverflow.com
 
3:51 AM
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Laravel 8: Does not receive mail but mail logic returns no error by Efat Hasan on stackoverflow.com
[ SmokeDetector | MS ] Potentially problematic ns configuration in answer (1): Content wider than screen ✏️ by Mipcctv inc on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, username similar to website in answer (64): Content wider than screen by Seindo Travel on stackoverflow.com
 
!!/watch seindotravel\.com
 
fp- feedback received
 
4:06 AM
tpu- feedback received
 
[ SmokeDetector | MS ] Link at beginning of answer, potentially bad ns for domain in answer (34): Who are the best and most trusted immigration consultants for Canada in Delhi, India? by karthi keyan on stackoverflow.com
 
tpu- feedback received
 
!!/watch novusimmigrationdelhi\.com
 
!!/watch trusted (\w++\W++){0,3}consultants
 
tpu- feedback received
 
[ SmokeDetector | MS ] Blacklisted user (71): Continuity and Differentiability by reeiieducation on mathoverflow.net
[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +4 more (687): Ultra Keto White 4 Dummies Review Can Sometimes Tell by mrselljhon on meta.SE
 
tpu- feedback received
 
4:29 AM
teward/Osiris: Executing automatic scheduled reboot.
 
naa feedback received on [MS] How to create sprite
 
[ SmokeDetector ] SmokeDetector started at rev 682fef9 (SmokeDetector: Auto watch of trusted (\w++\W++){0,3}consultants by Ryan M) (running on teward/Osiris, Python 3.6.9)
Restart: API quota is 19868.
[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): Protocols in youtube video streaming by Saranya on stackoverflow.com
 
fp- feedback received
 
!!/watch jtgsystemswebdesign(?#facebook.com)
 
4:32 AM
!!/watch JTG[\W_]*+Systems
 
!!/bisect we provide implementation for Service
 
@RyanM Matched by we\W*+provides?\W*+(?:\w*+(?:\W|\r|\n)*+){0,6}services? on line 21415 of watched_keywords.txt
 
4:33 AM
tpu- feedback received on [MS] Continuity and Differentiability
 
@tripleee based on the username and history it's not so much plagiarism as posting their own content...surprised it lacks a link, though.
 
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): UPDATING EMISSION MATRIX IN BAUM-WELCH ALGORITHM by PatrickBeuseize on math.SE
 
@RyanM yeah, I was thinking the same thing
 
fp- feedback received
fp feedback received on [MS] Adding Tags to a Pull Request
 
I keep seeing posts in review that are caught by things I've unwatched...not sure if I'm forgetting to FP them or if they just caught more posts/edits
 
4:37 AM
@RyanM In hindsight, there's a ?: right before the \w, should there be another one?
 
It appears to be working.
@RyanM Possibly old review items?
If they're caught before you unwatch it.
 
@Mast well, generally I unwatched it when I saw the post, so it should have been reviewed by me...
@Mast before "hindi"
in this case, I seem to have forgotten to FP it. Or FIRE is playing tricks on me, but probably I forgot.
 
@RyanM best[\W_]*+(?:hindi|bollywood)[\W_]*+(?:\w{1,12}[\W_]*+)?movies? provides identical results.
Making the entire hindi|bollywood optional results in FP.
It won't hurt making the net a little wider, but that may be too wide. although it's not that bad.
 
4:44 AM
@Mast Allow me to refer you to Makyen's various posts on the matter: chat.stackexchange.com/transcript/message/54682920
 
Or is the confusion over what exactly ?: does? It's actually unrelated to it being optional, it's just a performance optimization since we don't use backreferences.
 
Searching everything but usernames since there are no matched usernames and the link would be too bloody long for chat otherwise.
Ah.
@RyanM Well, I tend to use it in combination with a ? behind the ?: group, so that might be it.
 
(Most references to using backreferences in Charcoal are probably me getting confused and calling look-behinds the wrong thing)
 
After reading Mak's thoughts about it, you're absolutely right.
!!/unwatch best[\W_]*+(hindi|bollywood)[\W_]*+(?:\w{1,12}[\W_]*+)?movies?
 
!!/watch best[\W_]*+(?:hindi|bollywood)[\W_]*+(?:\w{1,12}[\W_]*+)?movies?
Thanks @Ryan
 
np! happy to help
 
also, we should really make a page of all Makyen's random regex advice...
 
Absolutely.
There's a lot of very valuable advice scattered through the logs.
 
4:50 AM
also, speaking of things scattered in the logs, you might like this
speeds up watchlisting considerably
 
[ SmokeDetector | MS ] Bad pattern in url body, potentially bad ip for hostname in body, potentially bad ns for domain in body (92): Wacaco Nanopresso Review 2020_ Pros, Cons, & Verdict by Muhammad Umair on outdoors.SE
 
tpu- feedback received
 
!!/watch coffee-channel\.com
 
[ SmokeDetector | MS ] Manually reported answer (94): How to Try Catch in symfony by Divya soni on stackoverflow.com
 
[removing visible spam text from chat]
 
@Yatin ^ spam or something, really unclear
 
It is describing a girl's beauty
 
wat
 
5:02 AM
with "gallbladder stone surgery" for some reason
:)
 
How does that saying go...beauty is in the eye of the gallbladder stone surgeon?
 
XD
 
tpu- feedback received
 
!!/watch smallespresso\.com
 
[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +4 more (592): Keto Premiere [Weight Loss Pills] Review, Ingredients, Side Effects And Cost by keto9moon on askubuntu.com
 
5:07 AM
tpu- feedback received
 
also not sure what "black til" refers to, apparently sesame seeds are called that in India?
 
Me: "I wonder if 'brought to you by' is spammy."
SO: "brought to you by the works on my machine certification program"
 
[ SmokeDetector | MS ] Bad keyword in link text in answer, potentially bad keyword in answer (82): Repairing an MDF file ✏️ by user347799 on stackoverflow.com
 
@RyanM a lot of that is probably vaguely humorous / paraphrasing advertising from the 1950s
 
@tripleee black til means mole in english
 
5:10 AM
@SmokeDetector errrrr, what the heck is going on there... a 25k user just did an attempt-to-reply edit to add a link to a domain with sketchy history
 
@Yatin that was my suspicion, but googling does not seem to bear that out
 
@tripleee also sesame seeds... Hindi is weird :)
 
I'm also confused because neither hand is in the photo
 
I didn't see the photo actually the link seemed broken...
 
5:11 AM
I found a single page which exhibits this use but then I guess that counts as confirmation womenpla.net/how-to-get-rid-of-black-til-from-face
 
fp- feedback received
 
perhaps that's another example of weird Indian English
 
Indian here. Can confirm :)
 
@Yatin yeah, I had to fix it: http://i.stack.imgur.com/QvVMW.png
 
guessing the whole thing was machine translated, that would perhaps somehow explain the gall stone surgery
 
5:15 AM
Yeah, these are nonsense advertisements that I keep seeing on youtube too... Indian scammers aren't the smartest of people and they believe beautiful girls get clicks (which I am afraid is true) so without context, any spammy ad will have a cute girl in it
So the equation is: 1. put a list of products/services. 2. grab a cute Indian girl pic from online 3. mix them together and ask the user to click on the link that you want them to click on
the only exception here is there was no such link... which i will attribute to them not being that good at their game
 
Apparently Facebook used to allow explicit ad targeting by gender preference: marketingland.com/…
 
Also, I wanted to ask a question, is smokey good at detecting spam in other languages? I found 2-3 answers that were in different languages and translating them revealed that they were spam... I reported them on SOCVR
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Laravel 8: Does not receive mail but mail logic returns no error by Efat Hasan on stackoverflow.com
 
we adapt to whatever we see, there are some regexes e.g. for Indonesian gambling and German sex dolls but in the general sense no
Smoke Detector is very good at detecting spam of kinds we have seen before with enough keywords that are domain specific
 
@Yatin It's not as good, since we all speak English but only a scattering of other languages...so our ability to write complex regexes is somewhat impaired and there's more guesswork.
 
5:20 AM
but new kinds of spam and vague advertising like "check out my blog" is hard to do
Chinese high school diplomas, check. Korean ... loans I think it was? Check.
but novel combinations like Korean diet pills, probably not a chance
except to the extent that they use generic spam tricks like link obfuscation or etc
 
Cool I think I can help out with Indian spammers (absolutely hate them. They ruin the reputation of Indian programmers)
 
Your input is definitely welcome! Have you had a look at the introduction to participating in Charcoal?
in particular, you may be interested in getting privileges
 
Yep, I still need to... I have planned that for tomorrow and the day after tomorrow (weekend)
 
if you need access to Blazer that's probably more convenient than the rather crude query facilities in metasmoke itself, it's unfortunate that it's behind rather steep privileges but if it helps you help us I don't think that will be a problem
 
speaking of Blazer, "make a search diffing function" is on my vague to-do list...it's awkward, though, because Blazer doesn't seem to be capable of escaping input...like regex.
 
5:26 AM
I don't know what Blazer is right now... But I will try to learn more about it... As of now, I am completely new to everything going on here...
^ Planning to change that this weekend :)
 
(dog needs to go out, will respond to pings in 1h or so)
 
I don't think Blazer is particularly well-documented in the public stuff, but also I rarely have to use it
 
oh
 
The only time I've used it to write regexes was a particularly ...vexing group of spammers that seemed to have quite a lot of phone numbers, and I needed to extract the phone numbers to find out what they had in common.
 
@Yatin if you've ever used SEDE, Blazer's the same thing but for spam -- just a SQL query interface to metasmoke, our spam database
 
5:29 AM
The one thing I feel that I'm lacking with the normal metasmoke query facilities is comparing results between regexes
 
@NobodyNada ohk got it
 
Can metasmoke be run locally for development off of the public MS dumps?
 
Yes.
 
@Yatin but yes, feel free to ask questions. hopefully they won't be buried in too much spam. Charcoal's data suggest that spammers seem to take the weekend off, so you should be good there :-)
 
[ SmokeDetector | MS ] No whitespace in answer (96): Algorithms for Unitary Representations of Finite Groups by ghj on math.SE
 
5:42 AM
tpu- feedback received
 
TIL : "spammers take the weekend off" :D
This user is asking people to check their project on unrelated questions
 
@Yatin they're also affected by pandemics
 
[ SmokeDetector | MS ] Bad keyword in body, bad pattern in url body, blacklisted website in body, pattern-matching product name in body, pattern-matching website in body, +3 more (580): Optimizes your recovery time post workout by rosa morse on astronomy.SE
 
@RyanM that is actually really interesting :)
 
@RyanM the heck happened in summer 2018?
 
5:45 AM
tpu- feedback received
 
that graph is one example of what Blazer can do
...when combined with SQL advice from Stack Overflow.
@NobodyNada that...is a good question. I have no idea. Did SpamRam improve?
 
6:05 AM
[ SmokeDetector | MS ] Toxic answer detected (80): Memory leak Valgrind doesn't report but code using so much memory by cabrillosa on stackoverflow.com
 
fp- feedback received
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad ns for domain in body (2): Dynamic id is getting added in sforce.one.navigateToURL("/home/home.jsp", true); by Jagdish Nikam on salesforce.SE
 
fp- feedback received
 
[ SmokeDetector | MS ] Url-only title, bad ip for hostname in body, bad keyword in body, blacklisted website in body, link at beginning of body, +2 more (438): sites.google.com/site/oneshotketoca/ by Jackieschumm18 on askubuntu.com
 
tpu- feedback received
 
6:11 AM
[ SmokeDetector | MS ] Link at beginning of answer (33): Suspend not working in Ubuntu 20.04 by Johan Palych on askubuntu.com
 
naa- feedback received
 
@SmokeDetector huh, it's "KIk" that triggers it
 
@NobodyNada I was really wondering.
that's...surprising, since that's the name of a relatively popular app...
 
Urban Dictionary doesn't seem to have anything offensive for it
 
Try adding an "e" on the end
I assume it's learned from racists who are too angry to spell their slurs properly...slurring the slurs, if you will.
 
6:23 AM
[ SmokeDetector | MS ] Potentially bad keyword in body (1): How to thread functions in a class shared with a GUI? by hereticsanarchy on stackoverflow.com
[ SmokeDetector | MS ] Link at end of answer (61): Make a curve using HTML and CSS by Fahim Mohip on stackoverflow.com
 
fp- feedback received
fp- feedback received
 
@RyanM ohhh...makes sense
 
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Compiling and building Linux packages for multiple distributions / platforms by rakesh mahadik on serverfault.com
 
tpu- feedback received
 
[ SmokeDetector | MS ] Shortened url in body (44): I can't see the themes correctly (Neovim) by Jorge Montejo on stackoverflow.com
 
@SmokeDetector fp- that's not a shortened URL
cc @Makyen re: github.com/Charcoal-SE/SmokeDetector/commit/… ^ ibb.co is an image host, not a URL shortener
 
@RyanM that would be my first speculation as well
!!/watch sepioproducts\.com
 
6:53 AM
 
!!/test-a oneshotketoau
 
> Would not be caught as an answer.
 
!!/test-a one shot keto au
 
> Bad keyword in answer, potentially bad keyword in answer
----------
Bad keyword in answer - Position 9-13: keto
Potentially bad keyword in answer - Position 0-13: one shot keto
 
!!/unwatch one shot keto
 

« first day (2532 days earlier)      last day (37 days later) »