« first day (2391 days earlier)      last day (1432 days later) » 

12:01 AM
fp- feedback received
 
!!/approve 3901
 
@SmokeDetector fpu-
 
12:26 AM
[ SmokeDetector | MS ] Bad keyword with email in answer, potentially bad keyword in answer (86): Could modded versions of Kik messenger pose a security threat to other Kik users? by Isabella on security.SE
 
@SmokeDetector k
 
!!/watch- reliable[\W_]*+hacker
 
1:04 AM
[ SmokeDetector | MS ] Bad keyword with email in body (57): Get permission error when restarting Virtual Machine in Azure by Freddie Acevedo on serverfault.com
fp- feedback received
[ SmokeDetector | MS ] Pattern-matching website in body (97): Site got slow + PageSpeed Insights lighthouse error by Dane Urcue on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): What is the meaning of "therefore all died" in 2 Corinthians 5:14? by user36235 on hermeneutics.SE
 
1:20 AM
!!/watch-force cyber(?:\..+)?@gmail.com
 
@user12986714 The regex contains an unescaped "."; in most cases, it should be "\."; append -force if you really want to do that.
 
@SmokeDetector yes, the second dot is intended to be unescaped
 
PR#3902 ("user12986714: Watch cyber(?:\..+)?@gmail.com") opened by SmokeDetector
@user12986714 You don't have blacklist manager privileges, but I've created PR#3902 for you.
[ SmokeDetector | MS ] Bad keyword in answer, blacklisted website in answer, potentially bad ip for hostname in answer (180): Download from FTP server to client computer by Aidan Romero on stackoverflow.com
 
@SmokeDetector Side note: (aaa.bbb@gmail.com) is an extension of (aaa@gmail.com) and hence would be controlled by the same google account, and the same person therefore
Therefore just blacklist the entire cyber@gmail.com and all its extensions.
 
[ SmokeDetector | MS ] Bad keyword in answer, blacklisted website in answer, potentially bad ip for hostname in answer (180): FTP Hostname and Username combied "|" (IIS windows server 2012 r2) by Aaron Terry on serverfault.com
 
1:49 AM
tpu- feedback received
 
@user12986714 That's not what I recall. IIRC, Gmail email address extensions can be done with +, but not a .. My understanding is that username portions which contained a . are separate and distinct addresses.
 
API quota rolled over with 5622 requests remaining. Current quota: 19999.
math: 176
stackoverflow: 99
physics: 38
superuser: 33
askubuntu: 30
unix: 26
electronics: 20
serverfault: 15
hermeneutics: 12
philosophy: 11
meta: 11
english: 11
mathematica: 9
apple: 9
drupal: 9
latin: 9
salesforce: 8
es.stackoverflow: 8
gaming: 8
wordpress: 7
diy: 7
ell: 7
datascience: 7
rpg: 7
mathoverflow.net: 6
android: 6
dba: 5
stats: 5
ai: 5
sharepoint: 5
ja.stackoverflow: 5
aviation: 5
dsp: 4
scicomp: 4
judaism: 4
webapps: 4
hardwarerecs: 4
space: 4
worldbuilding: 4
music: 4
academia: 4
 
@user12986714 Overall, this is too unconstrained. The .+ needs to be more limited. Perhaps just accepting a single separate set of characters common in email addresses (common characters, but not all-inclusive). If it is constructed with just ., then there needs to be a length limitation.
 
2:09 AM
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): ODA File Converter don't work on latest Ubuntu 20.04 by Duster on askubuntu.com
 
2:22 AM
[ SmokeDetector | MS ] Pattern-matching website in answer, potentially bad ns for domain in answer (79): What is Google Search Console's complaint about CLS (cumulative layout shift)? by shoaib Nawaz on webmasters.SE
 
@Makyen Yes, you are right. However it is true that (aaa.bbb) is the same as (aaabbb).
!!/watch c\.?y\.?b\.?e\.?r\.?l\.?o\.?r\.?d(\.?[\d.]+)?@gmail\.com
 
PR#3903 ("user12986714: Watch c\.?y\.?b\.?e\.?r\.?l\.?o\.?r\.?d(\.?[\d.]+)?@gmail\.com") opened by SmokeDetector
@user12986714 You don't have blacklist manager privileges, but I've created PR#3903 for you.
 
2:39 AM
[ SmokeDetector | MS ] Potentially bad keyword in answer, shortened url in answer (57): Converting .zip to .mcworld on iOS by Helper on gaming.SE
fp feedback received
 
@SmokeDetector The intention of spamming is apparent as the author edited in nothing but the spam link.
 
tpu- feedback received
 
!!/watch (?:if you cannot give a tested answer, please shut up\. A monkey is more a monkey the more he pretend he is not a monkey){e<5}
 
PR#3904 ("user12986714: Watch (?:if you cannot give a tested answer, please shut up\. A monkey is more a monkey the more he pretend he is not a monkey){e<5}") opened by SmokeDetector
@user12986714 You don't have blacklist manager privileges, but I've created PR#3904 for you.
 
@SmokeDetector MS does not appear to support fuzzy regex...
 
2:46 AM
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How to decrypt a MD5 hash by dust2017 on stackoverflow.com
 
@user12986714 Are there really indications that something close enough will be reused?
 
fp feedback received
 
@Makyen that user simply posts identical posts.
 
@user12986714 They are not identical, and I don't think they are close enough to be within a fuzzy match. I'm not sure what the performance impact is of using a fuzzy match of that size, so I'm not sure if it's a reasonable trade-off.
@user12986714 Well, if we're going to go for that, which I don't really think is really needed at the moment, then I'd prefer to use the full obfuscation of c[\W_]*+y[\W_]*+b[\W_]*+e[\W_]*+r[\W_]*+l[\W_]*+o[\W_]*+r[\W_]*+d(?:[\W_]*+\d)*(?:[\W_]*+(?:a[\W_]*+t[\W_]*+)?g[\W_]*+m[\W_]*+a[\W_]*+i[\W_]*+l(?:[\W_]*+(?:d[\W_]*+o[\W_]*+t[\W_]*+)?c[\W_]*+o[\W_]*+m)?)?
However, so far, it hasn't appeared that the full version is needed to catch the examples we have (and full obfuscation isn't all that likely). It looks like we'd cover everything we've seen with cyber[\W_]*+lord\d*(?:[\W_]*+(?:at[\W_]*+)?gmail(?:[\W_]*+(?:dot[\W_]*+)?com)?)?
 
@Makyen Given that the user is quite creative in posting offensive posts, I would say no, but I will try to use another regex.
 
2:56 AM
@user12986714 Try looking for sub-portions which they tend to keep consistent.
 
!!/watch if you (?:cannot|can't|cant)[\w ]+,[\w ]+shut up
 
PR#3905 ("user12986714: Watch if you (?:cannot|can't|cant)[\w ]+,[\w ]shut up") opened by SmokeDetector
@user12986714 You don't have blacklist manager privileges, but I've created PR#3905 for you.
PR#3906 ("user12986714: Watch if you (?:cannot|can't|cant)[\w ]+,[\w ]+shut up") opened by SmokeDetector
@user12986714 You don't have blacklist manager privileges, but I've created PR#3906 for you.
 
@SmokeDetector err please close that. missed a +
 
@user12986714 That's too broad. You're allowing the [\w ]+ portions to be unlimited.
 
@Makyen however [\w ]+ doesn't contain punctuations.
so it is basically if you can't... , ... shut up
 
3:07 AM
@user12986714 Yes, it's not tooo bad, but does allow for an unlimited number of words or characters, which tends to result in problems on certain types of input text. It's probably not going to be all that bad, except in some relatively rare circumstances, but those do happen and have caused SD to go off-line and/or fail to scan posts. This is a relatively limited troll, who's created 2 posts so far, and the example texts don't come close to needing unlimited words/characters there.
 
@Makyen The concern is that for the second post, the only reason it was caught is due to user blacklist. Therefore in the near future after the user's account is deleted, and he/she creates a new one, we cannot catch posts like that.
 
@user12986714 I'm not arguing that there shouldn't be something, just the limits of what we use.
 
@Makyen Do you think the user will be creative enough to bypass (?: ?\w+ ?){,10},(?: ?\w+ ?){,10}?
or 20
'Cause Google perspective is not catching such posts, and we need some ways to stop that
 
@user12986714 I'd rather see limits on the total number of characters in any group and the use of possessive quantifiers where it's followed by a character which isn't in the set.
@user12986714 I haven't disagreed that it would be good to have something, just the something which is to be used.
@user12986714 BTW: (?:cannot|can't|cant) can be simplified to (?:cannot|can'?t) or can(?:not|'?t), although can(?:\s*+not|'?t) is probably better.
afk
 
3:30 AM
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): What is an afterburner and how long can a jet fly on afterburner? by Bill on aviation.SE
 
!!/watch if *+you? *+\w+ *+(?:not|n'?t) *+(?:\w++ *+){,20}+, *+(?:\w++ *+){,20}?shut *+up
 
PR#3907 ("user12986714: Watch if *+you? *+\w++ *+(?:not|n'?t) *+(?:\w++ *+){,20}+, *+(?:\w++ *+){,20}?shut *+up") opened by SmokeDetector
@user12986714 You don't have blacklist manager privileges, but I've created PR#3907 for you.
PR#3908 ("user12986714: Watch if *+you? *+\w+ *+(?:not|n'?t) *+(?:\w++ *+){,20}+, *+(?:\w++ *+){,20}?shut *+up") opened by SmokeDetector
 
@SmokeDetector One additional + messed everything up
 
@user12986714 You don't have blacklist manager privileges, but I've created PR#3908 for you.
[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): .play() function not working on safari browser with audio tag by Haseeb Ahad on stackoverflow.com
fp feedback received
 
@SmokeDetector the second part is lazy, as the user currently uses only please or just, and is far less than 20 words
Why 0 tp though?
 
3:53 AM
Waffles™
 
[ SmokeDetector | MS ] Username similar to website in answer (62): Upload a video file as blob to AWS S3 using JavaScript or Angular CLI ✏️ by BetterTalents on stackoverflow.com
tpu- feedback received
 
!!/watch better-talents\.com
 
PR#3909 ("user12986714: Watch better-talents\.com") opened by SmokeDetector
@user12986714 You don't have blacklist manager privileges, but I've created PR#3909 for you.
 
@user12986714 You can use a regex tester to get a close approximation of what your regex will do. Personally, regex101.com is the one I usually use.
!!/approve 3909
 
4:09 AM
@Makyen appears that {,20} != {0,20}... Strange.
BTW please close 3908, 3909
 
[ SmokeDetector | MS ] Link at end of answer, potentially bad ip for hostname in answer, username similar to website in answer (123): htaccess - The custom 404 error page is not working properly by Mystudyguru on stackoverflow.com
tpu- feedback received
 
!!/watch- mystudyguru\.in
@user12986714 Done.
 
@user12986714 Actually, MS used to error-out when the lower limit wasn't provided (it used to have a different regular expression engine). Some Regular expression implementations require that the lower limit exists, some assume 0 if it's not provided. In general, it's better to be in the habit of providing it in order to have better cross regex-engine compatibility. It only costs a single character per quantifier, which usually doesn't matter all that much.
 
[ SmokeDetector | MS ] Bad keyword in body (96): how to make select multiple selected, in form edit by Arif Rusman on stackoverflow.com
fp- feedback received
Makyen/Windows: Executing automatic scheduled reboot.
 
4:21 AM
!!/watch if\W*+you?\W*+\w+\W*+(?:not|n'?t)\W*+(?:\w++[^\w,]*+){0,20}+,\W*+(?:\w++\W*+){0,20}?shut\W*+up
 
PR#3910 ("user12986714: Watch if\W*+you?\W*+\w+\W*+(?:not|n'?t)\W*+(?:\w++[^\w,]*+){0,20}+,\W*+(?:\w++\W*+){0,20}?shut\W*+up") opened by SmokeDetector
@user12986714 You don't have blacklist manager privileges, but I've created PR#3910 for you.
[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): How to make links when users click on them then unlocks otherwise it gets disabled by Phantomroshan on stackoverflow.com
tpu- feedback received
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer (1): What is the kind of this wasp killing spider from UK? by FINALDESK DESK on biology.SE
 
!!/watch gabratech\.com
 
PR#3911 ("user12986714: Watch gabratech\.com") opened by SmokeDetector
@user12986714 You don't have blacklist manager privileges, but I've created PR#3911 for you.
tpu- feedback received
 
@SmokeDetector Obviously plagiarized by copy-paste -ing
!!/watch finaldesk\.co\.in
 
PR#3912 ("user12986714: Watch finaldesk\.co\.in") opened by SmokeDetector
@user12986714 You don't have blacklist manager privileges, but I've created PR#3912 for you.
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Advertising Agencies In Austin TX by Centerpost Media on stackoverflow.com
tpu- feedback received
 
4:36 AM
!!/approve 3912
 
!!/watch cenpostmedia\.com
 
@user12986714 The regex contains an unescaped "."; in most cases, it should be "\."; append -force if you really want to do that.
 
!!/watch- centerpost[\W_]*+media
 
@user12986714 That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.
 
4:38 AM
!!/bisect cenpostmedia.com
 
@user12986714 Matched by cenpostmedia\.com on line 19736 of watched_keywords.txt
 
!!/bisect a></p><p>If <span class="math-container">$L$</span> is greater than <span class="math-container">$K$</span> do we buy
 
@user12986714 'a></p><p>If <span class="math-container">$L$</span> is greater than <span class="math-container">$K$</span> do we buy' is not caught by a blacklist or watchlist item.
 
@SmokeDetector why
 
@user12986714 Potentially bad keyword in body - Position 533-652: a></p><p>If <span class="math-container">$L$</span> is greater than <span class="math-container">$K$</span> do we buy
 
4:39 AM
Emm...
 
@user12986714 That will usually mean there are other requirements which the test you are testing does not meet.
 
@Makyen s/test you are/text you are/ sigh and a singular/plural issue...
 
[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, link following arrow in body, +3 more (786): T Volve Testosterone Booster: Leads to lasting stamina, endurance, immunity by user37584 on ai.SE
[ SmokeDetector | MS ] Pattern-matching website in body (97): removing ubuntu and re-installing windows 10 by DataLore on askubuntu.com
fp feedback received
 
!!/bisect infotech.com
 
4:50 AM
@user12986714 'infotech.com' is not caught by a blacklist or watchlist item.
 
@Chris Post 1: Already recently reported [ MS ]
 
@SmokeDetector again. Also the domain is silentinfotech.com not infotech.com
 
@user12986714 What's your thinking in using you?\W*+\w+\W*+(?:not|n'?t) instead of just explicitly having "can"? The problem with that type of construct is that the backtracking can quite significant in the non-matching case, or even some matching cases, but it's usually easier to construct non-matching ones. For example, testing against this non-matching text or this matching shows the beginnings of problems (note number of steps).
 
4:59 AM
@Makyen it generally matches <some word> not, and I can hardly think of any other meaningful phrases than <modal verb> not, which is what we want to catch.
It is more aggressive than (cannot|can'?t), to counter the user's creativity
or <do|be> not
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Can I use only one phase out of a triphasic cable? by a deleted user on diy.SE
fp- feedback received
[ SmokeDetector ] Blacklists reloaded at rev 65b7968 (tripleee: ! Watch IP 107.180.40.27) (running on teward/Osiris)
 
!!/watch finaldesk\.co\.in
 
@tripleee That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.
 
!!/watch finaldesk(?!\.co\.in)
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Wire transfer from America by Dileepa Dharmasiri on travel.SE
tpu- feedback received
 
5:11 AM
@user12986714 Some examples we want to catch but can't be accomplished by (cannot|can'?t): could not, do not, would not
 
tpu- feedback received
 
!!/watch life30on\.blogspot\.com
 
@Glorfindel Maybe without tld?
 
5:12 AM
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Newton's shell theorem ✏️ by parshyaa on physics.SE
 
@Makyen as for number of steps, it is just one word. Maybe we can change it to \W*+\w{1,20}?\W*+ if someone is to attack SD
 
@user12986714 I was planning on using {0,30}, but yes.
 
!!/watch if\W*+you?\W*+\w{0,30}?\W*+(?:not|n'?t)\W*+(?:\w++[^\w,]*+){0,20}+,\W*+(?:\w++\W*+){0,20}?shut\W*+up
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Intersecting objects with a default object in JavaScript by Henri De Bel on stackoverflow.com
PR#3913 ("user12986714: Watch if\W*+you?\W*+\w{0,30}?\W*+(?:not|n'?t)\W*+(?:\w++[^\w,]*+){0,20}+,\W*+(?:\w++\W*+){0,20}?shut\W*+up") opened by SmokeDetector
@user12986714 You don't have blacklist manager privileges, but I've created PR#3913 for you.
tp feedback received
 
@user12986714 is that common practice nowadays here? Blog spammers tend to reuse the same domain (they think it's good for SEO).
 
5:21 AM
@SmokeDetector Undisclosed affiliation. However, since this is the first time, and the user has some legitimate posts, it doesn't appear to be intentional.
 
[ SmokeDetector | MS ] Offensive answer detected, potentially bad keyword in answer, toxic answer detected (159): Casting from mobile hotspot phone by user324735 on android.SE
 
@Glorfindel I am not sure, but other people do this
 
@Glorfindel In general, they do. The specific reason is for blogspot, which puts out considerable effort to make the sites created through it be available on almost any TLD.
 
tpu- feedback received
 
@user12986714 other people = only Makyen (at least from skimming the results) :)
@Makyen have we seen any evidence of users advertising the same website on .blogspot.com, .blogspot.co.uk, .blogspot.net etc.?
 
5:26 AM
@Glorfindel emm... Appears to be count vs user_count issue
@Glorfindel And the reason is at here
 
I could loop through the results here but perhaps the SQL explorer works better.
 
@Glorfindel I think we have, but not often. IIRC, it was @Zoe who requested it (I only had to be told 4 or so times prior to starting to remember to do so).
 
Hmm ... any idea why I get an error here: metasmoke.erwaysoftware.com/data/sql/queries/new
 
Yep, looks like I remembered correctly.
 
[ SmokeDetector | MS ] Bad keyword in answer, bad keyword in link text in answer, pattern-matching website in answer, blacklisted user (316): Is unmask-ing root ("-.mount") a unreasonable on Ubuntu 19.04 by elisa martin on askubuntu.com
 
5:31 AM
> Mysql2::Error: SELECT command denied to user 'metasmoke_blazer'@'localhost' for table 'p_domains': SELECT * FROM p_domains LIMIT 10 /*blazer,user_id:53,user_name:Glorfindel,run_id:aad05ff3-57e0-49e9-9
 
tpu- feedback received
 
@Glorfindel I'm not sure. I also see the same error for that line of SQL. Looking into it.
 
@Makyen sure, but since it has a downside (not readily being recognizable as a domain) and an upside whose usefulness is apparently not known ... (I mean if you don't know it, who does?)
 
[ SmokeDetector | MS ] Potentially bad keyword in title (1): Redirects & SEO by Aky on meta.SE
fp feedback received
 
!!/bisect SEO
 
5:34 AM
@user12986714 'SEO' is not caught by a blacklist or watchlist item.
iBug/Sandy: Executing automatic scheduled reboot.
 
We need to indicate whether the "potentially bad keyword" is due to a watch or some other checks...
 
@Glorfindel :) Well, someone might. :)
 
@user12986714 Well, that's usually not too hard to determine. If you !!/bisect and it doesn't catch it, but you !!/test and it does, then it's something that's not in watched_keywords.txt and is in findspam.py. That one is on line 1876, because it's not considered something to detect on Webmasters.
 
@Glorfindel I also get that error
and it seems that it only happens with p_domains
 
5:43 AM
teward/Osiris: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev 8017099 (SmokeDetector: Auto watch of life30on\.blogspot\.com by Glorfindel) (running on teward/Osiris, Python 3.6.9)
Restart: API quota is 18558.
[ SmokeDetector | MS ] Potentially bad keyword in title (1): Redirects & SEO ✏️ by Aky on meta.SE
fp- feedback received
fp- feedback received on Newton's shell theorem [MS]
[ SmokeDetector | MS ] Luncheon meat detected (40): sorting an array in specific format by Subhadeep on stackoverflow.com
[ SmokeDetector | MS ] Pattern-matching website in body, potentially bad ip for hostname in body (98): Shopify create customer blocked by captcha challenge by por cha on stackoverflow.com
 
@Glorfindel I see no table named p_domains in the schema, am I missing something?
 
fp feedback received
fp- feedback received on sorting an array in specific format [MS]
 
@Glorfindel There are at least the following:
fpga4student.blogspot
freeprogrammingguides.blogspot
healthsupplementsreviews.blogspot
indonesiakode.blogspot
ketoneforweightloss.blogspot
magentolib.blogspot
nelenkov.blogspot
onlineweblogsite.blogspot
rajiv-kuriakose.blogspot
selenium-venkat.blogspot
supplementplatforme.blogspot
techxperiment.blogspot
wolaris.blogspot
I did not do a complete search, so there may be more.
 
[ SmokeDetector | MS ] Username similar to website in answer (62): How to get position section and item from JSONArray? by Learn to Droid on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Cassandra SSL Issue by Abhishek Singh on stackoverflow.com
 
I used to do those but have observed that spammers generally use the same TLD even if it is technically possible to use a different one
 
5:57 AM
naa- feedback received
 
@tripleee I'd swear I copied it from there ... blame a lack of
!!/coffee
 
@Glorfindel brews a cup of Ristretto for @Glorfindel
 
thanks
@Makyen OK, I'll try to remember.
 
[ SmokeDetector ] Blacklists reloaded at rev 0da5b53 (tripleee: ! Watch IP 162.241.27.32) (running on teward/Osiris)
 
@Glorfindel np. As I said, @Zoe had to remind me 4 or 5 times prior to when I started to remember to do so. :) and I still forget from time to time.
From what I've seen, {subdomain}.blogspot is sufficiently unique such that not including the TLD will produce FPs, so I don't think there's going to be much harm in not including the TLD, and potentially some benefit.
 
6:07 AM
[ SmokeDetector | MS ] Pattern-matching website in answer, potentially bad ip for hostname in answer, potentially problematic ns configuration in answer, username similar to website in answer (142): SELECT command denied to user cannot connect to database by toplyrics sites on stackoverflow.com
[ SmokeDetector | MS ] Blacklisted user (71): Selected item as Current Item in c# by Developer M on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Turn LED OFF when load is disconnected ✏️ by AnsariTanveer on electronics.SE
[ SmokeDetector | MS ] Bad keyword in body, potentially bad keyword in body (97): Revolution Slider implement in React js by nunatej2 on stackoverflow.com
tpu- feedback received on Cassandra SSL Issue [MS]
fp- feedback received on Turn LED OFF when load is disconnected [MS]
fp- feedback received
fp feedback received on Selected item as Current Item in c# [MS]
 
@SmokeDetector Blog post is from today. That's almost always undisclosed affiliation, although I have not found a more direct connection.
 
6:22 AM
I was thinking the question should be closed as general computing anyway, but I didn't nominate it in SOCVR ... Any yeas or nays?
 
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Geometry is wrong for UV Mapping? ✏️ by MoneyBadger on blender.SE
 
@tripleee It feels like Server Fault/database management to me, but I'm not familiar with Casandra...
 
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): What is the fastest way to rdp from my ubuntu to my VPS running ubuntu? 20.04 by user1843495 on askubuntu.com
fp- feedback received on Geometry is wrong for UV Mapping? [MS]
fp- feedback received
[ SmokeDetector | MS ] Potentially bad keyword in title (1): Redirects & SEO by Aky on meta.SE
 
Zoe
6:39 AM
@Makyen Besides, if we have spammers watching Charcoal, they know they don't have a loophole on blogspot TLDs, and if they try with or without checking, we're still ahead of them. High payoff for a few less chars ^^ At least in the spirit of future compatibility :')
 
fp- feedback received
[ SmokeDetector | MS ] Url-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +10 more (1185): supplementdare.com/granite-male-enhancement/ by jesam on askubuntu.com
tpu- feedback received
 
!!/blacklist-keyword granite[\W_]*+(?:male|pills)
 
[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body (292): There are numerous methods of boosting by SeirdonFriet on askubuntu.com
tpu- feedback received
 
7:00 AM
!!/approve 3913
 
!!/watch-force- nutraxyn(?:[\W_]*+(?:usa|official|\d++|[\da-f]{4,}+))*
 
@Makyen That pattern looks like it's already caught by Bad keyword in answer and Bad keyword in body; append -force if you really want to do that.
 
!!/watch sexual[\W_]*+endurance
 
7:04 AM
!!/watch- cyber[\W_]*+lord\d*(?:[\W_]*+(?:at[\W_]*+)?gmail(?:[\W_]*+(?:dot[\W_]*+)?com)?)?
 
7:26 AM
[ SmokeDetector | MS ] Few unique characters in answer, offensive answer detected, potentially bad keyword in answer, toxic answer detected (246): sql joining three tables using inner joins by john on stackoverflow.com
tpu- feedback received
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): show progressbar in td of the table by Pablo Alejos on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad keyword in body, blacklisted user (73): Where Can China Refrigerator Manufacturer Use It by bailing on stackoverflow.com
tpu- feedback received
[ SmokeDetector | MS ] Mostly punctuation marks in body (28): Set column value of a view based on which table I'm selecting from by Redriel on stackoverflow.com
naa- feedback received on show progressbar in td of the table [MS]
fp- feedback received
 
7:49 AM
!!/blacklist-username (?-i:^bailing$)
 
[ SmokeDetector | MS ] Bad keyword with a link in answer, potentially bad keyword in answer (81): What can an app like WhatsApp acess on my phone by 1playergames66 on android.SE
@tripleee No such command 'blacklist-usename'.
tpu- feedback received
 
!!/blacklist-website apkxyz\.com
 
@tripleee That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.
[ SmokeDetector ] Blacklists reloaded at rev cf84d16 (SmokeDetector: Auto blacklist of apkxyz\.com by tripleee) (running on teward/Osiris)
[ SmokeDetector | MS ] Bad keyword with a link in answer, blacklisted website in answer, link at end of answer, blacklisted user (304): Xiaomi M8SE Fastboot loop when trying to install TWRP by 1playergames66 on android.SE
tpu- feedback received
 
!!/watch baixarsnaptube\.co
 
@tripleee That pattern looks like it's already caught by Blacklisted website in answer and Blacklisted website in body; append -force if you really want to do that.
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): RHEL 8 Deprecated Network Scripts by Victor on unix.SE
[ SmokeDetector ] Blacklists reloaded at rev 84fd700 (tripleee: ! Watch IP 172.67.141.213) (running on teward/Osiris)
tpu- feedback received
 
7:55 AM
!!/watch- mostfungames69(?#sites.google.com)
 
!!/watch- 1playergames66(?#sites.google.com)
 
[ SmokeDetector | MS ] No whitespace in title (67): dadasdqwaeqweqwewqwewqewewq ✏️ by maths123123 on math.SE
[ SmokeDetector | MS ] Potentially bad keyword in body (1): ldhksahjdasdasjdh;kahsdjkasjklsdjkhaldhjk;sa ✏️ by maths123123 on math.SE
tp- feedback received on dadasdqwaeqweqwewqwewqewewq [MS]
tp- feedback received
 
8:12 AM
[ SmokeDetector | MS ] Url-only title, bad ip for hostname in title, bad keyword in title, blacklisted website in title, pattern-matching product name in title, +1 more (498): slimketoboost.com/premiere-keto/ by guqmkophbdhp on askubuntu.com
tpu- feedback received
 
@Makyen also the user name actually
 
fp- feedback received
 
should we exclude Blender from some of these link rules? They routinely link to gifs or videos in questions because you often can't ask about animation issues without animation
 
@tripleee Yeah, I noticed that. I, generally, prefer not to focus on detecting usernames, unless they are quite unique, which this one its, and the user switches sites or accounts while keeping the same username. However, if they choose to use the same text for their username as they do for their product or site, that's just too bad (as long as it's not something which is likely to have FP from other people).
 
8:19 AM
@tripleee I haven't looked at how many FP they are getting specifically, but if they are generating lots of FP and almost no TP, then it might be reasonable to do so.
 
fp- feedback received
fp- feedback received
 
8:37 AM
[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): How I can solve C++ output negative numbers when using modulo? by Shan on stackoverflow.com
fp- feedback received
 
8:50 AM
[ SmokeDetector | MS ] Mostly punctuation marks in body (28): I doesn't get any error but the expected mesh isn't creating by filgas08 on stackoverflow.com
fp- feedback received
[ SmokeDetector | MS ] Potentially bad keyword in answer, blacklisted user (72): Looking for qt-at-spi for ubuntu 20.04 by Yacyn CHERRADI on askubuntu.com
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): HOW to create .json file with specific data? by Philip on stackoverflow.com
tpu- feedback received on Looking for qt-at-spi for ubuntu 20.04 [MS]
naa- feedback received
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Getting GoToWebinar registrant by azimut3 on stackoverflow.com
 
9:12 AM
iBug/Coral: Executing automatic scheduled reboot.
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to calculate download / upload internet speed in Angular by vishwas on stackoverflow.com
tpu- feedback received
 
!!/watch myfiber\.co\.in
 
fp- feedback received on Getting GoToWebinar registrant [MS]
[ SmokeDetector ] Blacklists reloaded at rev 39e4925 (SmokeDetector: Auto watch of myfiber\.co\.in by tripleee) (running on teward/Osiris)
[ SmokeDetector | MS ] Few unique characters in answer, repeating characters in answer (168): How to start MongoDB server on system start? by gaanja on askubuntu.com
[ SmokeDetector ] Blacklists reloaded at rev 405ec60 (tripleee: ! Watch IP 114.79.154.222) (running on teward/Osiris)
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): AOC USB Monitoring 3.0 with Ubuntu 20.4 by 3202User on askubuntu.com
[ SmokeDetector | MS ] Few unique characters in answer, repeating characters in answer (168): Drupal hook alter doens't work by ganja on stackoverflow.com
tpu- feedback received
[ SmokeDetector | MS ] Blacklisted user (71): Mock a Python class __init__ partially? by ganja on stackoverflow.com
tpu- feedback received
[ SmokeDetector | MS ] Bad keyword in link text in body, potentially bad ns for domain in body (70): It is Possible to create a non-ecommerce site using Magento by Allen Mark on magento.SE
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Sort date column and convert csv file to a time -series ✏️ by Tisky on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ip for hostname in answer, potentially bad ns for domain in answer, potentially bad keyword in answer, username similar to website in answer (65): Compatibility drugs info by Pediatric Oncall on biology.SE
tpu- feedback received
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, pattern-matching website in body, +4 more (492): https wellnesscarepills com/thermo-keto-sculpt/ by rachelwinte on superuser.com
[ SmokeDetector | MS ] Potentially bad keyword in answer, blacklisted user (72): How to exclude package from apt --fix-broken install (Don't tag it as a duplicate) by Yacyn CHERRADI on askubuntu.com
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, potentially bad ip for hostname in body, +1 more (393): Reviews Of Kanavance : 100% Natural And Safe? by kanavauk04 on workplace.SE
[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, link following arrow in body, +4 more (690): Befit Keto Cut: Contain all natural 100% safe, effective and natural ingredients by williamramiry on ai.SE
tpu- feedback received
 

« first day (2391 days earlier)      last day (1432 days later) »