« first day (3135 days earlier)      last day (686 days later) » 
00:00 - 16:0016:00 - 00:00

4:01 PM
sdc blacklist-number 1 8454456903
 
@Nick This looks like it's part of the support-number spam campaign, so the number can be blacklisted directly. cc @JeffSchaller
@SmokeDetector fpu-
sdc watch-force onlinecasino-az\.com
 
@cigien That pattern looks like it's already caught by Bad keyword in answer and Bad keyword in body Append -force to the command word(s) if you really want to add the pattern you provided.
 
sdc watch revopionsdigitalacademy\.com
 
teward/Osiris: Executing automatic scheduled reboot.
 
sdc watch issuewire\.com
 
fp- feedback received on [MS] Full page Google Chrome extension
 
[ SmokeDetector ] SmokeDetector started at rev c9927344b (SmokeDetector: Auto watch of revopionsdigitalacademy\.com by cigien) (running on teward/Osiris, Python 3.8.10)
Restart: API quota is 63745.
 
4:08 PM
sdc watch neela[\W_]*+drop[\W_]*+taxi(?!\.in(?<=neeladroptaxi\.in))
 
@MartinSleziak it's a good discussion to have, we don't currently have any systematic approach to following up on deletion. I created a ticket last year but there is not yet any real consensus as to what a proper solution should look like
 
sdc watch-force phanphoiacquynhapkhau\.vn
 
4:11 PM
over the past month or two I've kept track of the posts I flagged as TP and generally followed up here with "still up" and/or escalated to the Tavern where generally some additional flaggers are available and happy to help out
 
@cigien That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body Append -force to the command word(s) if you really want to add the pattern you provided.
 
we sometimes see posts which were reported and TP:ed months ago turn up again when the post is rescanned for other reasons, which ideally we would like to avoid going forward if there is a clear consensus that a post is spam
 
[ SmokeDetector | MS ] Manually reported answer (94): Nested Virtualization in aws bare Metal c5 instances‭ by Bernard Szlachta‭ on stackoverflow.com
 
4:14 PM
!!/watch dadesktop\.com
 
@Ollie It was caught by the generic "apk" watch. You can go ahead and force watches that are only caught by that reason.
 
my proposal at the time whs to create a separate dashboard on metasmoke for these posts, but perhaps it would be enough, or even a better solution, if the review queue would prioritize posts which are still up, and encourage reviewers to also flag them
 
@cigien Yeah, I'm just wary of adding unnecessary patterns when I can't find any others. Generic watch noted. Thanks.
 
np
 
4:20 PM
nothing much is likely to happen until we figure out how to attract Rails developers to work on metasmoke (or teach ourselves enough to start limping ahead again)
 
@SmokeDetector naa- User has at least 4 answers posted yesterday linking to the same blog article. Article was posted a few months ago, and no other hits for the blog on SE, but user appears to have other reasonable contributions, and I can't find any affiliation, so giving this the benefit of doubt for now. Watching the domain just in case.
sdc watch doc4dev\.com
 
sdc watch nasha[\W_]*+mukti[\W_]*+centre(?!\.com(?<=nashamukticentre\.com))
 
4:33 PM
[ SmokeDetector | MS ] Potentially bad keyword in answer, blacklisted user (72): How to bulk delete custom metadata records ✏️‭ by Sreenivas‭ on salesforce.SE
[ SmokeDetector | MS ] Manually reported answer (94): Create WCF endpoint configurations in the client app, in code?‭ by Harish Rocky‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How Incapsula works and how to beat it ✏️‭ by Neha Setia Nagpal‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad keyword in body (1): would be + V-ing as a question ✏️‭ by Bob Adyari‭ on ell.SE
 
fp- feedback received on [MS] would be + V-ing as a question
fp- feedback received on [MS] How Incapsula works and how to beat it
 
@cigien User blacklisted (4211266 on stackoverflow.com).
 
4:41 PM
 
4:52 PM
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Low Profile Floor for Water Underfloor Heating retrofit‭ by JimbobTheSailor‭ on diy.SE
 
5:16 PM
 
tp feedback received on [MS] Should I use UUID as well as ID
 
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Change Text encoding and view file‭ by palios7‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): Posts destroyed as spam should trigger a retroactive audit failure for previous "No Action Needed" votes‭ by Andree‭ on meta.SE (@Ollie)
 
5:32 PM
[ SmokeDetector | MS ] Potentially bad keyword in title (1): need need help seo‭ by tekin Yavuz‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Timeline alignment‭ by harjot.sm‭ on tex.SE
 
5:49 PM
[ SmokeDetector | MS ] Bad keyword with email in body, potentially bad keyword in body (56): what is specific html 5?‭ by Freelancer Fahim‭ on stackoverflow.com
 
tp feedback received on [MS] what is specific html 5?
 
!!/watch-number +8801610852966
 
fp- feedback received on [MS] Timeline alignment
fp- feedback received on [MS] need need help seo
 
6:06 PM
 
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Is solketal toxic?‭ by Abdul Moiz Qureshi‭ on biology.SE
 
Makyen/MS-Relay: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev e0f443d54 (Makyen: Ping Makyen for some new metasmoke users) (running on Makyen/MS-Relay, Python 3.7.10)
 
6:25 PM
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Cassette with more gears on same wheel?‭ by bain‭ on bicycles.SE
 
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad keyword in answer (2): What is the physical meaning and origin of the gravitational constant $G$?‭ by Dr Nader Butto‭ on physics.SE
[ SmokeDetector | MS ] Potentially bad keyword in body (1): gemini trading platform scam‭ by armando‭ on money.SE
 
7:00 PM
@SmokeDetector Possibly better as a comment, but not spam.
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Choosing a Paypal Service‭ by Paypalsell‭ on stackoverflow.com
 
tpu- feedback received on [MS] Choosing a Paypal Service
 
sdc watch- usaseoshop\.com
 
[ SmokeDetector ] Blacklists reloaded at rev aee743e9c (SmokeDetector: Auto watch of usaseoshop\.com by Ollie) (running on teward/Osiris)
API quota rolled over with 60821 requests remaining. Current quota: 79999.
stackoverflow: 8817
math: 2005
ru.stackoverflow: 667
physics: 509
superuser: 352
askubuntu: 328
electronics: 326
tex: 306
es.stackoverflow: 295
stats: 282
mathoverflow.net: 253
unix: 228
pt.stackoverflow: 212
gis: 198
blender: 176
diy: 146
rpg: 144
serverfault: 138
codegolf: 131
english: 126
codereview: 120
cs: 116
salesforce: 111
dba: 100
scifi: 100
apple: 99
ethereum: 97
ell: 87
wordpress: 82
security: 77
travel: 67
mathematica: 66
law: 65
hermeneutics: 64
datascience: 64
drupal: 59
aviation: 58
 
@SmokeDetector taking a look at the user profile it looks very spammy? Should we raise a mod flag
 
7:12 PM
@Ethan No. The post is very spammy by itself, the username matches the website name; the account will likely be destroyed along with the post. If not, they'll be handled in due time. Just red-flag it.
 
@Ollie ok
 
[ SmokeDetector | MS ] Potentially bad keyword in answer, blacklisted user (72): Paypal basic form to pay by credit card without paypal account‭ by Paypalsell‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Link at beginning of body, potentially bad asn for hostname in body (41): NMR for non invasive blood glucose monitoring? ✏️‭ by sam‭ on physics.SE
 
sdc watch paypalsell(?# facebook username)
 
7:15 PM
@Ethan @Ollie Some moderators won't mind and not even close to all accounts are destroyed. It differs between moderators and sites how this would be handled.
 
!!/watch usaseoshop\.com
 
@Mast That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body Append -force to the command word(s) if you really want to add the pattern you provided.
 
!!/stats lock Mak-2022-06-17_SE_API_rollover
!!/stats create Mak-2022-06-18_SE_API_rollover
 
@Makyen The lock operation succeeded on Mak-2022-06-17_SE_API_rollover.
@Makyen The create operation succeeded on Mak-2022-06-18_SE_API_rollover.
 
7:17 PM
!!/stats Mak-2022-06-17_SE_API_rollover
 
@Makyen "Mak-2022-06-17_SE_API_rollover" stats: Posts scanned: 42767, Q(19181), A(23586); Scan time: 66555.43, Q(56182.15), A(10047.32); Posts per second: 0.64; Grace period edits: 5014; Unchanged posts: 1934435, Q(870400), A(1064035); No post lock: 6816; Errors: 0; Max scan time: 117.54; Max scan time post: stackoverflow.com/72663976; Post processing lock: 31.95; Check unchanged: 61.32; Threads: 20276, API(19196), 155QA(10393), EW(9502), BFrr(0); High CPU: 142; Site limited: 105, SO(105), nonSO(0); All errors: 0; Started: 2022-06-17T19:12:02.780884; Locked: 2022-06-18T19:17:18.167180
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Underfitting and Overfitting at the same time? ✏️‭ by vincenzoconv99‭ on stats.SE
 
@Ollie Accounts are only destroyed by manual action from moderators/CMs. If a post is red-flagged out, there's no active notification about the post or account made to moderators, so no action is likely to be taken on the account. On SO, there are multiple moderators who look at SD reports and who tend to destroy spammer accounts (largely because userscripts make it really easy, even easier than just suspending). On other sites, it's substantially less likely.
Red-flagging nuking a post will usually result in the user being blocked from posting additional content for 7 or 14 days, due to the IP address being fed into SpamRam, which tends to be sufficient to prevent most spammers from posting additional spam from that account. A notable number of spammers for whom that's not sufficient tend to not care about the destruction of the account, as they will just create a new one when they need it.
OTOH, it does help to prevent some spammers, and more commonly trolls, for the account to be destroyed. I probably wouldn't raise a custom mod flag for a single spam post, but if there are a few by the same account, then it's probably a good idea to go ahead and raise a custom mod flag to specifically let the mods know.
Yet another side of the decision is that it's actually substantially easier for us to detect spam when the spammer uses the same account (i.e. that's what blacklisting the user is for), so there are advantages to not deleting/destroying the account.
As for spammy profiles without any posts, the general SE policy is "meh". Some moderators will care and some will not. It will also depend on the site.
On SO, there are at least 10s of thousands of such accounts, if not substantially more than a million. SO moderators generally don't want to see custom mod flags regarding spam profiles which have never posted a question or answer, largely because if we wanted to track such things down we could do it with a lot less effort than having someone flag each one individually. Such a flag is good if there's something particularly egregious (e.g. child porn, human trafficking; yep, those happen).
 
7:53 PM
Makyen/EC2-linux: Executing automatic scheduled reboot.
[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): How To Launch Link Type SMSTO in flutter ios‭ by Mohammed Dawood‭ on stackoverflow.com
[ SmokeDetector | MS ] Offensive title detected, potentially bad keyword in body, potentially bad keyword in title (57): Not able to terminate file due to permission issues despite having full perms and it being MY FUCKING COMPUTER‭ by Glork‭ on superuser.com (@Ollie)
 
[ SmokeDetector | MS ] Mostly punctuation marks in body (27): Codewars how can i solve this codewar question?‭ by CSharper‭ on stackoverflow.com
[ SmokeDetector | MS ] Few unique characters in body, no whitespace in body, no whitespace in title, potentially bad keyword in body, potentially bad keyword in title, +2 more (393): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa ✏️‭ by sadzouisegfvbirdxlghzve68ordfz‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Определение нового участника pyTelegramBotAPI‭ by Владислав Москалев‭ on ru.stackoverflow.com (@Nicknamegoeshere)
 
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Schema adding issues with rankmath plugin‭ by John Smith‭ on stackoverflow.com
 
9:31 PM
[ SmokeDetector | MS ] Blacklisted username, offensive answer detected, potentially bad keyword in answer, potentially bad keyword in username, toxic answer detected (249): How to install separate+ gimp-plugin for cmyk support?‭ by FUCK U‭ on askubuntu.com
 
9:42 PM
[ SmokeDetector | MS ] Blacklisted username, blacklisted user (161): What does Jared Diamond's theory say? ✏️‭ by D J Sims‭ on politics.SE
[ SmokeDetector | MS ] Potentially bad keyword in body, shortened url in body (48): Get free btc gift?‭ by syraxs‭ on bitcoin.SE
 
tpu- feedback received on [MS] Get free btc gift?
 
10:06 PM
teward/Osiris: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev 60543662c (SmokeDetector: Auto watch of paypalsell(?# facebook username) by Ollie) (running on teward/Osiris, Python 3.8.10)
Restart: API quota is 77348.
 
10:21 PM
!!/watch- c8jd1kl92kl2
!!/watch- (?-i:3xayXHS)(?#bit.ly)
 
The description of the room needs to be updated. We have over 254k+ true positives now. Now 215k
very close to 255
 
@Ethan I'm unsure where you're getting the 254k number for TP. The MS homepage shows 221217 for me.
 
My bad I miss read. Its 254k flags cast not true posetives
 
room topic changed to Charcoal HQ: Where smoke is detected, diamonds are made, and we break things by developing on production. This room is for Charcoal, a volunteer organization focused on detecting and eliminating spam and rude/abusive posts on all SE sites. 220k true positives and counting. For more information, see charcoal-se.org/about. Handy links: metasmoke.erwaysoftware.com; github.com/Charcoal-SE [dev-on-prod] [flag-based-fraternity] [programmatic-crowbars]
@Ethan I assume you mean 254 Ki flags (i.e. kibiflags), as I'm seeing 260333 flags on the MS homepage.
 
10:36 PM
Im seeing 254959
 
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Приветствие в тг боте‭ by Daniil‭ on ru.stackoverflow.com (@Nicknamegoeshere)
 
@Ethan That's the number of autoflags successfully cast. There's a 13-grand-odd deficit because Smokey sometimes fails to cast flags, for various reasons (e.g. because you don't have an account on the site where the spam was posted or because the post is already deleted). See metasmoke.erwaysoftware.com/flagging/logs for more info.
I'm no expert though, so please correct me if I've gotten anything wrong.
 
Well, that's strange. The flagging page shows 254959 flags cast and 13713 failures, but the homepage shows "80618 posts have been autoflagged, totalling 260333 flags". I don't really expect those numbers to be equal, as the numbers on the flagging page appear to be all flags (i.e. including manual flags). However, if they are showing autoflags vs autoflags + manual flags, then I'd actually expect the numbers to be different by substantially more than 6k.
I'd note, however, that whatever those numbers are reported as, they are inaccurate, as we lost a few/several months worth of flagging data from the MS database.
 
I have a handful of commands to test out. Is it fine if I use Charcoal Test for that? It says it is for unofficial Charcoal clients, but I'd like to avoid cluttering up here
!!/test Coinbase support number
 
10:54 PM
> Bad keyword in body, bad keyword in title, bad keyword in username, blacklisted username, potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Bad keyword in body - Position 0-23: Coinbase support number
Bad keyword in title - Position 0-23: Coinbase support number
Bad keyword in username - Position 0-23: Coinbase support number
Blacklisted username - Position 0-23: Coinbase support number
Potentially bad keyword in body - Position 0-23: Coinbase support number
 
@cocomac Your question is unclear. Are you wanting to perform commands which are run on your own instance? Are you wanting to test some commands which are run on the main currently active SD instance? If it is that you're wanting to run your own SD instance and run commands against that instance, then the best thing to do is create your own room for testing your instance. Other than a few commands, any command will be executed by all instances listening in a room.
 
@Makyen I’d like to run a few commands against the main SD instance. I’m working on making it scan a data dump but it is giving me some odd reasons so I’d like to compare what I get locally to what it actually is
 
That effectively means that there shouldn't be more than one active SD instance listening for commands in the same room. Primarily the only commands which allow specifying which instance to run on are those which are used to control moving an instance to the standby or off states.
 
That makes sense, but if I have some !!/test commands to run that will clutter that chat, is here fine or should I head somewhere else? I don't intent to run any commands that will switch instances or run any other instances myself
 
@cocomac That sounds like it's more appropriate for one of the Charcoal Test rooms, rather than here, as it would be less disruptive in one of those than it would be here.
 
11:00 PM
@Makyen Alright, I'll go to Charcoal Test then
 
@cocomac If you're concerned about disrupting other users' use of Charcoal Test, then you might consider Charcoal Test SO, which has relatively little use other than SD posting "debug" messages.
 
@Makyen Alright, I'll be there
 
@cigien OK, will do in the future
 
00:00 - 16:0016:00 - 00:00

« first day (3135 days earlier)      last day (686 days later) »