Charcoal HQ

!!/report unix.stackexchange.com/a/330645/111051

[ SmokeDetector | MS ] Manually reported answer: marketing website for sale for URL me jagstd AT g mail com by david on unix.stackexchange.com

tpu- by Wrzlprmft

[ SmokeDetector | MS ] Manually reported answer (batch report: post 1 out of 2): How does browsing speed differ in native apps, web apps, and websites? by Roman Shevchenko on softwareengineering.stackexchange.com

[ SmokeDetector | MS ] Manually reported answer (batch report: post 2 out of 2): Solved: Ubuntu phone: what is the difference between a web app and a native one? by Roman Shevchenko on askubuntu.com (@ThomasWard)

tpu- by Glorfindel on How does browsing speed differ in native apps, web apps, and websites? [MS]

tpu- by Glorfindel

3:37 PM

@Glorfindel yeah, I know.

[ SmokeDetector | MS ] Bad keyword with email in answer: What does a court need to successfully prosecute a hacker? Please cite previous cases if possible by Charlotte on security.stackexchange.com

tpu- by Jan Dvorak

@SmokeDetector k

@Glorfindel @angussidney @JanDvorak

meta.stackexchange.com/a/288143/215468

@Undo +1

Thanks for the explanation. Here, have my support

3:54 PM

@ArtOfCode Which policy?

@Undo you're using two accounts to give one of 'em access to something it wouldn't otherwise get without some more effort.

AKA using two accounts to do something you couldn't do with one, which is the condition for bad sockpuppetry.

@ArtOfCode yeah, same as if we answered some questions.

Yeah, I don't think it was kosher

shrug there's no easy way

but meh

@ArtOfCode that would only be if Undo would flag a certain post as well with his main account.

3:55 PM

@Glorfindel heh, in reality I'm mostly sleeping during spammy hour.

@Glorfindel this actually is a concern

@JanDvorak yeah, we'll get that one cleared up with the team. Highly doubt it'll be an issue

[ SmokeDetector | MS ] Link at end of answer: My iCloud account doesn't have a calendar? by leadingdate on apple.stackexchange.com

tpu- by Glorfindel

don't click the link

click the flag instead

4:00 PM

The link within the link, or the link from SD?

the link in the post

Oh, good. What did it contain?

[ SmokeDetector | MS ] Offensive body detected: Creating an array from scratch by hentai103 on stackoverflow.com (@dorukayhan)

many links to free-adult-hookups with attached explicit images

Ironically, 'link' in Dutch can mean either 'link' or 'dangerous'.

4:02 PM

@ArtOfCode I only clicked it because I saw "calendar" in the question and "date" in the link :P

the last post was offensive and vandalism.

Are you ready for the next episode: meta.stackexchange.com/questions/288144/…

bring it on :P

@Undo can I borrow your SO mod powers for four seconds to delete a comment?

Might be easier to just flag it :P

it is flagged :P

4:08 PM

oh, then it'll get handled soon enough

Flag queue is lean and fast these days

there's previous cases for my flags to take fifteen hours to be processed on SO though :P

i should do a better job of pruning comments before migration oops

All of my SO flags are handled crazy fast because I mostly flag spam. :D

:P

same here, but my non-spam flags take eternity :P

Yeah, there's a special case in the code to bypass mods in case of spam flags, and just delete the post, simply because it would take too long otherwise

I once had a flag take 3-4 days on infosec

4:15 PM

Yeah, that's pretty norm... wait, infosec?

I have a pending flag (to remove the [tag:status-norepro] here) which is waiting since November 19th. I highly doubt that that's the current record.

oh, mSE is always odd

I have flags on mSE from September that have not been addressed heh

Should I toss Tavern a link to that meta?

eh, if you want.

4:23 PM

[ SmokeDetector | MS ] Offensive answer detected: Knight shortest path c++ by james mueller on codereview.stackexchange.com

tpu- by Undo

@hichris123 SO also has moderators who see the vast majority of spam flags within seconds or minutes, so possibility for damage is far lower. Other sites simply don't have that. — Undo 18 secs ago

@Undo SO also has far more trigger happy spam flaggers, so...

do we want to exclude SO from bot-flagging?

no. SO should be our starting site.

@JanDvorak we're probably starting there

@hichris123 Statistics wins on that one, honestly. We have far more historical data on SO.

4:28 PM

SO is one of the few sites I'd exclude. Too risky, lots of false positives.

[ SmokeDetector | MS ] Link at end of answer: Check if name string contains first and last name by Anu Viswan on stackoverflow.com (@dorukayhan)

Drupal is the winner of course.

yeah, we'll figure that out.

+1 for drupal being the first "victim"

I'd still go for starting on SO. Yeah, there's a risk of false positives, but if we can tune it for that then we can tune it for anywhere - and we do get the advantage of quick response time and a moderator with all the context.

4:34 PM

@ArtOfCode Remember, we'll probably dry run this at first, so in the beginning this won't matter much

all a dry run involves is creating Flag records without calling user.spam_flag

Restart: API quota is 4650.

@ArtOfCode Actually, call it but abort right before sending the flag. We need to know if the flag_options we get are sane.

@Undo okay, so we can modify User#spam_flag to take a live parameter too, and only cast the flag if that's true.

@ArtOfCode Probably def spam_flag(post, dry_run=false)

4:40 PM

^ that works.

@Undo we can also have it default to True for testing / dry runs, and then when we put it into production switch that to False

@Undo that's Python right?

@ThomasWard Ruby

ah

oh, right, looks similar

:P

which actually reads quite a bit like Python, sometimes.

at times, yes :)

[ SmokeDetector | MS ] Bad keyword in answer: Uploadifive: Show error/result from uploadifive.php at each queue element by wawawaw on stackoverflow.com (@dorukayhan)

4:46 PM

@SmokeDetector tpu-

is MS down?

or FDSC broken?

MS is up.

A little slow, but still

Maybe it just got killed before anyone with FDSC had the chance to flag

nah, I flagged before it died

so it should've thrown the notice here

unless the socket's down?

checks Smokey

nope, it's up...

shrugs

!!/alive

@ThomasWard Of course

good I didn't break screen again.

4:50 PM

[ SmokeDetector | MS ] Link at end of body, pattern-matching website in body: Revived Youth Cream Review: Read first before buy! by ghakixgoosiz on drupal.stackexchange.com

tpu- by teward

@ArtOfCode Good to deploy your MS changes?

so NOW it works >.>

@Undo can if you like, they don't do anything at the moment

and the tests fail, but that's only because there are views missing

@ArtOfCode fwiw, github.com/Charcoal-SE/metasmoke/commit/… is because we don't load the schema or seeds on deploy.

@Undo probably should...

4:53 PM

@ArtOfCode ?

That'd smash existing stuff.

oh, true

You don't want to create that FlagSetting on every single deploy

yeah

Huh complicates things

Just put it in both places.

@Undo it won't, there's a unique name validation

4:54 PM

oh, I forgot you like your validations

You do need to have it seeds for deploying a completely new copy, though

in that case you should be using db:schema:load instead of running every migration

Yeah

Any reason I can't revert that change to 20161215012518_create_flag_settings.rb in the interest of cleanliness?

We're in the process of doing this now, whether we can make Smokey a more properly incorporated part of the way we very quickly kill spam and trolling at scale. There are many wires, all of them varying shades of blue, it's going to take a bit of time. And that could result in us realizing that we just cant (which I think is a very remote possibility), but we think it's worth thoroughly looking into, and we've got 1.5 people working on it. An no, I'm not going to define how we manage to get .5 of a person, it's a very delicate thing. — Tim Post ♦ 56 secs ago

@Undo should be okay?

kk

darnit

I really, really didn't want to have this meta thing this early, but whatever

Better to jerk the automated-flagging bandaid off now than later, I suppose.

4:58 PM

@Undo Tim's talking about integration - we don't have to mention our autoflagging project outside of here if we don't want to yet

@ArtOfCode Except I already did in the interest of being transparent, which was stupid

This meta thing isn't about Smokey flagging, but about how he earned rep.

> automating actions should not be provided to the bot until it reaches the needed reputation level without human interference on its own.

@Undo I don't think transparency is stupid

@Undo whoops

well, if someone picks up on that then we start on the stats

5:00 PM

@Undo yeah, that sounds ... wait, what?

I mean, we've given it the ability to modify itself and it still hasn't earned one bit of rep on its own :P

I knew this was going to be the most frustrating part of the whole project, just hoped we wouldn't have to deal with it now

@JanDvorak No, but volunteering information that you know people want to use to shut your projects down is fairly stupid.

The self-rewriting bit? Yeah, I warned ya :-)

@Undo If you say it this way :-)

5:17 PM

sd why

@ThomasWard [:34135925] Body - Position 12-22: anti-aging

sd - fp-

A: How should a bot earn enough reputation to perform the actions necessary for that bot?

5:27 PM

5

I think it's stupid. Of course, I'm not a big fan of bounties under any circumstances... But abusing the sandbox to get rep into a sockpuppet while preventing others from using it for its intended purpose is pretty clearly not a purpose bounties were ever intended to serve... Same goes for Prote...

So here's what we'll do:

Anyone with Smokey credentials: You're free to log in and post (good) content with it (if you want to), towards the goal of reaching 200 rep and the assoc bonus. Please don't go upvoting them yourselves.

8

@Undo are good questions also valid to post?

Sure, why not

Smokey's IP history is gonna look funky.

Does Smokey have Intellectual Property?

My usual reference for socks, @Jan. In many situations, this would've resulted in the sock being deleted, not just having a bounty revoked. We're being pretty tolerant of Undo here 'cause we like his work and know his heart's in the right place, but this was straight-up abuse. — Shog9 ♦ 7 mins ago

2

5:46 PM

[ SmokeDetector | MS ] Few unique characters in answer: Using regex to match any character except = by xxxreetardxxx on stackoverflow.com (@dorukayhan)

tpu- by NobodyNada

Q: Should we have special accounts for bots?

also:

Apologies for casting the room in a bad light.

Processed Meat

2

Triggered by the question How should a bot earn enough reputation to perform the actions necessary for that bot? Spam is increasing, and it appears current efforts towards it are linear - tey require human action and interaction. We have, up until now, allowed users to moderate the site through...

meh, everyone makes mistakes @Undo, you just happened to make a high profile mistake

I've bountied a sock before

6:20 PM

Wow, shit really hit the fan while i was gone

Maybe you shouldn't leave anymore :P

Haha

heh

[ SmokeDetector | MS ] Link at end of answer: How to keep mute button available during call by Damon on apple.stackexchange.com

@SmokeDetector tpu-

6:28 PM

[ SmokeDetector | MS ] Bad keyword with email in answer: How do I install Filezilla server? by Nuro computing on askubuntu.com (@ThomasWard)

@SmokeDetector tpu-

note that the spam is since edited out

and now deleted since i reread what they posted and the orig. question xD

I don't think it was a good idea to edit the spam out; take a look at the username & note that the command was from another answer

@NobodyNada See my last message

it looked like a valid answer initially

Then i reread

@ThomasWard yeah, it did

IIRC we're not supposed to edit out spam, but I'm not 100% sure.

@NobodyNada given i'm a mod on Ask Ubuntu and I've done it in the past when the rest of the answer was salvageable and posted by someone else, yeah. But you're right. I rolled back and deleted with a spam flag :p

so it's ultimately good

(Blatant spam is not edited, but someone accidentally maybe posting a link that would be spam is a different story)

Andy

6:32 PM

@ProcessedMeat I posted an answer opposing a "bot" type account

DavidPostill

@NobodyNada Correct. Leave it be. Should Spam posts be edited?.

jeez, it's so cold and the wind is blowing so hard it's getting into the building >.<

practically frigid in here

6:46 PM

@Undo that's more like a deployable state of things. Still no flagging, but the conditions UI is in place.

k

CI failed

[ SmokeDetector | MS ] Pattern-matching website in answer: Mimic PHP's ksort in C# by Sana Khan on stackoverflow.com (@dorukayhan)

ugh

tpu- by NobodyNada

huh, smokey's avatar changed

6:48 PM

odd

oh, I know what happened

Updated the profile text on SO and synced it to the network, looks like it clobbered the image

[ SmokeDetector | MS ] Blacklisted website in answer, link at end of answer: Can I get iOS App Installs into Mixpanel? by Abhishek Patil on stackoverflow.com (@dorukayhan)

tpu- by NobodyNada

All fixed, hopefully

[ SmokeDetector | MS ] URL in title, link at end of body, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: onlinehealthmarkets.com/biotic-max/ by beids1927 on drupal.stackexchange.com

tpu- by NobodyNada

there y'are @Undo

oh hey I got the 1000th commit

3

and it was "fix tests", how exciting

7:23 PM

[ SmokeDetector | MS ] Link at end of answer: Minecraft mod communicating with BuildCraft by BobbyMacBob on stackoverflow.com (@dorukayhan)

@ArtOfCode Deployed

@ArtOfCode Where does the weight come from?

fp- by DavidPostill

7:39 PM

@Undo I assumed weighting each reason out of 100

then assuming 3 reasons, require 98 for each one

kk, we'll probably adjust that but it's a start.

Yeah, it's just a figure, can be changed

Is there a reason you didn't expose enabled?

What is the spam text in this document supposed to do?

Looks like a copy-paste error

7:42 PM

Can I flag it?

Someone added it at 3:28a my time, I've reverted the document

@Art Are you working on it or am I free to play with it?

Go play :)

s/play with/work on/

yay

8:04 PM

[ SmokeDetector | MS ] Offensive answer detected: Why doesn't io:write() write to the output file? by big faggot in ur bum on stackoverflow.com (@dorukayhan)

tpu- by Glorfindel

dorukayhan

@Glorfindel oh god

lol, I guess some spammer stalks us

That was my guess as well.

that's kind of disturbing

I doubt that. I suspect it was someone having a joke.

8:19 PM

If you're a spammer who's lurking here, please move on. There's absolutely nothing to see here.

5

Just when I got told spammers didn't have the time to visit this place...

it's a copy-and-paste of this

@ArtOfCode well, it reminds me of one of our projects where we left a 'lorem ipsum' text on a certain page of the website. The product owner, a GP, had never seen this before, but figured out it was Latin and tried to translate it, and then she asked us what the heck that was supposed to mean.

@ArtOfCode Or someone with a copy-paste error. I did that a few times yesterday, I'm used to dragging links onto a Chrome window to go there, Docs overrides that.

makes sense

8:24 PM

[ SmokeDetector | MS ] Pattern-matching website in body: Nutritionix API; 200 code (access granted) but no output. by N. Hechtman on stackoverflow.com (@dorukayhan)

fp- by NobodyNada

[ SmokeDetector | MS ] Bad keyword with email in answer: Is my computer at risk of being hacked when using public Wi-Fi? by Hack Empire on security.stackexchange.com

tpu- by Glorfindel

> People are getting in contact with hackers to help them predict the stock market

crap, that guy doesn't need to spam here to make a living

Yeah, he'd make more cash just crashing the global market

@Undo MSE's different -- lost the unicorn.

@hichris123 Did we have the unicorn on both SO and mSE?

Anyway, changed it on meta