@KazWolfe flag limit. Though 100 per site is still a lot.

per day

@JanDvorak yeah, there's a limit, but it doesn't change the fact that spammers have access to a privileged account and can sell things through smokey.

a lot of work and annoyance for mods, plus the damage control from that event would just be insane.

Plus lost trust - the CM team wouldn't be happy to let Smokey flag anytime soon again.

I think there's more of a chance that it's an ACE that we don't review via a pull request, but we're pretty good at reviewing things

or one we don't catch

well, smokey would have god knows how many spam flags against it, it'd get itself blacklisted, TOTM/SE probably would hate bots even more than they already do...

is there a point where a flagged account is just banned entirely?

Yep

Even flag-banning the Charcoal team for a week would be a win for the spammers

so ACE is pretty deadly here. :/

Yep.

However, we aren't going to start autoflagging until we enforce more review requirements on our GH repo, so once we do that we should be fairly safe

unless there happens to be a zero-day in Python

Which would cause pain to way more people than just SE

well, good thing spammers aren't too smart.

@JanDvorak fortunately, Smokey's system, Aurora, is on a daily security updates schedule

Nice

so as soon as a fix for a major 0day is out it's there

since Aurora's an Ubuntu box, and I have a Landscape license for up to 30 systems, it's centrally managed

so it can automatically push updates :P

Plus, it's a relatively unknown system, so there won't be many people looking for Aurora vulnerabilities

I also have a "Kill Smokey" script up there, kills all active screen, python, and bash script processes

and forcibly 'downs' the network, then calls on my mail server to email me a notification about the trigger

That presumes you know you should kill Smokey.

I keep an eye here :)

but yes, if it needs to die, it's killable

What if Smokey doesn't report here?

with extreme prejudice

@JanDvorak I kill it every couple days out of paranoia xD

paranoia that it's not clean

if it dies it dies

So, you first kill the network, then you send an email?

and i'm sure SOMEONE will ping here :P

do you have a macro to kill smokey too?

@JanDvorak the Landscape script has its own post-execution script that relies on Landscape pinging me

or a big red button on your desk?

oh, nice

@KazWolfe You mean the "DON'T PRESS OR THE NUKES GO OFF" button?

@ThomasWard yes.

the one that launches @angussidney at the servers.

we don't talk about that button.

i actually have one of those to kill my server room power.

@angussidney Might be sane to implement some kind of sanity check, but I'm less worried about it

Remember, most of these spammers don't care that much

I believe there are ways to attack their profit at the source, but it's low enough yield and requires employee time.

@Undo (nor are they too smart)

That too

@ThomasWard If I'm installing ubuntu on a separate hard drive rather than on the same one as windows, do I still need a bootloader?

Yes.

@angussidney do you want to be able to select between the OSes to boot to?

Hesitant yes from me, but I don't claim to understand all of that

@angussidney I would say yes, normally.

@angussidney Come join us!

@angussidney ^ Kaz here has a point :)

Thats probably a better idea than spamming this room with unrelated stuff

we do kinda use this place as an offtopicish haven :)

yes. AUGR is used to the spam.

and I don't really mind either way

i think we're having a discussion of fat pigeons vs chickens over there now.

@KazWolfe It's quite an interesting discussion though xD

[ SmokeDetector | MS ] Shortened URL in answer: How to disable screen lock on Huawei P8 lite? by Solly Wolly on android.stackexchange.com

naa- by KazWolfe

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, pattern-matching website in body, pattern-matching website in title: click here: nuvieskincareserum.com/ultraflex-relief/ by nicson on superuser.com

[ SmokeDetector | MS ] URL in title, bad keyword in body, link at end of body: anradrol.com/jack-hammer-xl/ by user71029 on drupal.stackexchange.com

[ SmokeDetector | MS ] Bad keyword in body, pattern-matching website in body: The Skills For Males To Get Up Their Skin by user217143 on apple.stackexchange.com

[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: supplementlab.org/follinique/ by deborahflagg011 on graphicdesign.stackexchange.com

tpu- by Yvette

[ SmokeDetector | MS ] Non-English link in answer: Hoàn Vũ Solutions by user347577 on meta.stackexchange.com

tpu- by Yvette

[ SmokeDetector | MS ] URL-only title, link at end of body, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: healthpluscogni.com/dominant-testo/ by user635618 on askubuntu.com (@ThomasWard)

sd k

[ SmokeDetector | MS ] URL in title, blacklisted website in body, blacklisted website in title, pattern-matching website in body, pattern-matching website in title: yoursbetterhealthsolutions.com/biocilium/ by user217146 on apple.stackexchange.com

sd k

[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, link following arrow in body, pattern-matching website in body, pattern-matching website in title: supplementlab.org/follinique/ by user217147 on apple.stackexchange.com

tpu- by Yvette

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body: Is Penis Pills Enlargement Really Suitable? by karidmaz on askubuntu.com (@ThomasWard)

[ SmokeDetector | MS ] Bad keyword in body, pattern-matching website in body: Max IS THE EASY AND EFFICIENT WAY by Kstoorikant on apple.stackexchange.com

!!/report stackapps.com/questions/7154/gmail-technical-services-number

[ SmokeDetector | MS ] Manually reported question: Gmail technical Services Number by Randy Orton on stackapps.com

[ SmokeDetector | MS ] Bad keyword with email in body: Can a person spoof the TO address as a forwarding email which they don't own the domain name? by User92305 on stackoverflow.com (@dorukayhan)

sd f

[ SmokeDetector | MS ] Bad keyword in body, pattern-matching website in body: SAW PALMETTO: Saw palmetto extract by user217150 on apple.stackexchange.com

sd k - k

[ SmokeDetector | MS ] URL in title, bad keyword in body, pattern-matching website in body, pattern-matching website in title: brainfireadvice.com/active-plus-youth-cream/ by Rose ton on apple.stackexchange.com

sd k

[ SmokeDetector | MS ] Link at end of body: purelifegreencoffeebeanadvice.com/abella-mayfair-canada/ by franceskoillett on drupal.stackexchange.com

sd k

[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: supplementlab.org/follinique/ by user635628 on askubuntu.com (@ThomasWard)

[ SmokeDetector | MS ] Repeating characters in title: iMac disk partion FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF by Shkgma on apple.stackexchange.com

@SmokeDetector fp-

tpu- by KazWolfe on http://supplementlab.org/follinique/ [MS]

[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: supplementlab.org/follinique/ by olappilsaas on graphicdesign.stackexchange.com

[ SmokeDetector | MS ] Repeating characters in answer: Insert , Update , Delete -> Normalization & Code Igniter by user7348361 on stackoverflow.com (@dorukayhan)

[ SmokeDetector | MS ] Bad keyword in body, link at end of body, link following arrow in body, pattern-matching website in body: The average man's experience of the program? by jacobstyu on askubuntu.com (@ThomasWard)

tpu- by KazWolfe

tpu- by tripleee on http://supplementlab.org/follinique/ [MS]

[ SmokeDetector | MS ] Pattern-matching website in body, repeated URL at end of long post: This emulsion connected to your face by user217158 on apple.stackexchange.com

[ SmokeDetector | MS ] Bad keyword in title, link at end of body, pattern-matching website in body: Five Techniques Keep Your Hair Stay Healthy by user679428 on superuser.com

tpu- by tripleee

[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: supplementlab.org/follinique/ by user62151 on workplace.stackexchange.com

tpu- by Yvette

[ SmokeDetector | MS ] Bad keyword in title, bad keyword with email in body, blacklisted website in body: SAP HR ONLINE TRAINING COURSE by user7348413 on stackoverflow.com (@dorukayhan)

tpu- by tripleee

@SmokeDetector if this wasn't autoflagged, what is!?

would adding the phone number to the blacklist help trip it over the threshold? metasmoke.erwaysoftware.com/…

We do have a specific phone number reason

for that particular phone number? it didn't trigger

And it wasn't auto flagged because it only had a weight of 260, which is less than the 280 required

@tripleee reflexes might need changing

so would adding 9676277094 to the blacklisted keywords bring the missing 20?

how are the weights calculated?

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body: Fixings Used in perfect youth serum by user62152 on workplace.stackexchange.com

@angussidney you mean we should make new rules to pile on weight for posts which are already detected properly but don't get enough weight?

tpu- by Yvette

[ SmokeDetector | MS ] Link at end of answer: Problemas no netbeans com conexão com Postgres by danilo on pt.stackoverflow.com

naa- by tripleee

google translation: "Could you solve the problem, buddy? Because I am also tempted and only of this error, please send me an email if you could solve this problem"

(I guess "tempted" ~ "affected")

[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body, repeated URL at end of long post, blacklisted user: How to apply the condition? by user62152 on workplace.stackexchange.com

tpu- by Undo

[ SmokeDetector | MS ] Bad keyword in title, link at end of body, pattern-matching website in body: Important Information On Creams Carried Out Correctly Rid Of Dry Skin by yorelmorss on superuser.com

[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body: Two grams of devils claw possibly by user679439 on superuser.com

tpu- by Undo

[ SmokeDetector | MS ] URL in title, bad keyword in body, link at end of body: wellnessfeeds.com/biocilium/ by KennetLee on gaming.stackexchange.com

tpu- by Undo

[ SmokeDetector | MS ] Link at end of answer: Magento2 admin after login redirect back to admin login? by Zahirul hasan on magento.stackexchange.com

[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, repeated URL at end of long post: Particularly, given that the by liewskijuri on stackoverflow.com (@dorukayhan)

@tripleee sorry, stupid ipad autocorrect. I meant that the regexes for the phone number reason might need changing to catch that form of phone number

Also, that is a good idea about posts which are detected and arent autoflagged

Maybe each TP could add a certain amount to the total (e.g. +30 weight)

@undo how does that sound? ^

On the fence about that, let me sleep on it

On one hand, it makes sense. On the other hand, we're already flagging 20%+ of our corpus with 99.x% accuracy

Need to run queries on it

At first, this should probably augment our flagging. In the future, we can try to squeeze more out of it.

[ SmokeDetector | MS ] Pattern-matching website in body, repeated URL at end of long post: Following my first application by neuroxr on bricks.stackexchange.com

Yeah, need to get numbers on it. After sleep.

sd k

Night :)

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, link following arrow in body, pattern-matching website in body, repeated URL at end of long post: Testabolan CYP Your daily diet by KevinStric on drupal.stackexchange.com

@Undo Its just that I've noticed that a few very spammy posts fall a bit short

[ SmokeDetector | MS ] Shortened URL in answer: Is LCHF diet the best and easy way to loose fat? by Shyam Shukla on fitness.stackexchange.com

[ SmokeDetector | MS ] Shortened URL in answer: Can one be on a ketogenic diet and not go to the gym? by Shyam Shukla on fitness.stackexchange.com

[ SmokeDetector | MS ] Link at end of body, link following arrow in body, pattern-matching website in body: Iron Bull Edge Smart Pills by user679447 on superuser.com

tpu- by tripleee

tpu- by tripleee on Can one be on a ketogenic diet and not go to the gym? [MS]

tpu- by tripleee on Is LCHF diet the best and easy way to loose fat? [MS]

[ SmokeDetector | MS ] URL-only title, bad keyword in body, blacklisted website in body, blacklisted website in title: fornatgaex.com/active-plus-youth-cream/ by erinweco on askubuntu.com (@ThomasWard)

tpu- by tripleee

[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body: It's because of the bad diet? by lorewe nelly on drupal.stackexchange.com

[ SmokeDetector | MS ] URL in title, repeated URL at end of long post: anradrol.com/jack-hammer-xl/ by user217167 on apple.stackexchange.com

tpu- by tripleee

!!/blacklist-website anradrol\.com

5 hits metasmoke.erwaysoftware.com/…

@tripleee You don't have code privileges, but I've created a pull request for you.

[ SmokeDetector | MS ] Pattern-matching website in body: Keep Your Hair From Hair Loss by RamonWalto on apple.stackexchange.com

tpu- by tripleee

!!/blacklist-website trexmusclesite\.com

many many more hits

@tripleee You don't have code privileges, but I've created a pull request for you.

[ SmokeDetector | MS ] Link at end of body: purelifegreencoffeebeanadvice.com/abella-mayfair-canada by user134587 on security.stackexchange.com

[ SmokeDetector | MS ] Blacklisted website in body: With the Livana Lift by skiny fresh on stackoverflow.com (@dorukayhan)

[ SmokeDetector | MS ] Pattern-matching website in answer: How to Load Json in Endless Recycler Veiw with Retrofit by majid.sh on stackoverflow.com (@dorukayhan)

tpu- by tripleee

tpu- by tripleee on purelifegreencoffeebeanadvice.com/abella-mayfair-canada [MS]

!!/blacklist-keyword abella\Wmayfair

@tripleee You don't have code privileges, but I've created a pull request for you.

this one also has a phone number which wasn't detected: metasmoke.erwaysoftware.com/post/49481

either way, I'm thinking maybe there should be "has a phone number" (any phone number) and a separate blacklist of specific phone numbers

[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, pattern-matching website in body, pattern-matching website in title: supplementlab.org/follinique/ by deborahflagg011 on apple.stackexchange.com

tpu- by tripleee

the hits for supplementlab\.org get a high enough score generally, though one I looked at was pretty close (286)

s/score/weight

[ SmokeDetector | MS ] Link at end of body: The site does not let you know how long you ought to give back the item to get the repayment. On the off chance by heracrosss on superuser.com

tpu- by tripleee

!!/blacklist-website wellnessfeeds\.com

@tripleee You don't have code privileges, but I've created a pull request for you.

!!/blacklist-keyword biocilium

@tripleee You don't have code privileges, but I've created a pull request for you.

any chance the Metasmoke search form could allow us to search for weight, and/or display it in the results? [ms-fr]

[ SmokeDetector | MS ] Blacklisted website in body, link at end of body, pattern-matching website in body: Intelleral: Characteristic Focus Supplement For Clearing Brain Fog! by user71037 on drupal.stackexchange.com

[ SmokeDetector | MS ] Bad keyword in link text in answer, blacklisted website in answer: How to recover a deleted file on Mac OS X? by annalee899 on apple.stackexchange.com

tpu- by tripleee on Intelleral: Characteristic Focus Supplement For Clearing Brain Fog! [MS]

@SmokeDetector k

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching website in body, repeated URL at end of long post: Testabolan Cyp Reviews- Enhance Stamina And Energy Level, Experts Recommended by testabolancyp1 on stackoverflow.com (@dorukayhan)

[ SmokeDetector | MS ] Chinese character in title: Mysql join 索引不命中 by daniel.luo on stackoverflow.com (@dorukayhan)

tpu- by 4castle on Testabolan Cyp Reviews- Enhance Stamina And Energy Level, Experts Recommended [MS]

@SmokeDetector f

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body, repeated URL at end of long post: Follinique Skin beauty by olappilsaas on superuser.com

[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body, repeated URL at end of long post: attractively with no duplicity. Quickly you have a savage weapon by user62153 on workplace.stackexchange.com

tpu- by unarist on Follinique Skin beauty [MS]

Restart: API quota is 8214.

@SmokeDetector k

[ SmokeDetector | MS ] Link at end of body, pattern-matching website in body, repeated URL at end of long post: Coconut oil, on the other hand by neuroxr on workplace.stackexchange.com

tpu- by Glorfindel

[ SmokeDetector | MS ] Manually reported question: what is Avg Phone Number? by user346273 on meta.stackexchange.com

^ no link / phone number detected, but I'm sure it will follow. Unless we get there first.

tpu- by tripleee

[ SmokeDetector | MS ] Bad keyword in body, bad keyword with email in body: продажа фальшивых денежных средств by user232402 on ru.stackoverflow.com

tpu- by Glorfindel

google translate: "In supplying counterfeit money for the terminals, ATMs Banknotes have all the decals and glow in ultraviolet! A simple eye does not distinguish! Ideal to replenish the "left" card, followed by withdrawal from ATMs Quality - Receive our products have a high level of quality that allows you to bypass the known terminals QiWi, I-Box, PSCB, ATM, Cash-Point, RTM Garant welcome. For: xxxxxx@mail.ru"

They're pretty recognizable, even with my level of Russian.

after seeing the translation I suppose I should have recognized денежных but we probably have many people here who do not read cyrillics at all

[ SmokeDetector | MS ] Blacklisted user: what is Avg Phone Number? by AVG 1855-779-6663 phone number on meta.stackexchange.com

tpu- by Glorfindel

Ah, there it is.

[ SmokeDetector | MS ] Few unique characters in answer: Why do many parkour practitioners wear oversized pants? by boi man on fitness.stackexchange.com

[ SmokeDetector | MS ] Shortened URL in answer, blacklisted user: I tried a new diet and I think my blood sugar is too low, do I need more carbs? by Shyam Shukla on fitness.stackexchange.com

tpu- by Glorfindel on Why do many parkour practitioners wear oversized pants? [MS]

tpu- by tripleee

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title: Aloe Vera Juice Weight Loss? by allenwang on cooking.stackexchange.com

tpu- by tripleee

[ SmokeDetector | MS ] Shortened URL in answer: Windows 8 / 8.1 USB file transfer consistently freezes whole system by Jay Xu on superuser.com

tpu- by Glorfindel

^ the URL points to drivethelife.com, a known spam target, and is an answer for Windows 10 instead of Windows 8.x.

Maybe useful for reviewing if we can attach comment like this ^^ to own feedback on MS?

[ SmokeDetector | MS ] Mostly non-Latin body, pattern-matching website in body, blacklisted user: How to use the camera by camera on askubuntu.com (@ThomasWard)

tpu- by Glorfindel

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body: Best Ingredients For Smooth Skin by charlesmaddien on askubuntu.com (@ThomasWard)

tpu- by Glorfindel

[ SmokeDetector | MS ] Link at end of answer: document.getElementById doesn't retrieve an element that actually exists by Jannifer Lisa on stackoverflow.com (@dorukayhan)

tpu- by Glorfindel

!!/report apple.stackexchange.com/q/266467/55266

[ SmokeDetector | MS ] Manually reported question: But the reason for adding this by jamadribur on apple.stackexchange.com

tpu- by Glorfindel

!!/blacklist-website mindextra\.com

@Glorfindel You don't have code privileges, but I've created a pull request for you.

[ SmokeDetector | MS ] Bad keyword in answer: What is the most sustainable way to dispose of shoes? by CC-Haus on sustainability.stackexchange.com

fp- by Glorfindel

[ SmokeDetector | MS ] URL in title, blacklisted website in body, blacklisted website in title, link at end of body, blacklisted user: offersreviews.org/tl900-headlamp/ by user62151 on workplace.stackexchange.com

@unarist IMHO, we can keep the comments here, but it would be useful to have a link from an MS entry to the corresponding Smokey report here.

tpu- by Glorfindel

[ SmokeDetector | MS ] Link at end of answer: What to do when your site appears with foreign content in the Google search results and rankings plumet? by Lucie on webmasters.stackexchange.com

naa- by Glorfindel

[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, link at end of body, link following arrow in body, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: no2factoronline.com/jack-hammer-xl-reviews/ by aunixafuu on askubuntu.com (@ThomasWard)

tpu- by Glorfindel

[ SmokeDetector | MS ] Link at end of body, pattern-matching website in body, repeated URL at end of long post: What are the components used in XYZ Smart Collagen Cream? by xyzcollagencream on superuser.com

^^ that spammer is trying to get a high score in Automated Flagging

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, link following arrow in body, pattern-matching website in body: The Best Treatment For Body Acne by user635695 on askubuntu.com (@ThomasWard)

tpu- by Glorfindel

@unarist hmm, that sounds like a smart idea. Then we could have some sort of notes section which registered users can edit, or a command to send notes

hi folks, I've noticed a repeating spam for some "filepuma" site at Programmers. Today's occurrence is this and I found in my flag history one that happened about 10 days ago - this (10K link). Wonder if they attacked other sites too

[ SmokeDetector | MS ] Manually reported question: How to effectively promote the website? by File Puma on softwareengineering.stackexchange.com

tpu- by tripleee

@gnat I'll have a look if we have any hits in MS

@gnat 10 days ago, was that the same site? Then we can blacklist it.

stackexchange.com/search?q=filepuma.com contains a lot of false positives, the search is not exact

I meant to blacklist something like filepuma.com/download/glary_utilities, not the entire website.

I checked using per-site searchers, and there doesn't appear to be m=any FPs

I'm going to blacklist it

CI on 460202f succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev 460202f (angussidney: +filepuma.com --autopull) (running on teward/Aurora)

Restart: API quota is 7601.

@angussidney there's a bunch of pending PRs, could you do those, too please?

[ SmokeDetector | MS ] Few unique characters in body: I am one word but Who am I???? 8 by Hemansh Patel on puzzling.stackexchange.com

@tripleee I just had to turn off my computer, but I'll see if I can do them from mobile

@Glorfindel yes 10 days ago it was at the same site. @angussidney thanks!

fp- by Glorfindel

@gnat No problem, thanks for pointing it out!

@angussidney a few are listed as having conflicts in blacklisted_websites.txt which will probably be a bit pesky to solve

[ SmokeDetector | MS ] URL in title, bad keyword in body, link at end of body, repeated URL at end of long post: anradrol.com/jack-hammer-xl/ by user134594 on security.stackexchange.com

tpu- by Glorfindel

[ SmokeDetector | MS ] Bad keyword in body, pattern-matching website in body, repeated URL at end of long post: Thus, unmistakably as the year advances away by Offeir1977 on apple.stackexchange.com

[ SmokeDetector | MS ] Blacklisted website in body, link at end of body, repeated URL at end of long post: turnover to even out discoloration? by stinashelly on drupal.stackexchange.com

tpu- by tripleee on Thus, unmistakably as the year advances away [MS]

tpu- by tripleee

[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: www.ketonesbodyprotry.com/biocilium/ by user635699 on askubuntu.com (@ThomasWard)

tpu- by tripleee

@SmokeDetector k

CI on 5b78743 succeeded.

@tripleee yeah, I'll probably fix it up in the morning if someone else doesn't beat me to it

Like art is now

Ugh conflicts :P

CI on 14ae58f succeeded.

[ SmokeDetector | MS ] Blacklisted website in body, pattern-matching website in body: How Does the Intelleral Supplement Work? by user83012 on graphicdesign.stackexchange.com

tpu- by Glorfindel

!!/pull

[ SmokeDetector ] SmokeDetector started at rev 14ae58f (ArtOfCode: Merge pull request #402 from Charcoal-SE/auto-blacklist-1482907978.83) (running on teward/Aurora)

!!/blacklist-keyword Intelleral

@Glorfindel You don't have code privileges, but I've created a pull request for you.

Restart: API quota is 7477.

[ SmokeDetector | MS ] Bad keyword in answer, pattern-matching website in answer: How can I make a mobile app that is basically a mobile browser to access my live Drupal site? by Yatin Singh on drupal.stackexchange.com

tpu- by Glorfindel

[ SmokeDetector | MS ] Manually reported question: For preventing hair loss, caused by dandruff by WilliamMack on graphicdesign.stackexchange.com

tpu- by Glorfindel

!!/blacklist-website ketonesbodyprotry\.com

@Glorfindel You don't have code privileges, but I've created a pull request for you.

could metasmoke include rule hits on manually reported questions so we can easily see if it would have been caught if it hadn't been manually reported?

[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body, repeated URL at end of long post: which are troublesome for our skin to hold by Sooks1966 on workplace.stackexchange.com

tpu- by Glorfindel

[ SmokeDetector | MS ] Bad keyword in title, bad keyword with email in body, blacklisted website in body, repeated URL at end of long post: SAP BPC Online Training by user7349338 on stackoverflow.com (@dorukayhan)

tpu- by tripleee

@SmokeDetector k

[ SmokeDetector | MS ] URL-only title, bad keyword in body, blacklisted website in body, blacklisted website in title, link at end of body, repeated URL at end of long post: offersreviews.org/tl900-headlamp/ by user635708 on askubuntu.com (@ThomasWard)

tpu- by Glorfindel

[ SmokeDetector | MS ] Offensive answer detected: Running JAR on iPad/iPhone by Alex on stackoverflow.com (@dorukayhan)

naa- by Glorfindel

@tripleee that would have to be a smokey-side thing

metasmoke doesn't know what the conditions for the rules are, only that they exist, possibly maybe

CI on 1c642f4 succeeded.

CI on 5060b6a succeeded.

CI on d213d8f succeeded.

CI on ea91c75 succeeded.

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, pattern-matching website in body, repeated URL at end of long post: On the off chance that you begin to muscle by daliarita154 on stackoverflow.com (@dorukayhan)

@SmokeDetector k

@ArtOfCode um okay, so could Smokey run the rules on a post when it is reported?

In theory, yeah

CI on 9a4f512 succeeded.

CI on 18fd89a succeeded.

[ SmokeDetector | MS ] URL in title, blacklisted website in body, blacklisted website in title: offersreviews.org/tl900-headlamp/ by qasimmukhtarkassis on apple.stackexchange.com

tpu- by Glorfindel

!!/pull

[ SmokeDetector ] SmokeDetector started at rev 18fd89a (ArtOfCode: Merge pull request #403 from Charcoal-SE/auto-blacklist-1482908080.56) (running on teward/Aurora)

Restart: API quota is 7037.

[ SmokeDetector | MS ] Blacklisted website in body, link at end of body, link following arrow in body, repeated URL at end of long post: Sun Labs offers other sunless tanning by SatthewBrady on askubuntu.com (@ThomasWard)

tpu- by Glorfindel

[ SmokeDetector | MS ] Blacklisted website in body, link at end of body, repeated URL at end of long post: Livana Lift Reviews - Pure Product by tesbovilan01 on superuser.com

tpu- by Glorfindel

[ SmokeDetector | MS ] Few unique characters in body, no whitespace in body, repeating characters in body: Search for specific value from Array by Mr X on stackoverflow.com (@dorukayhan)

@SmokeDetector vandalism

Conflicting feedback on Search for specific value from Array.

!!/blacklist-keyword livana\Wlift

@tripleee You don't have code privileges, but I've created a pull request for you.

[ SmokeDetector | MS ] Pattern-matching website in body: Finally, maintain your marketing to a minimum. by blygonsmith on security.stackexchange.com

tpu- by Glorfindel

[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body: Independently, I didn't touch base all through its ominous impact till now. by Mincen1929 on superuser.com

tpu- by Glorfindel

CI on 9819b51 succeeded.

!!/blacklist-website healthyclubpro\.com

@tripleee You don't have code privileges, but I've created a pull request for you.

@tripleee any reason for using \W instead of \s? The latter will be interpreted correctly by MS in searching for TPs/FPs.

@Glorfindel huh? they match different things

I don't think handing \s but no other Perl escapes was a particularly useful hack, but I guess that's beside the point here

What's the difference between them? Does it depend on the regex flavour?

PCRE is what Smokey uses but I don't think I've seen any where they had different semantics

in Emacs \s has a quite different meaning, of course

\W matches a non-word character whereas \s only matches whitespace

ah, OK. I thought W = whitespace.

[ SmokeDetector | MS ] Link at end of answer: Shared network location in Availability Groups configuration by Ravi Theja Madisetty on dba.stackexchange.com

tpu- by tripleee

\w is "word character", i.e. equivalent to [a-zA-Z0-9'"] and probably a bunch of other punctuation

\s is whitespace, \S is not-whitespace.

no, \w is a word character, and \W is its complementary set; similarly, \S is the opposite of \s

so it is

[ SmokeDetector | MS ] Pattern-matching website in body: Feel the Most Excellent Shifting Agencies Solution for Seamless Goods Shipping by kanika on drupal.stackexchange.com

tpu- by tripleee

[ SmokeDetector | MS ] Link at end of answer: What Year Is the Ford Anglia? by Tim Kaye on scifi.stackexchange.com

tpu- by tripleee

!!/blacklist-keyword movers\Wand\Wpackers|packers\Wand\Wmovers

@tripleee You don't have code privileges, but I've created a pull request for you.

@tripleee missed the brackets, and I'm pretty sure we already have a pattern for that

didn't catch this one metasmoke.erwaysoftware.com/post/51559

what brackets?

| conditions need to have their operands surrounded by brackets

as in (X|Y) rather than X|Y

shouldn't the code fix that? but okay, is there any way for me to update the PR?

@tripleee push another commit to the same branch, in theory, but I believe we already have a pattern to catch that, which makes blacklisting it redundant

looks like the pattern looks for "in" after the phrase

just by looking at the other matches

correction, it looks for "packers.*movers" but not "movers.*packers"

and some rather weird context requirements

[ SmokeDetector | MS ] Pattern-matching website in body, repeated URL at end of long post: Niacin Max Reviews: 100% New Energy Doses Supplements by user217209 on apple.stackexchange.com

tpu- by tripleee

[ SmokeDetector | MS ] Bad keyword in title: AVAST helpline phone number by Uttam Negi on meta.stackexchange.com

tpu- by Glorfindel

[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body, repeated URL at end of long post: As we likely am attentive, standard impacts "skin safe" by dlfatoekds on workplace.stackexchange.com

tpu- by Glorfindel