Just manually add <Directory /var/www/html> section and write whatever found on the web and .htaccess is working.

That's what I was asking ;) Does the thing break if you add <Directory :P

Yes. It does break if I add AllowOverride All directly.

I didn't know that I should add the whole section <Directory>.

@Tinkeringbell You're also getting both swags, right?

I added it into <VirtualHost *:80> section, which broke apache.

@iBug Oh... seemed logical to me, sorry. Seems like I have to be more precise ;)

@Magisch both? I'm getting something for the hat, I think it's a t-shirt? Will there be more?

@Tinkeringbell There was a smokey sticker thing, right?

That's seperate from the hat thing

@Magisch I'm not allowed to have any stickers... although that rule was in place when I was like 12, I should check if it's still live

@Magisch The charcoal contributors swag stickers, not the charcoal specific (smokey) ones.

[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +6 more: quicksupplementfact.com/total-radiance-teeth/ by vjyejzpqh on askubuntu.com

tpu- by iBug

I'm 11k away from 100k swag on SU :)

[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching website in body, +1 more: Perused our total radiance teeth audit to see by Hite19 Virk on graphicdesign.SE

tpu- by iBug

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, link following arrow in body, +1 more: How does Total Radiance Teeth Whitening Pen work? by Peres 19 on drupal.SE

tpu- by iBug

[ SmokeDetector | MS ] Bad keyword in answer: Is it possible to add a note to an Illustrator project similar to Photoshop? by naveen on graphicdesign.SE

tpu- by iBug

!!/report stackoverflow.com/a/48786689/4826457

[ SmokeDetector | MS ] Manually reported answer: AVR linker error, "relocation truncated to fit" by dacyjohn on stackoverflow.com

tpu- by iBug

^copy pasted blurb after random changes from accepted answer

spammers are getting a bit smarter

@DavidPostill That's awesome! :O

Is that the mug swag?

@Henders I guess so ... will have to wait and see ;)

!!/watch braindumps4it\.com

@SurajRao Added braindumps4it\.com to watchlist

CI on 428fb07 failed.

[ SmokeDetector | MS ] Potentially bad keyword in answer, blacklisted user: Electric Motor Project Not Working by Codebind Seo on physics.SE

tpu- by iBug

[ SmokeDetector | MS ] Link at end of answer: Forcing the from address when postfix relays over smtp by ZHANG Cheng on serverfault.com

fp- by iBug

!!/report serverfault.com/a/897206/283889

[ SmokeDetector | MS ] Manually reported answer: Forcing the from address when postfix relays over smtp by Support Wala on serverfault.com

!!/watch support\W?wala

tpu- by iBug

@Glorfindel Added support\W?wala to watchlist

sd k

@WELZ [:42852780] That message is not a report.

> our administration cost is noticeable than others.

CI on ccf127a failed.

@SmokeDetector why

@WELZ That's not a report.

Meanie

Soo... this FIRE thing keeps showing me 'Something went wrong while submitting a spam flag' when I use it to provide feedback. Could that be because I don't have an account on most sites?

Yes, that could be the problem.

@Glorfindel I'll be making a lot of accounts then :)

Here's a handy SEDE query for that.

@Glorfindel Ooh, thanks!

I was just thinking of scrolling up :P

[ SmokeDetector | MS ] Potentially bad keyword in body: DFPlayer Noise: Researched, Tried, and Bep Bep Bep Bep Bep by Joshua Roehrig on arduino.SE

fp- by iBug

[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: quicksupplementfact.com/total-radiance-teeth/ by vjyejzpqh on apple.SE

tpu- by iBug

@Tinkeringbell Do you have a linked metasmoke account?

Does your metasmoke account have your SE API Key?

@Magisch I think so?

Did you sign up for autoflagging?

@Magisch Yes

so that's not the issue then

@Glorfindel huh Stellar.SE .. new site?

did you have an account on the site where you tried to submit the spam flag?

Just wrote a small web dashboard in 2 hours or so.

@SurajRao and NEO Blockchain, Technical Communication, Constructed Languages

@Magisch No ;)

@Glorfindel TeComm is already being closed again

Other than that.. missing in Islam and Biblical... dont mix well with religion anyway

That was my question, when I click 'spam' on FIRE, it gives 2 messages: one about submitting feedback to metasmoke and the other about not being able to raise a spam flag...

Yeah

@Glorfindel any query to get list of sites in private beta?

FIRE submits feedback and, on tpu feedback, also submits a spam flag

@Magisch So, I need accounts or ignore the messages :P

yea

@Magisch I'm halfway there :P

@SurajRao does this work? area51.stackexchange.com/?tab=beta

ah right

thanks doh

[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +2 more: www.click2trial.com/max-trim-fx/ by CecileBaker on drupal.SE

tpu- by Mithrandir

@Tinkeringbell I think @Glorfindel made a SEDE query to show you sites that you don't have an account with

Oh nvm, just saw he posted it lol

[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: quicksupplementfact.com/total-radiance-teeth/ by user276327 on apple.SE

tpu- by iBug

@WELZ I think I have an account everywhere now ;) Thanks!

@Ferrybig: Try updating FIRE

@Tinkeringbell all the bells

no whistles though

[ userscripts ] continuous-integration/travis-ci/push success on e56ec6c: The Travis CI build passed

@Cerbrus Still see the issue 1.0.24

Can you inspect the icon? confirm there is new css on it?

(The <a> wrapper should have a transform-origin rule)

I have the feeling that the offset has become worst, actually, I get the css rules for you

Browser?

@Cerbrus Google Chrome, I see the updated css on .fire-settings-button

That's odd. It's working for me in chrome

OS?

Windows 10

Shoot, not a mac that I can blame

For me, the fire-settings-button is 16x16, but the span inside is 16.47x15 and left centered

Oh, it jsut updated for me

Derp

Reverted. My fix sucked and only made it worse.

I'm about ready to decry microsoft from the rooftops

after setting up 8 laptops by hand and uninstalling all the bloatware and trialware and garbageware and adware that comes bundled in with windows 10

@Ferrybig: I think it's gonna be a wontfix

@Cerbrus I'm happy with that, you usually don't need to access the settings after you setup fire

Please downgrade to .23 again

[ userscripts ] continuous-integration/travis-ci/push success on 4cb17bd: The Travis CI build passed

!!/report worldbuilding.stackexchange.com/a/104896/14743

[ SmokeDetector | MS ] Manually reported answer: Reason for an exterior control panel on a space ship by Dr. Puneet Chawla on worldbuilding.SE

tpu- by Tinkeringbell

!!/watch (vaastuwith)?puneet\W?chawla

@doppelgreener Added (vaastuwith)?puneet\W?chawla to watchlist

[ SmokeDetector | MS ] Hindi character in title, bad keyword in body, bad keyword in title: ஆभ-निकाहLove marriage specialist baba ji+91-7727887961 by Shivam Sharma on superuser.com

CI on 7f9719b failed.

@SmokeDetector k

tpu- by suraj

@ArtOfCode If people check that box and do a chargeback, you'll be in a world of hurt

@Magisch nah, I just go to paypal, show 'em the thing y'all ticked where it says "no refunds", and get 'em to give me the money back

@ArtOfCode That's ... not how paypal support works

Unless you have an actual signed contract (and even then sometimes) paypal will always side with the buyer

even if they don't side with the buyer they might perma ban your account afterwards or hold the money in escrow for months/years

source: years of bitter dealings with paypal

I do have a contract

those terms

we had those too at my minecraft server

"well we're siding with the buyer anyways, paypal's tos say we can refund them anyways"

maybe, maybe not

Paypal treats businesses like garbage

if someone ticks that box, they get buyer protection, but I get seller protection

Art is doing exactly what I did when accepting donations for a game community. I used to just take donations and respond automatically with an email saying "Thanks". Then mommy and daddy found out that little timmy was using their credit card. They issued a chargeback. I got angry. Solution: Send a token (card, sticker, something that costs next to nothing) via the mail as a thank you for the donation. Document that. Show that documentation to Paypal that they donated and I acknowledged

Never had a successful chargeback after that

However, I don't disagree that paypal sucks

I left them for other reasons.

Yup. Confirmation emails, and I'll get mailing receipts from the post office when I send 'em out

@Andy sounds like we should have done that

We only did a confirmation email

And in like 9/10 cases, paypal sided with the customer anyways

jokes on them charging back a minecraft server puts them on a very very widely used blacklist and on the perma ban list of thousands of minecraft servers

#1 stop shop to making your Minecraft MP account useless for playing on servers

Yup. Chargebacks got banned on my servers too

@Andy we were very vindictive and issued a global scale ban on that one banlist website too

mcbans I think

[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body, link following arrow in body, pattern-matching website in body: How lengthy the results of using this kit will last? by Indres 19 on workplace.SE

tpu- by iBug

[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: quicksupplementfact.com/total-radiance-teeth/ by zamara emoni on astronomy.SE

tpu- by iBug

Finished my first PHP project after 3 hours' hard work.

[ SmokeDetector | MS ] Mostly dots in answer: What does Kant mean by "Existence is not a predicate"? by Jolly on philosophy.SE

naa- by iBug

@SmokeDetector n

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, link following arrow in body, +1 more: There are many excellent qualities to this Total Radiance Teeth Whitening Pen by Indres 19 on superuser.com

tpu- by iBug

@Andy How did you deal when people maliciously bought things for an player they hated, and then issued a chargeback?

@iBug you've got security bugs :)

@ArtOfCode you... revised the code so quickly?

@iBug yup

just a quick scan through to check for the obvious vulnerabilities

that's incredibly impressive.

@iBug do you want details of the bugs, and where do you want 'em? :)

@ArtOfCode How many are there?

@iBug 2 I've found so far, kinda linked

@ArtOfCode Maybe explain it a little?

@iBug I can see an unrestricted file access bug, including an unprotected password file, and I can see a password security bug

@ArtOfCode err, I don't think it's unrestricted file access.

You're looking for submit.php line 20

It can only access .txt files in a given directory, and the name can contain only letters, digits and underscore.

@iBug only two of those things are true

the first and last

"in a given directory" is not, which is where the bug is

And at line 19 check_filename($filename)

where check_filename matches the argument against regex /^\w+$/ using preg_match...

@iBug yep, that verifies that it's only letters, digits, and underscore

so it's impossible for ./../../../../../etc/passwd to get through.

@iBug In theory, yes, but Unix paths have weird traversal capabilities

That's out of my knowledge :(

It's not a huge bug

AFAIK, in Unix paths or filenames, only single dot, double dots and slashes are special.

The secure way to do it is not to concatenate paths - use a dedicated path joiner (Python has os.path.join, not sure about PHP)

I'm extremely unsure what that is.

Once you've got the result out of that, resolve it down to an absolute path (i.e. no traverses), and then check it starts with the directory you want it to

I understand that. But I don't know what "weird traversal" is.

[ SmokeDetector | MS ] Link at end of answer: C3JS - Cannot read property 'category10' of undefined by Peter Doherty on stackoverflow.com

@iBug Python: os.path.join('/home', 'myuser', 'code') results in /home/myuser/code

@Ferrybig Never happened. I'm not sure how I would have, but it never came up so I never thought about that scenario

fp- by iBug

Using a path joiner removes the potential entirely

@ArtOfCode Thanks. I'll try if I can Google that out.

Aside from that, is there anything else?

@iBug Your other one is using MD5 for password security

I did that after giving up plain text.

which, is of course, "very secure" :)

Better than plain text, but not by much

At least, no one can retrieve that MD5.

I could reverse an MD5 hash in Not Very Long (tm)

@iBug In theory, no, but what if your server gets attacked?

[ SmokeDetector | MS ] Few unique characters in answer, repeating words in answer: Can "immigrant" be used to refer to a "person who moves from rural area to city"? by abdi on english.SE

tpu- by iBug

Nobody can access metasmoke passwords either, in theory, but they're bcrypt'd just in case

Yup. Server attack is not taken into account.

That's by design.

Absolute zero knowledge in PHP before writing this stuff.

@iBug bcrypt isn't significantly harder to use then md5, so why?

especially in php which has crypt()

Sounds reasonable.

Given that I soft-limited the length of the password to 16 characters, that won't make a great difference.

using maxlength="16" in the attributes of the input box, which is easily removed in F12 view.

you can stretch the pw with a user specfic pepper

and then use salt too so you fulfill all the crypto best practices

:D

@Magisch Just use password_hash and password_verify in php, those make the life of salts easy

omg..

[ SmokeDetector | MS ] Bad keyword with a link in answer: Connectjboss 4 with Firebird 3 via Jaybird 2.214-jdk1.6 by Florian on stackoverflow.com

naa- by Glorfindel

@SmokeDetector n

should that be closed as a dupe then?

Yepz. Already voted to close.

flaggered

Anyong aging under 20? Or born after Jan 1, 1998?

Except Mith who is already known.

Undo (I think)

Undo...??%#$&`\<^|

@iBug Undo is 16 I think

@Undo was it 16 or 18?

another one.

I think Undo turned 18 recently.

[ SmokeDetector | MS ] Link at end of answer: Convert cron expression into nice description strings? Is there a library for JAVA and Objective-C? by Thiago Diogo on stackoverflow.com

@Magisch not 16

would sound more reasonable if it's (born in) 1916 :)

@Undo I know you weren't the youngest SO mod

that was minitech iirc

And Riker is 15 as well.

goes to show you how little age matters here

well, it does, but only mental age

@Undo Python: >>> not 16: False, >>> False * 1: 0, so you are 0 ?

now I recognize your avatar @mith

It's the sister from Phineas & Ferb

Not sister.

@iBug I'm under 20

You're thinking of Candace. This is Isabella.

Topping at #9 among all guys of the same age on SO.

@iBug who are the other 8?

search "Same Age" on SEDE.

oh, my age is set to 1870/01/01

@iBug I've got 19k rep more than anyone else my age on Scifi.SE :D

how do they consider "my age" +/- 2 years?

The SEDE query doesn't, at least.

Without doubt, I'm the top one of my age on Android.SE :)

Well, I have my broadband back now, slight improvement

ENVY!

Restart: API quota is 15413.

@Magisch Think so. He was 14 or 15? I think I was 16 on day one there

14 on SR

fp- by Makyen

I feel like everyone's work internet is much faster

@WELZ Depends on 'which' work internet :P

The network we're officially supposed to use, is so restricted we can't work on it.

So everyone is using the unofficial unrestricted one for everything

[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body: Comparatively, you can discover by hiy26142 on askubuntu.com

tpu- by Tinkeringbell

Train wifi sucks

@Tinkeringbell Boat WiFi is worse in my (limited) experience.

@NisseEngström Lucky me.. I only have to walk, train and bus to get to and from work :P

I just walk.

^

@WELZ I could do that. If I start Sundays I might arrive Wednesday and if I started walking back right away I might be just in time to celebrate Saturday evening

Sounds busy :P

Solution: Private plane

Just take a giant eagle.

Yeah or; do you happen to live on-top of a tall mountain and your work is in the valley below? Because I'm thinking zip-wire

Not sure how you'd get home though...

Am I having deja vous from yesterday?

@ArtOfCode I'm not even sure I can get those... but I guess I'll ask?

@Catija Which part?

The speed tests.

Ah

@Catija Up to you if you wanna get those. As long as I can prove I sent 'em out that should be enough

@ArtOfCode I mean, the equivalent here is "Certified mail" but that costs like... $6 each.

@Henders zip wires? Mountains? In the Netherlands? :P

@Tinkeringbell Hmm, I'll keep thinking. For now, I'd go with Mithrandir and get some giant eagles.

@Undo interesting: I don't think the posts that are dying while autoflagging are showing up here either

that doesn't work off of send_not_flagged, does it?

Thank you, Smokey, for giving me the opportunity to rep cap on ELU.

@Catija huh

@Henders Any good stores that you know of, that are open in the evening? :P

@Tinkeringbell Giant Eagles R Us (24/7) would be my first port of call :P

@WELZ FP last night. I answered it, have since rep capped.

oh, nice!

I'm not usually on ELU, so I wouldn't have seen it otherwise.

you have nearly 3k rep there...

more rep than I have on my main account

My SE & SO stickers have also been received

Mine were supposed to come today but they haven't arrived yet

I haven't heard about it at all

@WELZ it's a matter of scale... I'm 20k+ on three sites, so 3k isn't a lot. :P

Smooth :P

Mine should arrive tomorrow

Bah - What's up with MS? I just went to it and it loaded in 400ms o.O

always like that

single worker means it depends on who else is hitting it

400ms is fast

@quartata it's probably more than one worker

though there's not enough traffic to saturate one, actually, unless everything's hitting really heavy actions

Pretty sure Undo said only 1

@ArtOfCode I can observe it when doing API dumps

@ArtOfCode That was my joke :P

yeah, heavy api usage wouldn't surprise me if it saturated

Normally I visit and there's a few seconds wait. This time I turned up and it was almost instant - It scared me!

someone musta hit the dashboard recently and cached it for you

@ArtOfCode like, the dashboard won't load until my program finishes fetching the current page

I suspect Half-Life has a similar effect

OH

I know why my stickers haven't arrived

because they got delivered to London not here

I guess I'll pick 'em up when I'm up there this weekend then :D

[ SmokeDetector | MS ] Shortened URL in answer: Lose weight or Gain Muscle? by user27847 on fitness.SE

I usually notice large MS delays when a new post is detected, delays lasting up to 10 sec are common (but if I do multiple requests at different intervals, the responses come in at the same time)

tpu- by ArtOfCode

^ The MS request for that post took 607ms, unusually quick for a new post

[ SmokeDetector | MS ] Bad pattern in URL answer: IdentityServer4 from .net framework 4.6 by Andy Walker on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword with a link in answer: Floating div goes outside container <li> by Olivier on stackoverflow.com

@Ferrybig We are on a t2.small now, to be fair

fp- by thesecretmaster on IdentityServer4 from .net framework 4.6 [MS]

@ArtOfCode ooh, nice!

@quartata Could probably bump that up now

@quartata It shouldn't

@Ferrybig We must have a new sticker vendor. Different shipment process and different looking SE stickers

The outline is different, content looks the same

It depends, I guess... if they ship direct from the vendor vs if they ship from a distribution center.

[ SmokeDetector | MS ] Bad keyword with email in body: For Sale: Bitman Antminer S9 Bitcoin Miner 14TH/S by Elokda Ihab on bitcoin.SE

tpu- by Makyen

naa- by ByteCommander on Floating div goes outside container <li> [MS]

@Undo Printex

[ SmokeDetector | MS ] Repeated URL at end of long post: short url (goo.gl) automatic in php because i have website by hRushi Soni on stackoverflow.com

fp- by Tinkeringbell

After the age discussion earlier it got me thinking, what are the ages of Charcoal memebrs? I made a Google form Please fill it out (Please only fill it out once) Responses will be visible here or here

It is anonymous^

[ SmokeDetector | MS ] Bad keyword with email in body: Reverse engineering a receiver? by Michelle on reverseengineering.SE

[ SmokeDetector | MS ] Bad keyword with email in answer: Turning Technologies RF receiver by Michelle on reverseengineering.SE

tpu- by WELZ on Reverse engineering a receiver? [MS]

tpu- by WELZ

@WELZ Rude... you don't ask ladies how old they are! :P

IKR?!

That's why its anon

@WELZ Still, it's nothing more than a circuitous way of asking a lady their age! :P

(Just teasing you, mine is all over IPS :P)

[ SmokeDetector | MS ] Shortened URL in answer: To play/be playing for Real Madrid by 艾锐心 on ell.SE

Do you have the option to make that a column bar graph or something?

Instead of a pie chart with 50 color coded options D:

hmm, lemme look

fp- by Tinkeringbell

@SmokeDetector fp-

I've suggested an edit to remove the URL shortening.

Are mods able to edit my last message?

[ SmokeDetector | MS ] Few unique characters in answer: Google spreadsheet, append the first columns of all sheets into one new column by I'-'I on stackoverflow.com

tp- by WELZ

Apparently, for a while my internet connection has been running over 1 telephone line instead of 2, leading to very slow speedtest results: speedtest.net/result/7058674487

Link to view responses data

@WELZ edited in :)

Thanks

that isn't creepy

Lol

🕵️‍♂️

Ugh, pie chart

Pie charts are only good for measuring cake poll responses.

@Mithrandir I linked a sheet, see my message^

[ SmokeDetector | MS ] Few unique characters in body: DeleteDeleteDelete by Michael R on dba.SE

tp- by Tinkeringbell

fill out your age!