« first day (1571 days earlier)      last day (2251 days later) » 

12:00 PM
We do a lot of mostly-invisible stuff, and when we do something big and visible it's often like this meta post where we deal with a bunch of criticism too. Figured it'd be worth a reminder that y'all are awesome useful people doing awesome useful work :)
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, bad keyword in username, blacklisted website in body, pattern-matching website in body: Revolyn Ultra: Does this work effectively to Loss Weight? by Revolyn Ultra on superuser.com
 
@SmokeDetector k
 
sd k
 
We're the cool and nice league of shadows
Unfortunately, I forgot my assassin's cowl
 
tpu- by tripleee
 
12:02 PM
Assassin cows?
 
@ArtOfCode In which case, I hope you sent yourself one too.
2
 
heh
 
@Henders but is he an awesome useful person doing awesome useful work :)?
All he does is say aye
And wreck Smokey
Everything else is probably Smokey telling him what to do
 
shrug
 
Essentially turning every one of us into puppets
And contributing to Illuminati's world dominance
@Henders wake up, Sheeple
 
12:08 PM
-1 point. I expected you to reply with gurhs
 
A J
@Henders yhw?
 
@Henders since someone stole that from me, I boycotted it
 
@AJ +1 point.
 
[ SmokeDetector | MS ] Pattern-matching website in answer: Billing module (Fee) for School Management Software by Sobia Waqar on stackoverflow.com
 
@M.A.R. ti dettocyob I, em mor.... Bah, I can't be bothered :P
 
@M.A.R. wrong
 
@tripleee that's just him mispronouncing "aye"
@Henders you're not a true master
I am, for I am even reversing the reversed
 
[ SmokeDetector | MS ] Bad keyword in body: nutritionextract com/testo-ram-uk/ by zkiorbajva on askubuntu.com
tpu- by Tinkeringbell
[ SmokeDetector | MS ] Manually reported answer: No module named 'x'; 'x' is not a package, using tkinter in python by Callum on stackoverflow.com
tpu- by suraj
 
@Henders You've used it ~1,000 times all time.
I've used it ~3,200 times all time.
 
12:18 PM
So just over 12% of all of my messages include it.
Yours is like 4% usage
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, link following arrow in body, +2 more: Tell Me More About provitazol? by Saked 19 on drupal.SE
 
You need to chat more ;)
 
tpu- by suraj
 
@Henders oh wow, you're really shy
I was expecting 80k chat messages
 
I tend to read rather than write :P
 
12:30 PM
@ArtOfCode nice work
 
Oh! and look another smiley
 
tis the perpetual smiley
 
@M.A.R. You're not shy at all, right?
 
[ SmokeDetector | MS ] Repeating characters in answer: Convert string to binary in python by gabagaba on stackoverflow.com
 
JAD
@SmokeDetector rude
 
12:33 PM
New metasmoke user 'Penn' created
 
Hello, @rene :)
 
@AJ gone
 
@Henders \o
 
@rene I trust you're blooming?
 
[ SmokeDetector | MS ] Manually reported question: PETROLEUM PRODUCTS ON FOB CI DIP AND PAY, CIF AND TTM PROCEDURE by Maksim Yaroslav on aviation.SE (@Federico)
tpu- by WELZ
 
A J
@SmokeDetector huh? already gone before I could hit Flag button.
 
@AJ yeah, I did not want to wait :P
 
A J
@Federico lol. no problem
 
@SmokeDetector Why wasn't that caught automatically?
 
12:36 PM
@WELZ Post manually reported by user Federico in room Charcoal HQ.
 
A J
lol
 
@Henders as never before
 
!!/watch (?:7\W*)?926\W*503\W*65\W*51
 
@tripleee Added (?:7\W*)?926\W*503\W*65\W*51 to watchlist
 
12:40 PM
 
!!/test neftegazconsultant@yandex.ru
 
> Potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Title - Position 1-29: neftegazconsultant@yandex.ru
Body - Position 1-29: neftegazconsultant@yandex.ru
Username - Position 1-29: neftegazconsultant@yandex.ru
 
@WELZ it should have been caught, but maybe I was too quick (2 minutes between posting and my report)
 
CI on 8737b91 succeeded. Message contains 'autopull', pulling...
Restart: API quota is 16059.
 
@Federico next time, try !!/scan
 
12:43 PM
!!/watch briskrange\.com
 
@WELZ Added briskrange\.com to watchlist
 
@Mithrandir I did earlier today, but force of habit takes over when in a rush :P I'll try to remember it next time
 
CI on aedb870 succeeded. Message contains 'autopull', pulling...
[ SmokeDetector ] SmokeDetector started at rev aedb870 (SmokeDetector: Auto watch of briskrange\.com by WELZ --autopull) (running on teward/Lunar Eclipse)
Restart: API quota is 16027.
 
!!/watch threadsphere\.bid
 
@WELZ Added threadsphere\.bid to watchlist
CI on f8bc01d succeeded. Message contains 'autopull', pulling...
[ SmokeDetector ] SmokeDetector started at rev f8bc01d (SmokeDetector: Auto watch of threadsphere\.bid by WELZ --autopull) (running on teward/Lunar Eclipse)
Restart: API quota is 16002.
New metasmoke user 'Mitja' created
 
12:56 PM
we stuff em chock full of bullets
 
@thesecretmaster > There have been 656 attempts to cast flags automatically on Stack Overflow in the last 3 months.
We were able to cast automatic flags 653 times (99.54%) and we were unable to cast automatic flags 3 times (0.46%).
The flags were 622 (95.25%) true positives (TPs) and 22 (3.37%) false positives (FPs).
622+22=644, what happened to the other 12 flags?
 
95.25 + 3.37 = 98.62
this mystery must be uncovered.
 
And There have been 1 688 attempts to cast flags automatically on Super User in the last 3 months.
We were able to cast automatic flags 1 682 times (99.64%) and we were unable to cast automatic flags 6 times (0.36%).
The flags were 1 681 (99.94%) true positives (TPs) and 3 (0.18%) false positives (FPs).
1681+3=1684 but we only cast 1682 flags!
 
99.94 + 0.18 = 100.12
math just exploded. it became more than the whole
 
@Tschallacka rounding?
 
1:05 PM
I chalck it up to referring to a wrong field in excel
 
Not 100% sure but think the unable to cast might refer to individual flags - so an individual post that should have been flagged might have 3 unable to flags per post.
 
@DavidPostill conflicting feedback?
 
I'm wondering why this one was autoflagged. It doesn't seem like it should, especially as the two reasons are strongly correlated
 
@Mithrandir Hmm. Could be ...
 
1:13 PM
metasmoke.erwaysoftware.com/search?utf8=✓&title=&body=&username=&why=&si‌​te=3&post_type=&feedback=conflicted&autoflagged=Yes&reason=&user_rep_direction=>%‌​3D&user_reputation=0&commit=Search
 
[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, blacklisted website in body, blacklisted website in title, +4 more: healthpurelives.com/nitridex/ by gtukrkwmx on askubuntu.com
 
@SmokeDetector k
 
tpu- by Floern
 
@MadScientist "Palmitate" might not be a useful bad keyword on Chemistry.
 
@MadScientist some people cough had their settings a little low
 
1:16 PM
example of why palmitate is on the list: metasmoke.erwaysoftware.com/post/62278
 
@Mithrandir But that has now been resolved by enforcing a minimum value for the setting, right?
 
(I think I changed my settings after that one.)
@Henders well...
 
@Henders minimum value was already enforced. It has been raised
 
Click "eligible flaggers"
 
pretty sure 197 would be flagged by me
 
1:18 PM
@Mithrandir Ah, thanks
 
That's already 99,75% though
 
!!/blacklist-keyword nitridex
 
@Federico I hadn't realised that there was a minimum figure before it was increased.
 
@tripleee Blacklisted nitridex
 
@Federico I see. However, some examples why it probably shouldn't be autoflagged on Chemistry: chemistry.stackexchange.com/search?q=palmitate
 
1:19 PM
@Henders it was 99.50%, and it got raised to 99.75%
 
these rules are essentially boiled down to the presence of a single word, a legitimate chemical name. That's far too aggressive in my opinion
 
@Mithrandir Ah I see, thanks
 
JAD
@MadScientist the single word isn't enough to trigger autoflagging (anymore) though
 
@Loong and out of all of those, the post in question is the only one that got detected by smokey
 
@Loong we can probably tweak the code to not detect it on Chemistry.SE
 
1:20 PM
@MadScientist Yeah, it could never be a candidate for 5 flag autoflagging unless it hits 4 filters at once
So this is just one of the 0,25% of posts that got hit with FP 3 flags
 
CI on 47dc2e8 succeeded. Message contains 'autopull', pulling...
[ SmokeDetector ] SmokeDetector started at rev 47dc2e8 (SmokeDetector: Auto blacklist of nitridex by tripleee --autopull) (running on teward/Lunar Eclipse)
Restart: API quota is 15676.
 
@Magisch The problem is that your stats are network wide. On Chemistry, the stats are far far worse. That's one of the problems of looking at this as a network-wide issue: you loose granularity.
 
@terdon Yeah we can take it out for chemistry
We already do that for several dozen other things
like "muscle" on health.SE
etc
We do fine tune keywords just for specific sites due to content
 
@terdon Agreed for chemistry
 
@terdon we need a person from statistics, because I am pretty sure that the sample size for Chemistry and Aviation is not significative enough
 
1:22 PM
@JAD it's not very far away from the new autoflagging threshold as far as I understand. And it's not a reasonable false positive, this indicates a fundamental issue with these particular rules and how they're applied on certain sites
 
@MadScientist 196 vs 300 is quite a ways away
>For one, 300 is unreachable unless it trips 4 reasons at once rather then 2
So single keyword FPs can never ever be eligible for 5 flag autoflagging
 
And yeah, some of our regexes are a bit too greedy
 
do multiple different keywords for the same rule count as different rules here?
 
@MadScientist nope
 
1:24 PM
@MadScientist no
"bad keyword" is a rule
for title and body they count seperately, but keywords alone will never make a post eligible for 5 flags autoflagging
 
JAD
@Federico uh, there are plenty enough data points to tell that chemistry more fps than 99.5%
 
@Federico It isn't, that's the problem. That's why it's hard to use network-wide stats for the smaller sites.
 
@JAD 14 data points is significant? that's why I am invoking a statistician, I personally would not know
 
JAD
hmm, what filter are we looking at exactly? I was looking at the 300 odd total reports on chemSE
 
@Federico You can't say from that. You would also need to take into account the full number of posts scanned. Which can be done, of course.
 
1:26 PM
I wouldn't even argue statistics here. Rules based on chemical or biological terms simply should never run on sites where those topics are on-topic. They're just harmful there
 
@JAD autoflags
 
(and no, I'm not a statistician, I've just been bitten by enough of them that I've caught a little of what they have)
 
@JAD the autoflagged ones only
 
@MadScientist Yes.
 
@MadScientist Sure, we can exempt certain sites from keywords.
We could also downgrade Palmitate to a potentially bad keyword (reason locked at 1 weight).
 
JAD
1:28 PM
Hmm, so there you have a 95% CI between 72.7% and 98.6% TP rate
which is wide, that's for sure
 
@MadScientist to add to the other nopes, you can see it in the example you linked: metasmoke.erwaysoftware.com/post/62958 194 = 97 + 97 (one per rule, even if the second one got triggered twice)
 
"alpha male" is also blacklisted, which IIRC caused an autoflag FP once.
 
@Federico that would also happen if the keywords are different?
 
@Mithrandir Yes, on biology.
On a crappy, off topic question, mind you, but not spam.
 
JAD
@MadScientist well, if blacklist in title triggers on another word than blacklist in body, sure
 
1:30 PM
@MadScientist depends. Some chemical sounding supplement names should be blacklisted on say chemistry.se
 
since they're not actual chemicals, just products used in spam
 
Actually, twice on Biology.SE
 
@Magisch There can also be valid questions though: "What does EnhanceYourStamina® actually contain? The label states: blah blah" or something
 
@terdon cross that bridge when we get there
 
1:32 PM
@terdon that's something that could e.g. happen on Skeptics
 
don't think random product names of uncommon alex jones tier supplements are ever going to be interesting enough for that
 
@terdon and unless they link to the site also there's no chance of it triggering 5 flags
 
@MadScientist Yes, there too.
 
@MadScientist Health site exemptions include skeptics.SE
 
Wait, why is Robotics.SE a health site? O_o
 
1:34 PM
Because some health related keywords come up on robotics
 
Smokey must've stuck it in there.
 
JAD
@Magisch like steroids for robots
Hmm, I wonder what our false negative rate is due to the exception for health sites on some keywords
 
@tripleee pictures, or it never happened.
 
@WELZ they're smaller than I expected from other pictures (this is a 15" laptop)
 
[awkwardly-waits]
 
1:40 PM
user image
2
 
they do look slightly smaller.
 
@tripleee Oh hey, ultimate spam protection! Just stick one of these on your screen and you'll never see spam again!
 
Lmao
 
Chem has more than enough users. Death to Charcoal
 
Hack the world!
 
1:51 PM
New metasmoke user 'James Hughes' created
 
@Mithrandir my impression is Bio is more FP prone than us
OTOH, most Chem spam hasn't be caught by Smokey, I think
They're often too weird
 
Excelent glass quality beakers for sale, buy now at excelentglassbeakersnotascam.com
 
I wish
It's usually alloys. Some idiot thinking chemists sit on platinum so they can buy gold
Or somesuch
 
@M.A.R. Smokey was not catching fuel "resellers" on aviation until I started reporting them here. Now they get caught ;)
 
@Federico hah, fuel resellers? They sell water vapor and carbon dioxide?
 
1:58 PM
@M.A.R. -_-'
 
JAD
@M.A.R. if only
 
!!/tea
 
@Federico brews a cup of green tea for @Federico
 
!!/test dentoaviation.com
 
> Potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Title - Position 1-18: dentoaviation.com
Body - Position 1-18: dentoaviation.com
Username - Position 1-18: dentoaviation.com
 
2:01 PM
ok, it got added, I forgot
 
!!/teast
 
@M.A.R. No such command 'teast'.
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching website in body, repeated URL at end of long post: Andras Fiber Reviews by robertmazon on astronomy.SE
 
@SmokeDetector I miss the times when a poor soul commanded something that wasn't a command and you just stood silent, mocking and giggling
@SmokeDetector K
 
New metasmoke user 'Eldho' created
 
@SmokeDetector is it just me, Or are we getting more users than yesterday?
 
2:06 PM
@M.A.R. both
 
@WELZ I am the lone supervisor
 
[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: healthpurelives.com/nitridex/ by user279040 on apple.SE
tpu- by WELZ
[ SmokeDetector | MS ] Few unique characters in answer, repeating characters in answer: How is centripetal force related to radius? by fahad ali on physics.SE
 
JAD
@SmokeDetector k
 
@SmokeDetector K
 
2:27 PM
New metasmoke user 'Matthieu M.' created
 
Is this spam? User has one more answer linking to one of the urls.
> You can read an eye-popping comparison between Twilio & TheTexting
marketing terms at play
 
[ SmokeDetector | MS ] Bad pattern in URL answer, pattern-matching website in answer: skullcandy earbuds with mic by nidhi on android.SE (@iBug)
tpu- by Magisch
tpu- by Tinkeringbell on skullcandy earbuds with mic [MS]
 
2:47 PM
@angussidney oh yes, all kinda fp come up with them
 
[ SmokeDetector | MS ] Bad keyword with email in body: Can "we'll get back to you" be an independent clause? by Stacy on english.SE
[ SmokeDetector | MS ] Few unique characters in body, repeating characters in body: C - function that compresses characters by George P. on stackoverflow.com
tp- by WELZ
 
@SmokeDetector F
@SurajRao very suspicious. Can you ask a mod like Bhargav?
 
3:04 PM
@SurajRao Looks like spam to me. 2 answers promoting the same product
 
3:16 PM
[ SmokeDetector | MS ] Bad keyword with a link in answer, bad pattern in URL answer: Android - How to run full method before triggering TextWatcher? by anderson on stackoverflow.com
 
@Seth There's nothing there anyway IIRC
Or at least nothing anyone here would care about
@Mithrandir Nothing, because I'd be watching it and shut it off when I leave.
 
@Undo true
 
@Henders 3 gigabytes. Ya'll have been busy :P
 
Wow :o
 
@Undo Hooooowly . . .
 
3:20 PM
I have no idea why s3cmd doesn't work in a cron job.
> [part 2 of 200, 15MB]
 
@Undo different environment? There could be error messages in the cron log that help.
 
@MadScientist That's what I was thinking. I found the cron log - no error messages, and modifying the job to print s3cmd's config shows that it's identical to that of the CLI environment.
 
I assume all paths are absolute in the cron job?
 
Should be, let me check
#!/bin/bash

HOME=/home/ubuntu

bucket="s3://erwaysoftware.mysqlbackups"

# Timestamp (sortable AND readable)
stamp=`date +"%s - %A %d %B %Y @ %H%M"`

for filename in /var/railsapps/*/shared/log/production.log; do
	APPNAME=`echo $filename | cut -d \/ -f 4`
	echo Backing up $APPNAME

	object="$bucket/$stamp/$APPNAME.log.gz"

	gzip -c $filename | s3cmd put - "$object" --multipart-chunk-size-mb=100
	s3cmd --dump-config
	echo Done
	# rm $filename
done
 
Yeah, use the full path to s3cmd
 
3:27 PM
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, link following arrow in body, +1 more: Working of Total Radiance Teeth Whitening Pen Teeth Whitening Kit by Thicest 31 on drupal.SE
 
Cron uses its own (hardcoded) PATH
 
tpu- by K.Dᴀᴠɪs
 
You may as well quote $filename while you're at it, this will break on file names with spaces.
 
@terdon Will try it, but it's working with --dump-config so it definitely finds the binary
 
is MS down?
 
3:28 PM
Good point. No spaces to the path right now, but good fix.
@K.Dᴀᴠɪs probably
 
@Undo Oh. That's odd.
 
New metasmoke user 'anothernode' created
 
Add a 2> /tmp/some.log to the cron line and see if that gives you anything useful.
 
Do I have to touch that file first, or will it auto-create?
177/200, almost there
 
It will autocreate
Another possibility is that it doesn't find gzip. It should, IRC cron uses /bin and /usr/bin as its path but you never know.
 
3:30 PM
This'd probably be way faster in 500MB chunks - EC2 has a stable connection to S3, I would hope.
which gzip
/bin/gzip
Will concrete-ify that one, too
 
I'd asked a question about this, I was really surprised that it was hardcoded: unix.stackexchange.com/q/401621/22222
 
@Undo yep, it's down alright.
 
It is right now, I'm doing some heavy stuff
Rebooting, then should be all happy
@terdon Wow, that's a little strange.
Okay, updated job:
#!/bin/bash

HOME=/home/ubuntu

bucket="s3://erwaysoftware.mysqlbackups"

# Timestamp (sortable AND readable)
stamp=`date +"%s - %A %d %B %Y @ %H%M"`

for filename in /var/railsapps/*/shared/log/production.log; do
	APPNAME=`echo $filename | cut -d \/ -f 4`
	echo Backing up $APPNAME

	object="$bucket/$stamp/$APPNAME.log.gz"

	/bin/gzip -c $filename | /usr/local/bin/s3cmd put - "$object" --multipart-chunk-size-mb=100
	/usr/local/bin/s3cmd --dump-config
	echo Done
	# rm $filename
done
 
@Undo Innit though?
 
And crontab line:
03 20 * * * /bin/bash /home/ubuntu/rails-log-backup/run.sh 2> /tmp/railslogbackup.log
Verified that running it with sh run.sh works
 
3:36 PM
Looks about right.
 
Adjusted cron to run in the next minute
 
!!/watch bubbly\W?hub
 
@Mithrandir Added bubbly\W?hub to watchlist
 
@Undo That's running it with sh (dash on Ubuntu), not bash. Should not be relevant here, I don't see any bashishms, but might be an issue at other times.
 
3:37 PM
tpu- by xfix
 
Spammed and immediately self-deleted, added based on info from other mods
 
cat /tmp/railslogbackup.log
gzip: /var/railsapps/redunda/shared/log/production.log: file size changed while zipping
gzip: /var/railsapps/sentinel/shared/log/production.log: file size changed while zipping
well then
 
Ah! Nice.
Yay for informative error messages!
 
CI on 84c9cfd succeeded. Message contains 'autopull', pulling...
[ SmokeDetector ] SmokeDetector started at rev 84c9cfd (SmokeDetector: Auto watch of bubbly\W?hub by Mithrandir --autopull) (running on teward/Lunar Eclipse)
 
Do I just have to copy them before gzipping, or is there some other way to avoid that error?
 
3:38 PM
@Mithrandir that one hit RPG.se too. Was just coming here to watchlist it. Thanks.
 
Restart: API quota is 14074.
 
Those logs should be append-only.
 
I always add export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/ga‌​mes:/usr/games:/bin/did-you-really-scan-for-every-path-in-this-chat/bin" on top of my cron scripts, just to avoid PATH issues with my cron jobs
 
@Undo Obviously, the real fix would be to make sure nothing's writing to /var/railsapps/redunda/shared/log/production.log, but if that's not an option, try cat "$filename" | gzip -c | ...
 
Bah, I hate debugging cron issues. Fix for 20 seconds then just sit there waiting for ~40 seconds until the next one runs.
 
3:39 PM
@Henders or type like mad to get the right numbers in the next five seconds
 
> did-you-really-scan-for-every-path-in-this-chat
 
@Undo Usually, logrotate handles these issues by first moving the log files to a new place, then reloading the program, and on the next rotation, apply gzip, as no problem should write to a log file for 24 hour non-stop
 
#!/bin/bash

HOME=/home/ubuntu

bucket="s3://erwaysoftware.mysqlbackups"

# Timestamp (sortable AND readable)
stamp=`date +"%s - %A %d %B %Y @ %H%M"`

for filename in /var/railsapps/*/shared/log/production.log; do
	APPNAME=`echo $filename | cut -d \/ -f 4`
	echo Backing up $APPNAME

	object="$bucket/$stamp/$APPNAME.log.gz"

	cat "$filename" | /bin/gzip -c | /usr/local/bin/s3cmd put - "$object" --multipart-chunk-size-mb=100
	/usr/local/bin/s3cmd --dump-config
	echo Done
	# rm $filename
done
There we go
 
Works?
 
Looks like it
Pointing to the right bucket, we'll see if it still works
 
3:43 PM
Logrotate and dumping the latest log as @Ferrybig suggested would be more elegant, but hey.
 
There we go. Awesome
Thanks @terdon @Ferrybig
 
np
 
3:54 PM
Have we learned much since yesterday about the spammer business model?
 
New metasmoke user 'chnlovegons' created
New metasmoke user 'Jeff Schaller' created
 

« first day (1571 days earlier)      last day (2251 days later) »