« first day (1571 days earlier)      last day (2249 days later) » 

6:04 PM
Are we sure these numbers are right?
@henning: Consider the time a spam post is "live" on a site. That 400 hours is the total "live" time of all spam posted on a single day. For example: 100 posts in 1 day, with an average time to deletion of 5 minutes would mean 500 minutes in a day. That 400 hours is a order of magnitude more. — Cerbrus 3 hours ago
400 hours per day seems way too high.
 
I think he meant minutes*
 
@Undo Doesn't sound right to me, that would mean there are an average of 20 spam posts alive at any given time
 
he's saying that 500 minutes is 400 minutes more than 100 minutes (with 1 min ttd)
[tag:status-complicated]
 
cc @Cerbrus
 
Those comments are referencing this part of the question: "Before we started autoflagging, spam spent an average of 400 hours per day alive across the network; with autoflagging in place, the average is 10x less, at around 40 hours per day."
 
6:07 PM
I... still don't know. 400hr/day seems awfully high.
 
@NobodyNada this
I'm just quoting what the question said
 
Oh - Not accusing you of anything, just questioning the numbers
24,000 minutes compared to 2,400
eh, maybe. I could see that.
 
An average of 20 spam before we started flagging seems reasonable, at least for the heaviest offenders
six spam in 45 minutes
 
Note: across the network
On all sites
And I assume that also counts posts that took hours to delete
 
That might be a little on the low side then, actually
 
6:10 PM
How many posts do we see here daily? 100?
I think those 400 are minutes, not hours.
 
@Glorfindel 115 posts reported today, according to MS
 
400 hours is the total per day before autoflagging
40 with autoflagging
pretty sure those numbers are right
querying again, though
 
@ArtOfCode that'd mean the average spam post lives 4 hours.
 
@Glorfindel lived four hours ;)
 
I refuse to believe that.
4 minutes makes sense, 4 hours does not.
 
6:13 PM
My guess would be five to six, so 4 hours seems reasonable
@Glorfindel it was unreasonable. That's why Charcoal started.
53
Q: SPAM deluge over at WebApps (and pretty much all over SE)

Mat Related: Recent Mass Football Spam Web Applications's newest questions page is currently football-SPAM ridden to a surprising degree. Anything ordinary community members can/should do when something like this happens (apart from draining their SPAM flag quota)? Any way to notify someone/thi...

 
we're talking about the difference between 'before autoflagging' and 'with autoflagging'.
 
I'm not talking about The Dark Ages :)
 
but, it still seems believable
 
yeah, numbers are over
 
6:15 PM
Do we happen to have TTD stats for the dark ages? :P
 
and I now have no idea how I got them in the first place
56 hours/day total before autoflagging
7 after
 
Even that seems high
 
@JohnDvorak no, just anecdotal evidence.
 
I love how high quality the stickers are
I was able to put one on the back of my cellphone and it somehow sticks just fine
 
gotta keep your phone safe from spam...
 
6:26 PM
I want teh stickers @ArtOfCode
I pai with teh Paypal in U$ funds
 
@WELZ The charcoal logo does look stylish
 
@K.Dᴀᴠɪs it's Catija at this point.
 
cc @Catija
 
@SmokeDetector why
 
6:27 PM
Body - Position 1558-1739: ====</p>

<p>A <a href="https://stackoverflow.com/questions/48560402/conda-config-change-default-env-directory">similar question</a> has been asked before, with no answer, yet.</p>
 
@WELZ Depends. If you didn't sign up for the initial run, Catija doesn't have stickers for you - I only sent what was necessary to cover the signups.
 
tpu- by rollstuhlfahrer
 
lol stackoverflow is spam now
 
@ArtOfCode well, I think I signed up, I also pai with teh paypalz
 
6:28 PM
The rest of 'em are in a box next to me. Gotta figure out how to work any further stickers.
@WELZ Yeah, you did. Catija's got your stickers. That was a more general thing, "you" generic not specific.
YES OKAY SMOKEY WE GET IT
 
NVZ
@SmokeDetector what is going on?
 
Can someone mod tag whoever gave tpu
 
NVZ
Shut up, Smokey.
 
@rollstuhlfahrer
 
6:29 PM
Seems the fp was likely from someone who signed up just yesterday due to the meta post
@WELZ He's not bingable here
 
@NobodyNada how can they give feedback :/
 
@ArtOfCode You can sell them for mad moneyz
 
[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +3 more: dietplanusa.com/pura-bella/ by milindshora on graphicdesign.SE (@TetsuyaYamamoto)
 
sd 7poof
 
tpu- by K.Dᴀᴠɪs
 
6:30 PM
@WELZ that is an excellent question. They shouldn't be able to.
 
@ArtOfCode uh-oh
 
No Reviewer role on MS, and not hardcoded AFAIK
 
also not a mod.
 
Yeah, not hardcoded.
Bug.
 
we can ask them what they did.
 
6:31 PM
Well 100% invalided feedback isn't the best :)
but 1 of 1
 
Lol
wanna mod ping them @Art?
 
I think that feedback to SD shouldn't happen if you're not in chat tbh
 
Need to figure out how that feedback came to be, then we'll know where the bug is
@K.Dᴀᴠɪs MS review
 
NVZ
Mystery.
 
how did someone feedback via fire
 
NVZ
6:32 PM
Crime solving.
 
o_O
 
It could be advanced flagging...
 
Yeah I did the same thing when I joined fwiw
 
NVZ
Tune in.
 
FDSC or whatever it's called
 
6:33 PM
If you look at my feedback history, I have like 3 feedbacks from MS review, then 3 months later the proper stuff starts
 
That feedback didn't come from MS review, though. That needs Reviewer, and doesn't create feedbacks with the suffix.
I suspect a userscript, but the API should stop that
 
AF and FDSC sends feedback to MS for me... Without being in chat
 
last active in stackoverflow chat 2013 days ago, could not find a profile on stackexchange
 
@SmokeDetector f
 
@K.Dᴀᴠɪs yeah, that's by-design as long as you have the reviewer role on MS
 
6:36 PM
@ArtOfCode but it shouldn't if you're not pingable in chat imo
 
eh
 
@ArtOfCode yes but not in chat
 
well the feedback didn't come from chat, and it's not from review... so it must be via a userscript
Kinda points to a bug in whether the MS API checks for reviewer or not
 
@ArtOfCode if you didn't invalidate it we would have seen exactly where it came from :)
 
@ArtOfCode Doesn't API feedback show the application the feedback came from?
 
6:38 PM
@K.Dᴀᴠɪs still can, just needs a DB query
@NobodyNada if it's not invalidated, yeah
 
@ArtOfCode His just said "From Review"
 
^ Me for testing
 
Fwiw changing the url in the html on the review page from tpu to tpu- doesn't work
 
nope, it wouldn't
 
6:42 PM
[ SmokeDetector | MS ] Few unique characters in answer: object vs. primitive by Jack Dickinson on stackoverflow.com
 
So rollstuhlfahrer can't have "feedbacked" via MS
 
tpu- by FelixSFD
 
What is that even?
 
Some new user (rollstuhlfahrer) added a tpu- to a fp and we aren't sure how
 
talking about the SO post
 
6:44 PM
@CalvT븃 there is a "review" portal on the MS site, where you can give feedback.
not sure if that's how they did it.
 
@ThomasWard You need permissions for that
Zephyr is brand new and can't see that page
 
@ThomasWard Aye, and I just tried changing the tpu in the url to tpu- and it 404'd
 
Can't see API keys either
 
So, current state of meta post: Still able to address all major concerns technically.
(assuming RSS ever works)
 
API correctly stops unprivileged users feeding back. There's another bug around feedbacks and review results, but that's unrelated.
 
6:47 PM
@Undo
def is_rss_evil():
    return True;
:P
 
@Undo Probably a 12-year-old who thinks they're funny
 
So... I don't know how that feedback made it through.
 
def Undo(f):
   pass
fixed it @ThomasWard
 
Does MS log every request in prod? Can we check logs to see where the feedback came from?
 
can we ping the guy and ask him?
 
6:48 PM
I... should've thought of that
 
heh
 
@ArtOfCode Timestamp and username?
 
18:28, rollstuhlfahrer, UID 490
 
meh (-_-)
 
[ metasmoke ] ci/circleci success on becab93: Your tests passed on CircleCI!
 
6:52 PM
@ArtOfCode You sure? That was a rather boring minute
nevermind
 
hands @ArtOfCode the superping function
 
@Undo Dunno when in the minute it was, 18:28 is when the chat message for feedback was posted
Pull the feedback record? User.find(490).feedbacks.first and figure out how that was created
 
@ArtOfCode POST "/post/109308/spam_flag", 18:28:05
So the spam flag button on the web UI
 
New metasmoke user 'Christopher' created
 
@Undo IIRC JakeSymons was also using that to give feedback before he got privs.
 
6:55 PM
@Undo ah, sneaky little bugger. The button, that is.
Lemme lock that down
 
aye
If anyone comes complaining about a declined spam flag from our system... someone hit a red button named "spam flag", and it cast a spam flag. End of story on that one :P
 
Short story ...
@ArtOfCode you're going to disable that button for a disabled user (his name is German for wheelchair driver). That's ... not funny.
 
heh
 
Pushed, good to deploy
 
I don't even know where that button is
 
6:59 PM
On MS, I've seen it before
I think I even used it before
 
where is it?
 
It's only visible on non-deleted posts that aren't marked fp
 
oh forgot all about that.
 
It's only displayed if user_signed_in? && current_user.api_token.present? && !@post.is_fp && !@post.is_deleted? && Time.now - (@post.created_at || 1.day.ago) <= 1.hour && current_user.has_role?(:reviewer)
 
7:00 PM
IIRC it's below the post body, it's a little red flag with the label "Spam flag"
 
so... yeah, it's kinda rare to actually see it
 
When you put it that way... looks like basically never :P
 
not sure what it's even for
 
Smoke
 
casting a spam flag :P
 
7:00 PM
@Magisch Causing bugs.
 
@Glor that's what I thought it was - then found out that's autoflagging
 
I use it all the time. Awesome little button.
 
Non-deleted TP posts in the past hour, provided you are a reviewer with a valid write token.
 
Maybe we should rename the button to "Cast spam flag" to make it a bit more explicit what the button does?
 
@CalvT븃 yeah, confused here.
I've seen it before, but that was not it.
 
7:01 PM
@ArtOfCode So we're doing two reviews retroactive?
 
@Undo Not retroactive. There's a migration in there that'll duplicate feedback on old posts.
 
@ArtOfCode I'm guessing you just added the current_user.has_role?(:reviewer) bit?
 
[ metasmoke ] ci/circleci success on cfbb5d0: Your tests passed on CircleCI!
 
@CalvT븃 Yep, that's new
 
Icky, but less icky than hardcoding a date or doing 50k reviews :P
 
7:02 PM
Oh. That works
 
hey, and we got db/schema right this time \o/
 
@CalvT븃 Yep, along with controller protections to actually enforce it
 
deploying
 
can someone ping me with the link to userscripts so i remember? (charcoal-se.org/scripts)
 
7:04 PM
@Undo I'm curious: what do you use to deploy MS without downtime?
 
@NobodyNada Capistrano
As far as I can tell, it just shifts the downtime to random points at night when I'm sleeping :P
 
NVZ
@Undo Sleep is for the weak.
 
@Christopher known, just haven't written that page yet
 
@Undo Interesting...does it only work for Rails servers?
 
7:06 PM
(also, there is downtime - it gets everything ready to go in a new directory, then switches the old and new and restarts Passenger. Nginx is smart enough to queue requests, apparently)
@NobodyNada Written in Ruby, can be used for anything
 
NVZ
!!/blame
 
@NVZ It's Mithrandir's fault.
 
(it's really just a "do these steps over SSH" engine)
 
@Undo cool! I've been wanting to play around with Vapor when I have time, so I've been thinking about that sort of thing
 
hah
> With autocomplete, debugging, and breakpoints you'll spend more time creating and less time fixing.
Should read:
> With autocomplete, debugging, and breakpoints you'll spend more time creating (bugs) and less time fixing (bugs).
 
7:10 PM
@SmokeDetector :(
 
!!/blame᠎ ​᠎‌⁣‍
 
@ArtOfCode It's Mithrandir's fault.
 
We really need to replace the Mongolian vowel separators with a different character...
 
I bet half of CHQ has no idea what you're talking about.
 
I know what he's talking about
It's about the plan to take over Mongolia
 
7:16 PM
@Glorfindel One of the characters used for the "biased" !!/blame is visible on some machines
 
I'm using Lynx, I see everything ...
 
Just use base-6?
 
Did whatever was just changed with determining permissions for reviews break FDSC for me? I was giving feedback but now nothing happens when I click the links. I'm ♦ but don't have reviewer permissions on metasmoke. Had a look at metasmoke and looks like feedback I was giving never actually went through, but the links appeared to work for me before
 
@NobodyNada I can confirm that on iOS mobile
 
@grgarside I threw the reviewer permission on your account, should clear it up
 
7:25 PM
@ArtOfCode Okay great, thanks
 
@grgarside FWIW, mod diamond doesn't mean jack to MetaSmoke/FDSC. Art had to put Reviewer on my account like he did for you just now, for that to work :)
 
@SmokeDetector [FR] Make biased blame have a five percent change of outing the biaser.
 
doesn't mean anything to metasmoke (but it could), but definitely means something to people... if diamonds ask for privileges I tend to just do it
 
Basically anyone can get reviewer privs. Threshold is often just "know enough to ask"
 
unless you're a total asshole anywhere, in which case "No, go to hell" is the response :p
 
7:27 PM
oh so that is how i get reviewer
@ThomasWard so how did you get reviwer </joke>
 
lol
 
buuuurn
 
[ SmokeDetector | MS ] Bad keyword in link text in body: their mercantilist impulses by uefachampionsleague2018tv on english.SE
tpu- by John Dvorak
 
@SmokeDetector k
 
@Christopher You are not a privileged user. Please see the privileges wiki page for information on what privileges are and what is expected of privileged users.
 
7:29 PM
rip
 
how's that only 64?
 
speaking of 'burns'
@ArtOfCode should I add @Christopher to the perms for CHQ?
 
@ThomasWard Yeah I saw on the wiki about reviewer being separate to mod, but since I was only ever tried reviewing on my diamond site and didn't get any sort of error until now I didn't think more of it; rarely reviewed anyway.
 
yes
 
!!/watch thedaonline\.com
 
7:30 PM
@Glorfindel Added thedaonline\.com to watchlist
 
-2
Q: SECURITY OVER SHARED SWITCHES

Federico VazquezI need some advice: Our company is moving to a new building, where all access switches are managed by the IT Staff of this building, it means that we will not be able to manage them, and in some way all companies in different floors will be using the same physical network. We are going to be giv...

 
@Undo going through it now, changes committed. CI needs to catch up :p
 
Geoff got it
 
CI on 12a0852 succeeded. Message contains 'autopull', pulling...
[ SmokeDetector ] SmokeDetector started at rev 12a0852 (Thomas Ward: Give Christopher CHQ permissions. autopull) (running on teward/Lunar Eclipse)
Restart: API quota is 11403.
 
Oh thanks for reviewer
imma be back later when I can get userscripts ready
 
7:39 PM
Hey AMERICANS!!! I has your stickers!!! They'll be mailed today or tomorrow... if you're nice to me. :P They're really cool and I know you'll love them.
4
 
@Catija I'll pay you in cookie Emojis if you send mine out first
 
Okay, I just did the training series. Where do I get my unofficial official certificate?
 
meta smoke is drunk
 
(and where do I dump the nitpicking?)
 
@Tinkeringbell here hands it over
 
7:46 PM
@Christopher :D Thanks :)
 
Just got mine today so you know I am good
I mean i have used it before just never enabled auto flags XD
looking at the metasmoke graphs and they are hot pun intended
 
[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, email in answer, pattern-matching email in answer: If I buy Bitcoins at Coinbase.com, should I leave them on Coinbase.com, or should I move them into a Bitcoin Wallet? Why? by alliance hacker on bitcoin.SE
tpu- by Jake Symons
 
> most of the hackers out there are not really legit
You don't say...
 
@Christopher Uh oh, which thing is broken now? ;)
 
@Undo cache
18 mins ago, by SmokeDetector
[ SmokeDetector ] SmokeDetector started at rev 12a0852 (Thomas Ward: Give Christopher CHQ permissions. autopull) (running on teward/Lunar Eclipse)
 
7:51 PM
@Christopher Reviewer permissions have to be granted by a MS admin, and they're separate from SmokeDetector command privileges
(iirc)
 
confusing
!!/alive
 
@Christopher Of course
 
Jeez that was fast
!!/amiprivileged
 
@Christopher ✓ You are a privileged user.
 
Cool
 
7:53 PM
well, Smokey says you're privileged, but that's different than MS privs.
 
[ SmokeDetector | MS ] Few unique characters in answer, mostly dots in answer: Directory traversal in Spring framework by Maria Perez on stackoverflow.com
naa- by K.Dᴀᴠɪs
tpu- by Jake Symons
 
tpu
@SmokeDetector tpu
 
@Christopher Registered answer as true positive and blacklisted user.
@Christopher: It seems this is your first time sending feedback to SmokeDetector. Make sure you've read the guidance on your privileges, the available commands, and what feedback to use in different situations.
 
dashes, by the way, are useful.
 
-tpu
that what i should do?
 
7:54 PM
@Chris tpu-
 
^ that
 
ahh
 
but also consider...
2 days ago, by ArtOfCode
New policy: Please don't comment on posts Smokey reports unless you're familiar with the site.
^ this is still a rule :)
 
@Christopher you can also just put k as well if that's easier :)
 
7:56 PM
New metasmoke user 'Udi' created
 
you also have to do it as a reply directly to the Smokey post, but considering that it already registered your tpu... :P
you should also read the links it gave you :)
 
i have read them
I always read the docs before asking for anything with privledges :)
why-
interesting
@SmokeDetector why
 
Post - Contains 1 unique characters
Post - Post contains 45 dots out of 46 characters
 
there you go :p
 
yay
I am going to run a few more commands to get used to it :P
 
7:58 PM
just so long as you aren't casting crap reviews and so long as you don't make the bot shut off or something
I don't particularly care
!!/location
 
@ThomasWard teward/Lunar Eclipse
 
considering that's one of my instances, one of the other two would probably cover if you did kill this one
but I wouldn't be happy :P
 
[ SmokeDetector | MS ] Mostly dots in answer, blacklisted user: Directory traversal in Spring framework by Maria Perez on stackoverflow.com
 
Yeah not going to post FP
 
tpu- by Jake Symons
 
7:59 PM
@SmokeDetector k
 
@SmokeDetector naa-
 
naa- by teward
 
@Christopher - is for silent mode, but why is a command you want smokey to reply to so no - (it's ignored anyway but fwiw)
 
New metasmoke user 'BonsaiOak' created
 
@grgarside this bot is sketchy coding or somthing?
 

« first day (1571 days earlier)      last day (2249 days later) »