« first day (1662 days earlier)      last day (2157 days later) » 

> Url in title, potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Title - Position 13-23: drmare.com
Title - Position 1-23: https://www.drmare.com
Body - Position 13-23: drmare.com
Username - Position 13-23: drmare.com
 
10:10 AM
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body, +1 more: to begin with the best eating regimen pill by Mooreboyz on superuser.com
tpu- by PeterJ
 
I think that posts should expand downwards when using FIRE and AIM, it's too easy to follow the link to a post when you want to just send feedback
 
what does it mean to add a tag to a report?
on MS
 
@micsthepick it allows us to group that post together with other posts with the same tag
 
okay
but do people use that feature often?
 
10:22 AM
so if you have many posts which are similar and you can't connect them easily e.g. based on the domain name in the URL this is a useful facility to help us start grouping them together
 
@micsthepick I do
 
@micsthepick not particularly, it's a fairly new feature and a lot of the time tags on the extracted domains are enough
 
lol askmespam.com
 
@SmokeDetector still alive, needs flags
 
literally ratting itself out
 
10:23 AM
but e.g. hacking, ATM cards, voodoo doctor, payday loans etc often don't have a good keyword to group them, so I try to tag these when I see them
@JakeSymons that's domains, not posts
tags on posts have less visibility but look e.g. here
notice the "what=posts" at the end of the URL
 
@tripleee Oh ok so domains and tags are separate but use the same tags :)
 
@JakeSymons yeah, the posts were grafted on as an afterthought
5000 Namecheap spams was not a very bad estimate, this gets 4957: metasmoke.erwaysoftware.com/data/sql/queries/…
 
[ SmokeDetector | MS ] Bad keyword in body, pattern-matching website in body, phone number detected in title, potentially bad keyword in body: Dehradun Escorts Agency 09953658437, offer Top Class Escort Services? by user9832825 on meta.SE
tpu- by tripleee
 
!!/blacklist-website dehradunescorts\.in
 
@tripleee Blacklisted dehradunescorts\.in
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, body starts with title and ends in URL, pattern-matching website in body: ToneSlim Consumes fat: This weight reduction supplement by mxokos on graphicdesign.SE
tpu- by micsthepick
 
10:29 AM
is there a way of watching phone numbers?
 
@micsthepick just the regular !!/watch for everything but the format we use is ... tricky
 
@tripleee I'll try not to mess that one up by doing it, is there a regex guide for watches anywhere
 
basically [a-z_]*(?:1_*)?123[\W_]*456[\W_]*7890[a-z_]* for a US number
@JakeSymons nothing very current, we worked this out with Makyen in chat a couple of weeks ago
 
@tripleee Oh ok, I'll flick back through later
 
[ SmokeDetector | MS ] Bad keyword in body, link at end of body: Avira not taking automatic update on regular basis by Alina Clark on drupal.SE
 
10:30 AM
@tripleee Which is pretty useless as there are plenty of non US phone numbers spammed.
 
tpu- by tripleee
[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +7 more: www.nutritionfit.org/purefit-keto/ by Beenot47 on drupal.SE
 
@DavidPostill we have adaptations for other locales but you have to know the local grouping conventions
 
tpu- by Ashish Ahuja
 
for something which had wild variation I basically put in [\W_]* between each digit
 
10:31 AM
> Would not be caught as an answer.
 
Why I got this error message when try to flag from charcoal ? Is this related to privilege.
`key` is not valid for passed `access_token`, token not found.
 
@tripleee Which, of course, aren't always followed. For example I can write my phone number in about 5 different ways, all of which are acceptable formats.
 
!!/watch customer-help-number.com
 
@micsthepick You don't have code privileges, but I've created PR#2233 for you.
 
@DavidPostill if we observe variation we adapt the regex, this has worked out pretty well but it does require an update when they find a way around it
 
10:33 AM
@tripleee Good luck with that then.
 
which is why we have an issue about revamping phone numbers into their own category in Github, which is really the proper way to do this
 
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +1 more: Lose Body Weight By Meal These Superfoods by Bkozdseowr on askubuntu.com
tpu- by PeterJ
tpu- by tripleee
[ SmokeDetector | MS ] Bad NS for domain in body, blacklisted website in body, link at end of body, pattern-matching website in body, potentially bad keyword in body, +1 more: KETOFIRM SUPPLEMENT REVIEW by tinaenri on askubuntu.com
tpu- by micsthepick
 
+44(0)1234567890
+441234567890
0123-456-7890
01234567890
00441234567890
Are all valid formats for UK phone numbers, and there are more variants I can't be bothered typing.
 
indeed, the proper solution is to normalize those to just digits and then compare, but nobody has been putting in the work ... should not be hard
 
The last two would probably generate a lot of FPs as well
 
!!/blacklist-keyword ketofirm
 
@micsthepick You don't have code privileges, but I've created PR#2234 for you.
 
Zoe
!!/test ketofirm
 
> Potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Title - Position 1-9: ketofirm
Body - Position 1-9: ketofirm
Username - Position 1-9: ketofirm
 
!!/unwatch keto\W?firm
 
10:40 AM
@tripleee Removed keto\W?firm from watchlist
 
only 113 Namecheap domains though metasmoke.erwaysoftware.com/data/sql/queries/…
 
[ SmokeDetector | MS ] Offensive answer detected: Guitar Input Problems by Bjorn on music.SE
fp- by Glorfindel
 
A J
@SmokeDetector naa-
 
naa- by Glorfindel
 
@SmokeDetector n
 
A J
10:46 AM
@Glorfindel Two feedbacks?
 
[ SmokeDetector | MS ] Few unique characters in answer: How to resolve git's "not something we can merge" error by Parth Barot on stackoverflow.com
tpu- by Zoe
naa- by Glorfindel
 
A J
@SmokeDetector naa-
 
naa- by Glorfindel
 
A J
Account is hacked or something?
 
@SmokeDetector cat on keyboard
 
A J
10:47 AM
Looks like a legitimate user to me.
 
@Glorfindel say wha?
 
"lol lol lol" is not a cat
 
Zoe
^
!!/location
 
@Zoe teward/Solar Flare
 
is that some sort of euphemism?
 
10:49 AM
@tripleee Hmm. Clicking on that link times out, but I can get to it via github.com/Charcoal-SE !?
 
Zoe
Works fine for me
 
Some browser oddity probably
 
oh, a meme.
 
And now it works. Go figure.
 
10:51 AM
@micsthepick "cat on keyboard" describes what happens if e.g. a cat sits on your keyboard and creates random key presses, accidentally posting nonsense stuff. We flag random gibberish as abusive from new users, but give established users a chance and only NAA those, as the probability of a "cat on keyboard" accident is higher than that of trolling.
 
Zoe
@DavidPostill Or it's Microsoft's fault! :p
 
@ByteCommander So that cat has managed to type those actual words and then clicked the answer button as well, that's one clever cat :)
 
CI on 17540bc succeeded. Message contains 'autopull', pulling...
CI on 561afa0 failed.
Restart: API quota is 12699.
 
@DavidPostill the github issue? that's weird, but I saw some weird connectivity problems to Github yesterday
 
11:06 AM
[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: www.nutritionfit.org/purefit-keto/ by Kelin1991 on askubuntu.com
tpu- by micsthepick
Restart: API quota is 12550.
 
11:27 AM
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, body starts with title and ends in URL, +1 more: Rapid Tone Diet by user837978 on askubuntu.com
tpu- by PeterJ
[ SmokeDetector | MS ] Luncheon meat detected, no whitespace in answer: Change pseudoclass before position with js or jQuery smoothly by sangeetha lukney on stackoverflow.com
 
@SmokeDetector tp- (deleted by owner)
 
tp- by micsthepick
naa- by tripleee
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, pattern-matching website in body: Pryazine Male Enhancement Trial Reviews by beeshmekal on stackoverflow.com
tpu- by Ashish Ahuja
[ SmokeDetector | MS ] Manually reported answer: passing php variable in mysql update by ccccccccc on stackoverflow.com
tpu- by WELZ
naa- by tripleee
 
oh, can't link to deleted comments
 
Screenshot?
 
> Ccccccccc, please write your answer in English, as Stack Overflow is an English only site. – Shree 2 mins ago
 
11:37 AM
Technically you just did :P
 
@tripleee English - instead of Gibberish
That's kinda how I feel, if the text is legible as not just pure gibberish (like "test test test" etc.) then I'd say naa, if it's pur nonsense (like "cvqhjbfc ewafbvr" I say r/a)
 
yeah, just struck me as humorous to assume that knrini inomma inrm oojrjml pnrim 0ernfal; is in a foreign language
 
@tripleee and that he refers to the user as "Ccccccccc"
 
@tripleee Natty in SOBotics detected as a Non-english post, so guess the user just blindly followed that.
 
@WELZ that was their user name
or you mean the capitalization?
@AshishAhuja ah, make sense
 
11:46 AM
Seems to have alot of spam about rapid tone diet ;)
 
they rotate product names several times a week, today that's the one but this is not unusual
 
@tripleee Who
 
@TheMaskedRebel see this meta post
20
Q: What do we know about the Stack Exchange pharma spammer?

tripleeeI am creating this question to collect any relevant observations you can provide about the dominant spammer in the Stack Exchange network. More specifically, I am asking about the spammer who currently dominates the Metasmoke spam archive collected by the Charcoal HQ volunteer anti-spam effort. ...

should probably post a new answer before the 1-year anniversary, our tooling has improved a lot and along with that our understanding
 
@tripleee The clearly gibberish name as well (when added with the gibberish post)
(meta post) Try changing you location in your SE profile...
 
@WELZ Probably a bug
 
11:56 AM
@TheMaskedRebel that's why he tagged it [tag:bug] I'm sure
 
[ SmokeDetector | MS ] Blacklisted website in answer, potentially bad keyword in answer, potentially bad keyword in username: How can I hack in health? by Liam Jermy on gaming.SE
tpu- by WELZ
 
@tripleee indeed. :•)
 
[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: www.healthyorder.org/ketofirm/ by Gark1982 on drupal.SE
tpu- by WELZ
 
2 autoflags in a row :o
 
!!/blame
 
11:58 AM
@tripleee It's Pritt Balagopal's fault.
 
bah, I would have thought @WELZ
 
!!/blame
 
@TheMaskedRebel It's terdon's fault.
 
never gonna catch me :P
 
conflicting messaging there
 
11:59 AM
!!/blame
 
@TheMaskedRebel It's Makyen's fault.
 
If you really need it to blame me...
!!/blame᠎ ​⁣‍᠎᠎‍
 
@WELZ It's WELZ's fault.
 
@WELZ I'm too lazy to install iBug's hack
 
A J
!!/blame
 
12:00 PM
@AJ It's Zanna's fault.
 
but thanks for taking care of things
ELL looks like the big winner at #10 in the May stats, up from 14th rank in April
 
fp- by tripleee
 
but VVVVLQ
 
[ SmokeDetector | MS ] Bad keyword with email in answer, email in answer: How Does Making a Skill Legendary Affect Spells? by Koko M Kalu on gaming.SE
tpu- by PeterJ
[ SmokeDetector | MS ] Potentially bad keyword in answer: Can I delete unnecessary device simulators of Xcode? by Ricardo Barroso on apple.SE
fp- by ByteCommander
 
-1
Q: Getting started with ubuntu, as well as emails for Ubuntu

Lara StardustI ask these questions of you: I am not a newbie with ubuntu, that is to say, about 2 years ago I bought a ubuntu server[rented], and have been tinkering a bit ever since, I have a friend who does the major operations, but wish to learn more myself. Thus, question 1, what articles do you persona...

@WELZ that is not spam but it should be closed immediately
 
12:12 PM
[ SmokeDetector | MS ] Bad keyword with email in answer: How to remove remote origin from Git repo by annita on stackoverflow.com
[ SmokeDetector | MS ] Bad keyword with email in answer, email in answer, blacklisted user: How Does Making a Skill Legendary Affect Spells? by Koko M Kalu on gaming.SE
 
!!/scan
 
@TheMaskedRebel Missing an argument.
tpu- by PeterJ
 
@TheMaskedRebel I can't vtc on that site.
 
[ SmokeDetector | MS ] Link at end of answer: how to print svg in a in html page? by babar junaid on stackoverflow.com
naa- by ByteCommander
[ SmokeDetector | MS ] Link at end of answer: Pageviews are not updating in Google Analytics by Anusha M on stackoverflow.com
naa- by tripleee
[ SmokeDetector | MS ] Potentially bad keyword in answer, username similar to website in answer: Publicly Available Datasets by data turks on datascience.SE
[ SmokeDetector | MS ] Potentially bad keyword in answer, username similar to website in answer: Dataset for Named Entity Recognition on Informal Text by data turks on datascience.SE
fp- by tripleee on Publicly Available Datasets [MS]
 
oh wait
 
12:18 PM
tpu- by tripleee
 
@SmokeDetector k
 
[ SmokeDetector | MS ] Manually reported answer: How many tectonic plates should my planet have? And why? by ForumCancer on worldbuilding.SE
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body: How to Make an AR app? by Priti Singh on superuser.com
tpu- by tripleee
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +1 more: specialist when you're taking anything like Keto Firm Forskolin Extract. by ClaudiaHoyt on superuser.com
tpu- by PeterJ
 
What's the core limit atm? 60 feedbacks?
 
I think we are back to entirely subjective
I've pinned yours now
60/30 is I think what still triggers the dynamic one
 
Well I've made a query on blazer that shows users with the most invalidated feedback, but only for users with over 60 feedbacks
That limit is to make it more relevant, as there are quite a few with a small number of feedbacks, and one or two invalidated, making their percentage high
 
good stuff
 
[ SmokeDetector | MS ] Phone number detected in title, potentially bad keyword in title: Call 1-844-738-0444 to know how to reco@ver turb@otax pas@sword by Nolancole on superuser.com
tpu- by ByteCommander
 
12:49 PM
that's a weird one
 
1:04 PM
@CalvT Thanks for that!
@Calvt finally removed the Chinese character from your username :D
 
I tried to expose the roles but my SQL skillz are insufficient as usual, anybody able to fix this? metasmoke.erwaysoftware.com/data/sql/queries/…
 
@tripleee very broken.
 
@rene I don't think I can suspend Shog even if I tried. I can suspend a regular mod, but not Shog ;)
 
#forScience
 
@WELZ that's a loss, regardless of how it makes some things convenient
 
1:19 PM
!!/alive
 
@WELZ Of course
 
Alive is too long, can we add in !!/live
 
@Mithrandir Oooer. Have I missed some drama? ;)
 
[ SmokeDetector | MS ] Manually reported answer: jQuery Clone table row by Ajay on stackoverflow.com
naa- by tripleee
tpu- by DavidPostill
 
You suspended Shog? — rene 40 mins ago
 
1:24 PM
Ah
 
@WELZ if you want to abbreviate something, a good abbreviation for !!/blacklist-website would be welcome
!!/blub
 
@tripleee No such command 'blub'.
 
@JF what's Githawk?
 
@tripleee how is that blacklist website?
 
github.com/GitHawkApp/GitHawk says "a github manager for IOS"
one of the few I haven't tried yet I guess
 
Yes, I see that. What does it do that requires an admin to grant it access?
 
@tripleee we can try '!!/blacklist-site' (but you want shorter)
 
when I tried a few IOS Github apps they all required admin approval, I think for doing things in teams you are a member of
 
J F
@Andy You can’t post comments or add reactions without access.
 
except the one I liked the most, apparently because it doesn't even try to work in teams
 
1:29 PM
@DavidPostill for context:
Mar 15 at 22:04, by quartata
that was definitely not the right button
 
@WELZ @tripleee !!/blw
 
@Mithrandir If you tried we wouldn't have had this conversation I guess ;)
 
@rene I took a look, actually, doesn't look possible
 
Just hack a raw POST with his userid in it ... don't tell him I told you ...
 
@rene I don't know how :P
 
@Mithrandir we need a blackhat hacker ...
 
fp- by Glorfindel
 
𝄞 ♫ I suspended Shog9 ♫ (but I did not suspend Tinker Tim) ♩♭
 
[ SmokeDetector | MS ] Bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, blacklisted website in body, +3 more: supplement4order.com/ketogen-pure/ by galakmax on apple.SE
tpu- by Glorfindel
 
1:45 PM
@tripleee You can't have a flat sign after the note :/
 
Restart: API quota is 10877.
 
@Henders I guess you're right, something in the back of my head was saying the same thing but I didn't listen
 
@tripleee It's one of those things that makes me wince :P
 
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching website in body: Premier Keto Diet by jasomoor on askubuntu.com
tpu- by Glorfindel
 
@JF done.
 
2:04 PM
Restart: API quota is 10656.
 
@tripleee I went and created a new query by mistake, but here you go metasmoke.erwaysoftware.com/data/sql/queries/…
Hate the query, is a big mess, but it works (I think!)
 
Restart: API quota is 10604.
 
2:32 PM
Approved @JF
 
@CalvT It still doesn't show all the roles. But maybe it is a different bug you were trying to fix?
 
[ SmokeDetector | MS ] Username similar to website in answer: Choosing a set of colors by colorswall on ux.SE
 
2:55 PM
Restart: API quota is 10031.
tpu- by ByteCommander on Choosing a set of colors [MS]
Restart: API quota is 9988.
[ SmokeDetector | MS ] Potentially bad keyword in answer: A database of open databases? by NooB8374 on opendata.SE
tpu- by ByteCommander
 
This DataTurks domain is quite controversial metasmoke.erwaysoftware.com/domains/19263
Some marked as spam, others not, and many more posts mentioning it on the site, which were not scanned/detected
The post just above is 1:1 identical with one by a spam user from few hours ago though
And most of them really read like an ad, although some could also just be genuine tool recommendations... not sure
 
3:13 PM
[ SmokeDetector | MS ] Bad keyword in title: Encrypt phone remotely by RagnettoFelice on android.SE (@iBug @AndrewT.)
 
@SmokeDetector k (plagiarized from here: books.google.nl/…
 
There are 8 results on global SE search, all posts written by just three repeating users
Also notable that many of those link to /trending on that domain
 
fp by Andrew T. on Encrypt phone remotely [MS]
 
3:35 PM
[ SmokeDetector | MS ] Blacklisted website in body: Send of AutoHotKey in csharp by KỉaT on stackoverflow.com
 
Zoe
@SmokeDetector fp no MCVE
 
@Zoe Registered question as false positive.
 
!!/location
 
@ThomasWard teward/Solar Flare
 
kicks computer
Okay, so Solar Flare's going to get kicked in a few, the git security updates finally came out for that server
 
3:41 PM
Restart: API quota is 9466.
[ SmokeDetector | MS ] Link at end of body: Ubuntu 18.04: Earphones not working by IPv6 on askubuntu.com
[ SmokeDetector | MS ] Potentially bad keyword in title: Edit title-tag in wp_head with yoast seo by Wombat on wordpress.SE
fp- by Zoe
tp by Nisse Engström on Choosing a set of colors [MS]
fp by Nisse Engström on Ubuntu 18.04: Earphones not working [MS]
fp by Nisse Engström
[ SmokeDetector | MS ] Link at end of answer: Minha aplicação não inicia no Spring-Tools Suite by Thiago Silva on pt.stackoverflow.com
fp- by Zoe
Restart: API quota is 9221.
 
Zoe
4:05 PM
> There was exactly the same mistake with me. I just downloaded the jar again that was corrupted and compiled normally.

I downloaded it [maven repo link]
 
4:25 PM
@DavidPostill I took it to mean the highest role
Which is what it does
tripleee's query just showed a random role for the person
 
Is there a way to rename SmokeDetectors?
 
@NobodyNada what do you mean? the instances?
 
I just created a new SmokeDetector but forgot to prepend it with "NobodyNada/" (since I was used to Redunda doing that automatically)
@WELZ Yes.
 
Yep
 
also, apparently I can't delete my own Smokey -- an admin is needed to do that
 
4:36 PM
[ SmokeDetector | MS ] Potentially bad keyword in answer: Why can't I break out of my loop? (Python) by JVinson on stackoverflow.com
fp- by NobodyNada
 
What's it's name @NobodyNada
 
@NobodyNada it's in config.ci
 
How do you create a new smoke detector
 
@Andy swiftpi; ID 27
@WELZ no, on Metasmoke
@JakeSymons You need to have the Smoke Detector Runner role in Metasmoke
 
@NobodyNada oh lol
 
4:38 PM
I clicked a button, it said it was logged. Either it worked or Art/Undo will be here in a minute to yell at me. In either case...carry on.
 
@Andy I see you nuked it?
thanks!
 
I aim to please.
 
@JakeSymons you can create your own personal instance of smokey without any rols or permissions
 
4:57 PM
@WELZ (also FYI it's in config, which isn't on GitHub as its contents are instance-specific)
config.sample is a template for config, and config.ci is the config used by Continuous Integration
 
@angussidney I was going to ask about that, but got busy with other things. Thanks for taking care of that and fixing that up. :)
@WELZ It just won't work super well.
 
@ThomasWard tell me about it :D
 
drags out the 1500-page tirade about how evil non-credentialed Smokey can be, and drops it on the desk in front of @WELZ, only to cause the desk to collapse in the process
 
Hey, it's better than it used to be...
 
You can read all about it :p
 

« first day (1662 days earlier)      last day (2157 days later) »