fp feedback received on How to Setup iSee 8CH 8*POE NVR and Dome Camera [MS]

[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): Unfixable post page in Wordpress by Don on wordpress.SE

[ SmokeDetector | MS ] Body starts with title and ends in url (98): Bollinger Bands guidelines by best forex on quant.SE

[ SmokeDetector | MS ] Pattern-matching website in body (97): Canada transit visa passport submission, applicable visa application centre fees and biometric fees by Raghavan on travel.SE

@ArtOfCode For each action and for each path a graph with x=time and commit sha at that time then y=duration (lines for view/db/total) (prolly averaged over some time for smoothness). Also for each status code, same x, y=count of occurances of status code on route (again, averaged for smoothness).

[ SmokeDetector | MS ] Potentially bad keyword in body (1): i want to know name of the anime by Giorgi Koshadze on anime.SE

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Difference between genetic engineering and synthetic biology by Babar Nawaz on biology.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): What or who is the Bloody-Nine? ✏️ by Joe on scifi.SE (@Mithrandir)

fp- feedback received

fp feedback received on A new approach to chess analysis by a computer: decodechess.com [MS]

@SmokeDetector ל

[ SmokeDetector | MS ] Repeating words in body (45): Invalid indentation, you can use tabs or spaces but not both by khalid mokhliss on stackoverflow.com

tp feedback received on Bollinger Bands guidelines [MS]

@SmokeDetector k The user's profile states that they're affiliated with the site.

It's another level of scary, but not really that much access above write tokens.

(Has been edited out, though.)

@Undo Context - wanting to build auto-retraction for Smokey's autoflag, considering whether to make it general enough to apply to any account.

@Undo Maaaaaybe.

API tokens are a no-brainer - you go insane, I revoke the token, job done

you're assuming I'm not already insane

Credentials are a trickier business. You go insane, you change the credentials to my account, now I have no account

okay, more insane

I think it's probably something that's worth having - if you're building it for Smokey already, kinda why not - but I dunno if I'd use it or not

I'll pass. (Even if I had autoflagging on again. I'd rather live with a declined flag than give someone else my credentials. Perspective.)

One thought was to create special MS credentials - you add a credential to your acct. as prescribed by the UI: "user-7@metasmoke.erwaysoftware.com" / "1gIbBeRiShHeRe!"

Pretty trivial to revoke that single credential if you want to, and trivial for staff to clean up stuff from sessions ending in that domain if I do go nuts

naa feedback received on How to mark over 17 thousand email messages read at once? [MS]

New metasmoke user 'Em C' created

tp feedback received on Suggest some methods to get rid off my stained teeth [MS]

Any opinions on whether or not this should be sent to SD as trolling?

@EJoshuaS eh, probably not. VLQ, maybe

@Undo also removes the risk of you going credential stuffing

I'd be more willing to go with that

@Undo It's definitely NAA at best IMHO.

@ArtOfCode Sounds like a britishism?

infosecism

gotta be careful how you spell that

oh, stuffing them into other sites' login

credential stuffing as in grabbing a list of people's credentials and going around other popular sites trying the same combos

fp feedback received on Solução de exceções ServiceException e Failed to execute goal org.codehaus.mojo:exec-maven-plugin:1.2.1:exec? [MS]

absolutely relevant XKCD

to add something useful to the discussion, I'd also feel uncomfortable giving out full credentials

about "Pretty trivial to revoke that single credential if you want to, and trivial for staff to clean up stuff from sessions ending in that domain if I do go nuts"

it's equally trivial for you then in theory to revoke my real, original login

in theory at least

or am I wrong there?

Probably, but... remember, you're dealing with me. Evil Undo isn't gonna be that blatant.

Yeah, sure. Just theoretical.

also worth raising that it's technically against SE's TOS - no sharing creds/accounts. Would need to get someone to okay it.

Evil Undo would find something subtler to do, and I'd probably do that with the API tokens instead (no login rows generated in mod reports)

@Undo just a nice traceable keyed API action instead :)

I'd consider you somewhere pretty high in my list of online people ranked by trustworthiness. But still you're only a dog icon I don't exactly know pretty well.

@ArtOfCode traceable to staff, not to anyone else.

Real logins are visible to moderators, API key uses aren't called out anywhere

:think:

@Undo Login'd be better, actually - run MS' net connection through a public Google proxy of the type that we see zillions of on mod reports, and you'd basically be invisible

@ArtOfCode point

but, see xkcd, what do you do with all those accounts

oof

yeah, actually, that's way too dangerous an idea to even have out there. It's the perfect crime for a disgruntled moderator.

I'd assume SE people should be able to do some SQL magic to fix that...

that's... there's literally nothing preventing that happening

while becoming equally disgruntled

@ByteCommander A single merge takes a dev a day to fix

sounds like something they should fix

It might be ratelimited heavily, I've never actually used it

They'd have to restore from backups and then recover all the lost content

okay, so we've established the impact of my having your credentials is far outweighed by the impact of my having my credentials

besides, even of those fp'd autoflags, I think most of them have still been marked as helpful by mods and some of the posts have been deleted anyway

@Undo still, you've probably got an hour before staff start taking notice... more if you start on the low traffic tags and build up something big to merge [javascript] into

so I don't think fp autoretract is thaaaat pressing either

also worth raising: I'm told API retraction is on the roadmap

@ArtOfCode Which roadmap?

cool

@Undo the "things we want to do but haven't actually scheduled yet"

fp feedback received on Unfixable post page in Wordpress [MS]

Because it's been on that Trello board of stuff to do since at least last year

which tag would you pick to merge everything else into? There's gotta be something beautifully ironic to leave as the victor

we should probably quit thinking about this :P

[stack-overflow] :P

just to annoy the meta-tag people

Thinking up abuse vectors is a good way to design defences

is what I tell myself

[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): How can I recursively resample .FLAC files using SoX and pipe them to the Opus encoder using Batch? ✏️ by Duke Pennington Broadbottom on stackoverflow.com

fp feedback received on How to connect R Studio to Tableau? [MS]

I know I saw it on a grainy screenshot of a Trello board, posted to meta

and commented about it

fp feedback received on How can I recursively resample .FLAC files using SoX and pipe them to the Opus encoder? [MS]

fp feedback received

[ SmokeDetector | MS ] Potentially bad ns for domain in answer, username similar to website in answer (54): What is the difference between requirement and scope? by Mudassir Iqbal on pm.SE

fp- feedback received on Invalid indentation, you can use tabs or spaces but not both [MS]

[ SmokeDetector | MS ] Bad keyword with email in answer (85): How much time in average does it take for an simple PC to create block? by Danielpatton44 on bitcoin.SE

fp feedback received on SIM900A No Carrier Issue [MS]

@SmokeDetector tpu-

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Configurable Map Viewer css.JS problem on Chrome ✏️ by padjee on gis.SE

fp feedback received

Did MS just die again?

@NisseEngström Looks that way.

Rebooting MS

!!/ms-down

@Makyen metasmoke is now considered down.

side glance at @thesecretmaster

@Undo Personally, I'd decline. I'm uncomfortable providing my credentials. If I was sufficiently motivated to have this functionality, I'd just write it as a browser extension, so people can just install it and not have to have an SE tab open. It would actually be fairly easy to do, you could do it just by listening to the MS WebSocket.

@Mithrandir I think it isn't my fault this time...

@Undo Redunda needs a reboot too, maybe along with sentinel (no clue if you control that though)

@Zoe same server, same reboot

No clue what runs where tbh ^^" But that makes it easy 😃

@Undo so does rebootms.charcoal-se.org reboot redunda and sentinel too?

!!/ms-up

@Makyen metasmoke is now considered up.

@Makyen Nice!

sooo... there's a 28s API search request in history that may have had something to do with that

Regex, right?

Aye

Halflife

(^|[^A-Za-z0-9_])j5greb.jpg([^A-Za-z0-9_]|$)

@Undo this seems like the best solution

however i am more concerned about how nasty the code would be on the MS side

fp feedback received on PICkit 2 VPP voltage level error. Check target & retry operation. Error in PICkit 2 [MS]

logging into chat is already a nuisance

@ArtOfCode Only 28 seconds? While that's a bit long for an API request->response, it's not even close to a long regex search on MS. If MS was flooded with requests, that would, obviously, be a different issue.

MS gets on the order of 100 requests/min

how many processes does it use, @Undo?