Charcoal HQ

12:00 AM

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword in username, messaging number in answer, potentially bad asn for hostname in answer (268): Jual Obat Cytotec Surabaya 087738575225 Dijamin Original by Jual Obat Cytotec Surabaya on stackoverflow.com

Dharman

I am impressed that SD was able to catch spam written in Indonesian.

How should I flag the user as a spam profile?

!!/report stackoverflow.com/a/58403882/1839439

SmokeDetector

@Dharman You are not a privileged user. Please see the privileges wiki page for information on what privileges are and what is expected of privileged users.

Dharman

I am hoping that one day this command will work for me.

terdon

@Dharman Probably not worth it. If the user has any other posts, you can raise a custom mod flag on that. But if it's just the profile, it's usually not worth bothering with.

Makyen

!!/report stackoverflow.com/a/58403882 "reported by Dharman"

SmokeDetector

12:12 AM

[ SmokeDetector | MS ] Manually reported answer (94): GeoIP apache module vs geoiplookup by Soracha Thammasit on stackoverflow.com

Makyen

!!/welcome Dharman

SmokeDetector

@Makyen Welcome to Charcoal HQ @Dharman! I'm SmokeDetector, a bot that detects spam and offensive posts on the network, and posts alerts to chat. You can find more about me on the Charcoal website.

tpu- feedback received

Makyen

@Dharman That implies that you'd like SmokeDetector privileges, but I'm not sure you actually want to be added to the permissions list (various people have said similar things and some have wanted permissions, some not). Basically, you just have to ask. There's some introductory information here.

Dharman

I haven't asked for them yet, because SD is too overwhelming, but sometimes it would be good to be able to just report or watch something without asking a privileged user for it.

SmokeDetector

tpu- feedback received on Jual Obat Cytotec Surabaya 087738575225 Dijamin Original [MS]

[ SmokeDetector ] SmokeDetector started at rev 3ae9af7 (SmokeDetector: Merge pull request #3391 from Charcoal-SE/auto-blacklist-1571179127) (running on teward/Chaos, Python 3.7.4)

Restart: API quota is 15308.

[ SmokeDetector ] SmokeDetector started in standby mode at rev b0c37e6 (SmokeDetector: Auto blacklist of (?-i:^ForeignExchange$) by tripleee) (running on iBug/SandyShores)

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Did they say "hand job" in the 1800s? by Ellice G Sanchez on english.SE

Makyen

12:29 AM

@Dharman OK. Actually doing a !!/report command requires SmokeDetector privileges, as you've already identified. I can understand that SD is a bit overwhelming. There is quite a bit to it, but the basics aren't that much. The first step is just reviewing posts as to them being True Positive (TP), False Positive (FP), or NAA. For that, you'll want to read the Feedback Guidance.

It's possible to give feedback in chat messages, through userscripts, or while viewing posts on metasmoke (MS). For feedback in chat messages, you'll need SmokeDetector privileges. For feedback through userscripts or on MS, you will need an account on MS and the Reviewer role on MS (which is also given mostly just by asking).

SmokeDetector

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword with email in body, bad phone number in body, blacklisted website in body, +1 more (455): Where can buy custom wristbands no minimum? by Wristbands1016 on superuser.com

tpu- feedback received

Makyen

!!/watch- miss[\W_]*+jinda[\W_]*+jaicheang

!!/watch-number- 020243449046

SmokeDetector

tpu- feedback received on Jual Obat Cytotec Surabaya 087738575225 Dijamin Original [MS]

Makyen

!!/watch-number- +60174226039

!!/watch- jossklinik\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 0ef054f (SmokeDetector: Auto watch of miss[\W_]*+jinda[\W_]*+jaicheang by Makyen) (running on teward/Chaos)

Makyen

12:35 AM

!!/watch-number- 087738575225

!!/watch-number- 1(909) 839-4501

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 220c6bc (SmokeDetector: Auto watch of 020243449046 by Makyen) (running on teward/Chaos)

Makyen

!!/watch-number- (909) 839-4501

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev e8b0e56 (SmokeDetector: Auto watch of +60174226039 by Makyen) (running on teward/Chaos)

[ SmokeDetector ] Blacklists reloaded at rev ead82e9 (SmokeDetector: Auto watch of jossklinik\.com by Makyen) (running on teward/Chaos)

[ SmokeDetector ] Blacklists reloaded at rev 2971114 (SmokeDetector: Auto watch of 087738575225 by Makyen) (running on teward/Chaos)

[ SmokeDetector ] Blacklists reloaded at rev 521a5ee (SmokeDetector: Auto watch of 1(909) 839-4501 by Makyen) (running on teward/Chaos)

[ SmokeDetector ] Blacklists reloaded at rev 7ffb0fc (SmokeDetector: Auto watch of (909) 839-4501 by Makyen) (running on teward/Chaos)

SmokeDetector

12:52 AM

fp- feedback received on Did they say "hand job" in the 1800s? [MS]

SmokeDetector

1:13 AM

[ SmokeDetector | MS ] Link at end of answer (60): Virtualbox Windows 10 install boots into checkered screen by Isaiah Anton on askubuntu.com

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to pass the flight school selection process? by Jason Wraz on askubuntu.com

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): What is ADAPT to Test in pilot school? by Jason Wraz on askubuntu.com

SmokeDetector

1:36 AM

[ SmokeDetector | MS ] Bad keyword in answer (86): AirPods 2nd Gen. with firmware 2A364 dropped volume level in non-iOS Devices by rogi on apple.SE

SmokeDetector

1:53 AM

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): Should you allow your children to play online games? (by GamesBX Trends Now) by GamesBXdaily on stackoverflow.com

[ SmokeDetector | MS ] Url in title (96): How to Convert tangrams.github.io/heightmapper coordinates to decimal latitude longitude by Ahmed on opendata.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): What makes a website search engine friendly? by Marketing on askubuntu.com

fp feedback received on How to Convert tangrams.github.io/heightmapper coordinates to decimal latitude longitude [MS]

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): What are all the known lightsaber designs? by Yeet on scifi.SE

fp feedback received on AirPods 2nd Gen. with firmware 2A364 dropped volume level in non-iOS Devices [MS]

fp feedback received on Virtualbox Windows 10 install boots into checkered screen [MS]

Stormblessed

Huh the reports seem to be taking a while

The last three had no votes?

SmokeDetector

fp feedback received

Stormblessed

2:10 AM

Not a lot of people online I guess?

Or maybe phone loads badly

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer, username similar to website in answer (59): What are the three basic segments of the GPS system? by Cellutrak on askubuntu.com

SmokeDetector

2:26 AM

[ SmokeDetector ] SmokeDetector started in standby mode at rev 1859c6a (SmokeDetector: Auto blacklist of shareits\.xyz by double-beep) (running on Makyen/EC2-linux)

[ SmokeDetector | MS ] Potentially bad keyword in answer, username similar to website in answer (59): What is the difference between GPS and GNSS? by Cellutrak on askubuntu.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Erro GET na URL da imagem 403 (FORBIDDEN) ao tentar alterar o src da tag img ✏️ by John Rivers on pt.stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Can I change the color of the word suggestion text in Android spelling? by SerKan K. on stackoverflow.com

fp feedback received on Erro GET na URL da imagem 403 (FORBIDDEN) ao tentar alterar o src da tag img [MS]

fp feedback received

Nisse Engström

2:46 AM

@SmokeDetector tpu-

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): I'm on the Titanic, what should I do to survive? by Melissa Yue Wallace on worldbuilding.SE

[ SmokeDetector | MS ] Blacklisted user (71): Can I rent furniture for 3 months? by Cellutrak on askubuntu.com

[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad keyword in answer (2): Can I rent furniture for 3 months? by Can-West Display Services on askubuntu.com

Nisse Engström

@SmokeDetector tpu-

!!/allspam askubuntu.com/users/976492/can-west-display-services

SmokeDetector

[ SmokeDetector | MS ] Manually reported answer (batch report: post 1 out of 3) (94): Can I rent furniture for 3 months? by Can-West Display Services on askubuntu.com

[ SmokeDetector | MS ] Manually reported question (batch report: post 2 out of 3) (93): What is the difference between GPS and GNSS? by Can-West Display Services on askubuntu.com

[ SmokeDetector | MS ] Manually reported question (batch report: post 3 out of 3) (93): What are the three basic segments of the GPS system? by Can-West Display Services on askubuntu.com

Nisse Engström

Spamseeds.

SmokeDetector

tpu- feedback received on Should you allow your children to play online games? (by GamesBX Trends Now) [MS]

[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad keyword in answer, blacklisted user (73): How can I save money on my wedding rentals? by Can-West Display Services on askubuntu.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Autodesk forge tokken exception by 상혁손상혁 on stackoverflow.com

tpu- feedback received on Can I rent furniture for 3 months? [MS]

tpu- feedback received on What is the difference between GPS and GNSS? [MS]

tpu- feedback received on What are the three basic segments of the GPS system? [MS]

Makyen

2:57 AM

!!/watch- cellutrak\.ca

SmokeDetector

@Makyen That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.

Makyen

!!/watch- canwestdisplay\.com

SmokeDetector

@Makyen That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.

tpu- feedback received on How can I save money on my wedding rentals? [MS]

[ SmokeDetector | MS ] Offensive answer detected (78): What does "air pocket" mean here? Difference? by a deleted user on ell.SE

[ SmokeDetector | MS ] Pattern-matching website in body (97): Does the cost of wind energy double when calculated correctly? by user8066 on sustainability.SE

fp feedback received on What does "air pocket" mean here? Difference? [MS]

iBug

I've always been curious what's behind rebootms.charcoal-se.org . Is it AWS Lambda or another server? (@Undo)

SmokeDetector

3:13 AM

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How does a/%%30%30 work? by carter on stackoverflow.com

SmokeDetector

3:27 AM

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): What are the things to consider when Designing Your Office? by Caresse Covillon on stackoverflow.com

Undo

@iBug Lambda behind API Gateway

Nisse Engström

@SmokeDetector tpu-

SmokeDetector

[ SmokeDetector | MS ] Bad keyword with email in answer, potentially bad keyword in answer (86): Send text to specific contact programmatically (whatsapp) by felishia green on stackoverflow.com

tpu- feedback received

SmokeDetector

3:55 AM

[ SmokeDetector | MS ] Potentially bad keyword in body (1): How To Allow Special Characters & Capital Letters In Wp Permalink? by RGM7 on stackoverflow.com

fp- feedback received

fp feedback received on Does the cost of wind energy double when calculated correctly? [MS]

Stormblessed

!!/test cybergoldenhacker@gmail.com

SmokeDetector

> Pattern-matching email in body, pattern-matching email in title, potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Pattern-matching email in body - Position 0-27: cybergoldenhacker@gmail.com
Pattern-matching email in title - Position 0-27: cybergoldenhacker@gmail.com
Potentially bad keyword in body - Position 0-27: cybergoldenhacker@gmail.com
Potentially bad keyword in title - Position 0-27: cybergoldenhacker@gmail.com
Potentially bad keyword in username - Position 0-27: cybergoldenhacker@gmail.com

SmokeDetector

4:24 AM

[ SmokeDetector ] SmokeDetector started in standby mode at rev e40b0d5 (SmokeDetector: Auto watch of dekhojadu\.co by double-beep) (running on Makyen/Windows)

Stormblessed

How many people have charcoal privileges? How can I see who does?

Makyen

@Stormblessed Do you mean for SmokeDetector privileges, or roles on metasmoke?

Stormblessed

@Makyen how can I see the specific regex that caught something?

@Makyen access to telling Smokey what to do—what I have

@Stormblessed searching for something that is watched found nothing

Hi @scaaahu

scaaahu

@Stormblessed Hi

Makyen

@Stormblessed That depends on what caught it. You can use !!/bisect the text you want to test, which covers the regex based blacklists and watchlist. However, it doesn't cover watched/blacklisted numbers and anything in findspam.py. For those, you can use !!/test, or one of the other !!/test-* commands to find out what the detection was. If it was a phone number match, then you need to look in the two files containing numbers. If it was anything else, then it's in findspam.py.

@Stormblessed You would need to look in rooms.yml.

Stormblessed

4:40 AM

!!/bisect cybergoldenhacker

Makyen

However, to be in rooms.yml, the user will also need to be listed in users.yml.

SmokeDetector

@Stormblessed Matched by cyber\W*golden\W*hacker(?:\W*(?:at\W*)?gmail\W*(?:dot\W*)?com)? on line 11537 of watched_keywords.txt

Stormblessed

hmmmmm

github.com/Charcoal-SE/SmokeDetector/…

This did not turn that up hm

How much space does the repo take? Thinking of forking it

oh commits shows it

but why doesn't watched_keywords.txt show up in the results?

hey can we please blacklist cyber\W*golden\W*hacker(?:\W*(?:at\W*)?gmail\W*(?:dot\W*)?com)?

It's so annoying to need like 5 TP

This one is only ever gonna be spam, so what is the point of not blacklisting and having it show in other rooms

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): "can view" "can invite" "can edit" authorization in a spa app with multiple users by marvin on stackoverflow.com

Makyen

@Stormblessed Doesn't show up where?

Stormblessed

4:46 AM

@Makyen github.com/Charcoal-SE/SmokeDetector/…

Why is this commit search any different?

Makyen

@Stormblessed I'm not sure. I'd have to look into it. I don't use the GitHub interface much for searching the source code, or commits. I almost always do those sorts of things on my local machine.

@Stormblessed on the order of 100MB.

Stormblessed

@Makyen oh that's not bad

Makyen

@Stormblessed Not yet.

Stormblessed

@Makyen I get that we have a policy, but what is the potential benefit of it in this case?

Makyen

@Stormblessed It's possible that someone might ask a question about a similar name.

As I've said before, if you want a more dynamic blacklist, then help make the blacklist more dynamic under the current policy. From what I've seen, it's rare for anyone to go looking into why a listing that's on the blacklist gets an FP. If people were doing that more aggressively, and either removing entries from the blacklist, or modifying the entry so it doesn't detect those FP, then it would be reasonable to loosen our policies as to when something can be added to the blacklist.

Stormblessed

4:59 AM

@Makyen ok, how can I get started on that? Are there any tools you use to check blacklist item stats?

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body, potentially bad keyword in body (97): Ada yang tahu sejarah mengenai permainan prediksi nomer 2D, 3D, 4D di Dunia? by Kotaktoto on history.SE

Makyen

@Stormblessed No, unfortunately, that's all manual, with searching on MS. It would be nice to have a tool that goes through and checks everything on the various lists, but no one has built one, yet. Currently, if I see a blacklist item get an FP, I'll usually do searches for it on MS and look at what it's detecting, both for TP and FP. If it is reasonable to modify it to not detect the FP, then I'll do that. If it's not reasonable to do that, then I'll downgrade it to the watchlist.

Unfortunately, doing that sometimes takes considerable time, particularly for times when the intent is to modify the regex to avoid the FP. Doing so can involve looking at all of the FP and all or most/many of the TP. For some, I even copy the data from the MS results in to regex101.com and work on adjusting the regex there.

SmokeDetector

tpu- feedback received

Stormblessed

@Makyen oh so what’s that userscript a lot of firefighters here use do?

Makyen

!!/watch-number- (604) 434 4433

!!/watch-number- 1(604) 434 4433

!!/watch-number- (514) 341-9788

SmokeDetector

5:08 AM

[ SmokeDetector ] Blacklists reloaded at rev 594db69 (SmokeDetector: Auto watch of (604) 434 4433 by Makyen) (running on teward/Chaos)

Makyen

!!/watch-number- 1(514) 341-9788

!!/watch- rumahkotak\.com

!!/watch- (?-i:pMhHI\.jpg)

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 38133b2 (SmokeDetector: Auto watch of 1(604) 434 4433 by Makyen) (running on teward/Chaos)

Makyen

!!/watch- ayamjago999\.com

!!/watch- kotaktoto\.com

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in answer (86): IIS Save data in App Pool Variable shared across other servers by kitaaberdua47 on stackoverflow.com

Makyen

!!/watch- bolagembira\.com

!!/watch- cocokmain\.com

SmokeDetector

5:09 AM

[ SmokeDetector ] Blacklists reloaded at rev 51e06e8 (SmokeDetector: Auto watch of (514) 341-9788 by Makyen) (running on teward/Chaos)

Stormblessed

Oh it’s a chat thing

Makyen

!!/watch- samasamamenang\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 9b55e02 (SmokeDetector: Auto watch of 1(514) 341-9788 by Makyen) (running on teward/Chaos)

tpu- feedback received

[ SmokeDetector ] Blacklists reloaded at rev d84166b (SmokeDetector: Auto watch of rumahkotak\.com by Makyen) (running on teward/Chaos)

[ SmokeDetector ] Blacklists reloaded at rev 81fdb88 (SmokeDetector: Auto watch of (?-i:pMhHI\.jpg) by Makyen) (running on teward/Chaos)

@Makyen The regex contains an unescaped "."; in most cases, it should be "\."; append -force if you really want to do that.

[ SmokeDetector ] Blacklists reloaded at rev 90babbf (SmokeDetector: Auto watch of kotaktoto\.com by Makyen) (running on teward/Chaos)

[ SmokeDetector ] Blacklists reloaded at rev ceffd11 (SmokeDetector: Auto watch of bolagembira\.com by Makyen) (running on teward/Chaos)

Stormblessed

@SmokeDetector we need some more things to look for aborsi

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Chart.js : straight lines instead of curves by Joo Yeon Jo on stackoverflow.com

[ SmokeDetector ] Blacklists reloaded at rev 342c962 (SmokeDetector: Auto watch of cocokmain\.com by Makyen) (running on teward/Chaos)

Makyen

5:11 AM

!!/watch-number 0822 4238 8712

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev f880102 (SmokeDetector: Auto watch of samasamamenang\.com by Makyen) (running on teward/Chaos)

[ SmokeDetector ] Blacklists reloaded at rev 41fb11f (SmokeDetector: Auto watch of ayamjago999\.com by Makyen) (running on teward/Chaos)

Stormblessed

Any way to set something so that if it contains a certain group of keywords, it’ll always be autoflagged?

SmokeDetector

fp feedback received

[ SmokeDetector ] Blacklists reloaded at rev 82a1373 (SmokeDetector: Auto watch of 0822 4238 8712 by Makyen) (running on teward/Chaos)

Makyen

@Stormblessed The most common to use are Autoflagging Information & More (AIM) and Feedback Instantly, Rapidly, Effortlessly (FIRE). AIM shows in the SD report chat message the feedback that has been given on a post. FIRE adds a button to each SD report which opens a popup that allows you to see the post text, the why information, and click buttons to give feedback and flag, or not flag. You can see some short descriptions on the userscripts page.

Stormblessed

metasmoke.erwaysoftware.com/search?utf8=✓&username=Surabaya%E2%80%AD&commit=Search

Why no results with this? Shouldn’t this show up?

I want to raise a Meta about the aborsi spammers, would that be okay?

Maybe request an IP block or something?

Or should we be low-radar

Like just asking the staff to try to stop it, it’s just so so so much

SmokeDetector

5:19 AM

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): Where can i find 250-430 Practice Exam Dumps? by Aliana1546 on pm.SE

fp feedback received

Stormblessed

!!/test jual

SmokeDetector

> Would not be caught as a post, title or username.

Stormblessed

!!/test obat

SmokeDetector

> Bad keyword in body, bad keyword in title, bad keyword in username
----------
Bad keyword in body - Position 0-4: obat
Bad keyword in title - Position 0-4: obat
Bad keyword in username - Position 0-4: obat

Stormblessed

!!/test apotik

SmokeDetector

5:22 AM

> Would not be caught as a post, title or username.

Stormblessed

!!/blacklist-keyword apotik

SmokeDetector

@Stormblessed You don't have code privileges, but I've created PR#3392 for you.

PR#3392 ("Stormblessed: Blacklist apotik") opened by SmokeDetector

Stormblessed

!!/test cytotec

SmokeDetector

> Bad keyword in body, bad keyword in title, bad keyword in username
----------
Bad keyword in body - Position 0-7: cytotec
Bad keyword in title - Position 0-7: cytotec
Bad keyword in username - Position 0-7: cytotec

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Will PVC build up an electric charge and cause a spark? by John Self Jr on engineering.SE

tp feedback received

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Does the Muslim brotherhood support Neoliberalism? by user28608 on skeptics.SE

[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially problematic ns configuration in answer (2): Where can i find 250-430 Practice Exam Dumps? by KateRaven on pm.SE

fp feedback received on Does the Muslim brotherhood support Neoliberalism? [MS]

tp feedback received

Stormblessed

@SmokeDetector tpu-

Shree

5:32 AM

!!/approve 3392

^ 28 / 28 tp

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 4aa68fc (SmokeDetector: Merge pull request #3392 from Charcoal-SE/auto-blacklist-1571203409) (running on teward/Chaos)

Stormblessed

@Shree thanks

Shree

yw

Stormblessed

@Shree I'm about to post a meta asking for SE to try to do something to block that spammer

!!/test Penjual

SmokeDetector

> Would not be caught as a post, title or username.

Stormblessed

5:34 AM

!!/blacklist-keyword penjual

SmokeDetector

@Stormblessed You don't have code privileges, but I've created PR#3393 for you.

PR#3393 ("Stormblessed: Blacklist penjual") opened by SmokeDetector

[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): How to redirect power-shell output with a tcl-file? ✏️ by Norick on stackoverflow.com

Makyen

!!/watch- test4practice\.com

Stormblessed

!!/test jualcytotecaborsi.com

SmokeDetector

fp- feedback received

[ SmokeDetector ] Blacklists reloaded at rev 68f2bb8 (SmokeDetector: Auto watch of test4practice\.com by Makyen) (running on teward/Chaos)

> Url in title, potentially bad ns for domain in body, potentially bad ns for domain in title, potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Potentially bad keyword in body - Position 7-28: jualcytotecaborsi.com
Potentially bad keyword in title - Position 7-28: jualcytotecaborsi.com
Potentially bad keyword in username - Position 7-28: jualcytotecaborsi.com
Potentially bad ns for domain in body - jualcytotecaborsi.com NS suspicious ns6.hawkhost.com.,ns5.hawkhost.com.

fp feedback received on How to redirect power-shell output with a tcl-file? [MS]

Stormblessed

!!/blacklist-website jualcytotecaborsi\.com

SmokeDetector

5:35 AM

@Stormblessed You don't have code privileges, but I've created PR#3394 for you.

Stormblessed

!!/blacklist-website obataborsi\.win

SmokeDetector

PR#3394 ("Stormblessed: Blacklist jualcytotecaborsi\.com") opened by SmokeDetector

@Stormblessed You don't have code privileges, but I've created PR#3395 for you.

PR#3395 ("Stormblessed: Blacklist obataborsi\.win") opened by SmokeDetector

Stormblessed

@Makyen anything I should avoid in my Meta post about the spammer?

Shree

@Stormblessed Why you want to black list that one. It' have only one tp . Watch is enough for that.

Stormblessed

@Shree because it's a part of the whole drugs spammer

Makyen

5:37 AM

@Stormblessed Please do not immediately blacklist things that we've only seen once. I've pointed you at the Guidance for Blacklisting and Watching multiple times. Such things should be watched first.

Stormblessed

@Makyen ok sorry

SmokeDetector

PR#3396 ("Stormblessed: Blacklist selamat") opened by SmokeDetector

Stormblessed

wait what

that is totally not what I meant to type

@SmokeDetector delete

!!/test SEMARANG

SmokeDetector

> Would not be caught as a post, title or username.

Stormblessed

!!/blacklist-keyword SEMARANG

SmokeDetector

5:39 AM

@Stormblessed You don't have code privileges, but I've created PR#3397 for you.

PR#3397 ("Stormblessed: Blacklist SEMARANG") opened by SmokeDetector

Stormblessed

!!/test penggugur

SmokeDetector

> Would not be caught as a post, title or username.

Stormblessed

!!/blacklist-keyword penggugur

SmokeDetector

PR#3398 ("Stormblessed: Blacklist penggugur") opened by SmokeDetector

@Stormblessed You don't have code privileges, but I've created PR#3398 for you.

Stormblessed

ok good day that's enough of these for today

SmokeDetector

5:42 AM

[ SmokeDetector | MS ] Url-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +5 more (692): dragonsdenketo.com/lightning-keto/ by williamhyattis on askubuntu.com

tpu- feedback received

Stormblessed

0

Q: Extremely, extremely persistent spammers selling some abortion/drug-related thing in Indonesian

There’s a really really active spam operation advertising apparently abortion pills and drugs in Indonesian. It's extremely frequent; there are 54 hits on MetaSmoke for "aborsi" in the post body. There are 52 for "cytotec", which frequently appears. There are 102 true positives to 11 false for "...

Ok here

Makyen

@Stormblessed Please try to narrow this a bit (e.g. by including additional associated words). There are slightly more hits on SE for this word than there are TP in MS.

Stormblessed

oh sorry

I was rushing to get a bunch through so we get more of these caught, didn't remember to check that one

is the Meta post the right thing I should do @Makyen ?

(already posted it but is there anything else I could do?)

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in link text in answer, bad pattern in url answer, pattern-matching website in answer (225): Insert Key for Sage by sam marco on apple.SE

Stormblessed

!!/test KLINIK

SmokeDetector

5:48 AM

@Stormblessed Missing an argument.

tpu- feedback received

> Would not be caught as a post, title or username.

Stormblessed

@SmokeDetector whoops :P

!!/watch KLINIK

SmokeDetector

@Stormblessed You don't have code privileges, but I've created PR#3399 for you.

PR#3399 ("Stormblessed: Watch KLINIK") opened by SmokeDetector

Stormblessed

just to get data, I see there're a lot of FP on SE.com

Makyen

@Stormblessed I'm not sure what you are wanting to get out of the Meta post. It's quite unlikely that SE will do anything. They might, but it's quite rare. The main thing that can be done is mostly by us. We can determine ways to detect the spam and have enough confidence (weight and detections) such that they get autoflagged.

Stormblessed

@Makyen well I'm thinking maybe there could be a consistent IP it's from

that they could block

or blocking combinations of keywords entirely

Makyen

5:50 AM

@Stormblessed Unless we are explicitly looking for something in uppercase (i.e. the regex turns off case insensitivity), we normally put things in lowercase. It's not required, but it's normal procedure.

@Stormblessed Things deleted by spam flags feed into SpamRam, which implements an automatic IP block. If the spammers are posting multiple spam posts which are being deleted by spam flags (with or without a moderator deleting as spam), then the spammer(s) are hopping IPs. It may be possible to determine a range of IP addresses to block, but that usually is only done for spam waves, trolling waves, etc. (i.e. really high volumes) and only temporary.

Processed Meat

1

Q: Extremely, extremely persistent spammers selling some abortion/drug-related thing in Indonesian

There’s a really really active spam operation advertising apparently abortion pills and drugs in Indonesian. It's extremely frequent; there are 54 hits on MetaSmoke for "aborsi" in the post body. There are 52 for "cytotec", which frequently appears. There are 102 true positives to 11 false for "...

feature-request spam

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): fullpage.js no funciona en mi pagina web by LuisJoseLopezDelgado on es.stackoverflow.com

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching website in body, +2 more (492): What Is Diamond 247 Keto? by wilfrecampbell on askubuntu.com

tpu- feedback received

Makyen

!!/watch- (?-i:3KI1HQ_Z4V4)

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 9930ce6 (SmokeDetector: Auto watch of (?-i:3KI1HQ_Z4V4) by Makyen) (running on teward/Chaos)

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link following arrow in body, pattern-matching product name in body, +3 more (493): Eminence Vitality Keto–How Does It Work? Take a gander at Carefully! by user144550 on graphicdesign.SE

tpu- feedback received

Makyen

!!/watch- 1430859963744263(?#Facebook event)

SmokeDetector

6:04 AM

[ SmokeDetector ] Blacklists reloaded at rev e708395 (SmokeDetector: Auto watch of 1430859963744263(?#Facebook event) by Makyen) (running on teward/Chaos)

fp- feedback received on fullpage.js no funciona en mi pagina web [MS]

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): OpenSSL decryption in JavaScript by user3453268 on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): How can I tie my flashlight to car's passenger side mirror? by Aster Lai on lifehacks.SE

[ SmokeDetector | MS ] Mostly non-latin answer (49): apktool unpack apk and then packed, Inflate Error <unknown> (file zip crc32:00000000) by li Wang on stackoverflow.com

naa- feedback received

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Are there any exercise that engage almost all of your muscles? ✏️ by Zheer on fitness.SE

fp- feedback received

[ SmokeDetector ] SmokeDetector started at rev e708395 (SmokeDetector: Auto watch of 1430859963744263(?#Facebook event) by Makyen) (running on teward/Chaos, Python 3.7.4)

Restart: API quota is 13066.

[ SmokeDetector ] SmokeDetector started in standby mode at rev b0c37e6 (SmokeDetector: Auto blacklist of (?-i:^ForeignExchange$) by tripleee) (running on iBug/SandyShores)

rene

6:22 AM

@Makyen you don't like a good party?

Makyen

@rene Yeah, I'm being a party pooper. :-)

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): How can I tie flashlight to car's passenger side mirror, so it doesn't fall when car's moving at 70 km/h? ✏️ by Aster Lai on lifehacks.SE

rene

@Makyen Noted, no Project-X for you then ...

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in username (2): Spinnaker Jenkins Integration unable to fetch jobs from Jenkins by Ravindra SEO on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, link at end of body, +9 more (990): Keto Diet increasewww.news4supplements.org/freshly-bloom-keto/ by user1102076 on superuser.com

tpu- feedback received on Spinnaker Jenkins Integration unable to fetch jobs from Jenkins [MS]

tpu- feedback received

Makyen

@rene No, that wouldn't be my thing :-)

!!/watch- opsmx\.com

!!/watch- opsmx(?!\.com)

SmokeDetector

6:28 AM

[ SmokeDetector ] Blacklists reloaded at rev b8e1e85 (SmokeDetector: Auto watch of opsmx\.com by Makyen) (running on teward/Chaos)

[ SmokeDetector ] Blacklists reloaded at rev 81941fa (SmokeDetector: Auto watch of opsmx(?!\.com) by Makyen) (running on teward/Chaos)

[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +6 more (690): reviews4buyers.org/icon-nutra-keto-drine/ by ghrtyhyg on puzzling.SE

fp- feedback received on How can I tie flashlight to car's passenger side mirror, so it doesn't fall when car's moving at 70 km/h? [MS]

tpu- feedback received

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Combine multiple relationship types and return data from both relationships ✏️ by Nirusu on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword with email in body (59): ResourceExhaustedError: OOM when allocating tensor ✏️ by Muhammad Aleem on stackoverflow.com

fp- feedback received

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching product name in body, pattern-matching website in body, +2 more (590): What Is Ultra Fast Pure Keto? by user1005992 on askubuntu.com

tpu- feedback received

Makyen

6:50 AM

!!/watch-force- keto-pure-diet\.org

SmokeDetector

@Makyen That pattern looks like it's already caught by Pattern-matching website in body, Pattern-matching product name in body, Potentially bad keyword in body, Bad keyword in answer, Bad keyword in body, Potentially bad keyword in answer, and Pattern-matching website in answer; append -force if you really want to do that.

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Tensorflow frozen_graph to tflite for android app by Prabhat Kumar Sahu on stackoverflow.com

@Makyen Matched by keto\W*pure(?:\W*(?:direct|canada|ca|org|org|pill|uk|\d+)s?)* on line 11009 of watched_keywords.txt

:52147886 Matched by keto\W*pure(?:\W*(?:direct|canada|ca|org|org|pill|uk|\d+)s?)* on line 11009 of watched_keywords.txt

[ SmokeDetector ] Blacklists reloaded at rev f3d0cb0 (SmokeDetector: Auto watch of keto-pure-diet\.org by Makyen) (running on teward/Chaos)

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): カス in the context of 俺はやる lyrics by Wanyudo by Kasumi on japanese.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): What data sources are available online? by gregory on quant.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to perform multi-step out-of-time forecast which does not involve refitting the ARIMA model? by user7057003 on stackoverflow.com

[ SmokeDetector | MS ] Bad pattern in url answer, pattern-matching website in answer, potentially bad keyword in answer, potentially bad keyword in username (146): Cannot get sound in Windows 7 - No audio devices are installed by turbotax support on superuser.com

tpu- feedback received

[ SmokeDetector | MS ] Blacklisted website in body (99): How to get my organic keywords back i loss 7k keywords in one month by BIKEBD 1st Motorcycle blog BD on superuser.com

Nisse Engström

7:26 AM

@SmokeDetector tpu-

SmokeDetector

fp feedback received on What data sources are available online? [MS]

[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad keyword in answer (2): Personalized icon next to the URL address in the browser's address bar? by a deleted user on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword with a link in answer, link at end of answer (140): IPS panel color acuracy web design by Rohit on superuser.com

Makyen

!!/approve 3398

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 28adc38 (SmokeDetector: Merge pull request #3398 from Charcoal-SE/auto-blacklist-1571204520) (running on teward/Chaos)

tpu- feedback received

Makyen

!!/watch- radiate-digital\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 7fc1176 (SmokeDetector: Auto watch of radiate-digital\.com by Makyen) (running on teward/Chaos)

CI on 28adc38 succeeded.

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Are YOu Searching Professional Assistance for Physics Homework? by Help me in homework on physics.SE

[ SmokeDetector | MS ] Url in title, bad keyword in body, body starts with title and ends in url, potentially bad keyword in body, potentially bad keyword in username (292): www.mysecureisp.com/ by tristan2ch on ham.SE

[ SmokeDetector | MS ] Bad keyword in title, blacklisted website in title, potentially bad ns for domain in title, potentially bad keyword in title (200): thesanofi.com/sunset-keto/ by nichyoth on wordpress.SE

tpu- feedback received

[ SmokeDetector | MS ] Bad pattern in url answer (65): Does resetting the rating on an app also reset the top "Most Helpful" rated reviews? by user73239 on apple.SE

tpu- feedback received on http://www.mysecureisp.com/ [MS]

fp- feedback received

Makyen

8:03 AM

!!/watch-force- klinik(?=.{0,40}?\baborsi\b)

SmokeDetector

@Makyen The regex contains an unescaped "."; in most cases, it should be "\."; append -force if you really want to do that.

[ SmokeDetector ] Blacklists reloaded at rev 22776df (SmokeDetector: Auto watch of klinik(?=.{0,40}?\baborsi\b) by Makyen) (running on teward/Chaos)

Makyen

!!/watch- mysecureisp\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev e7f54ce (SmokeDetector: Auto watch of mysecureisp\.com by Makyen) (running on teward/Chaos)

[ SmokeDetector | MS ] Potentially bad ns for domain in body, potentially problematic ns configuration in body (2): symbols used in different cities of Iran by Mojtaba Abedini on travel.SE

[ SmokeDetector | MS ] Link at end of answer (60): Get a preview JPEG of a PDF on Windows? by an phan on stackoverflow.com

tpu- feedback received on symbols used in different cities of Iran [MS]

tpu- feedback received

[ SmokeDetector | MS ] Toxic answer detected (80): I have class of programming and i have test. I have 30 minutes by Tomáš Messing on stackoverflow.com

tpu- feedback received

[ SmokeDetector | MS ] Url-only title, bad ip for hostname in body, bad ip for hostname in title, bad keyword in body, bad keyword in title, +8 more (1090): topdietbrand.com/alpha-testo-boost/ by user1006018 on askubuntu.com

tpu- feedback received

[ SmokeDetector | MS ] Potentially bad keyword in body (1): How to skip the "-- More --" in PostgreSQL pager? by cutomo on stackoverflow.com

fp- feedback received

JoErNanO

8:23 AM

!!/test knegar.com/…

SmokeDetector

> Url in title, potentially bad ns for domain in body, potentially bad ns for domain in title, potentially problematic ns configuration in body, potentially problematic ns configuration in title
----------
Potentially bad ns for domain in body - knegar.com NS suspicious ns233.mihanwebhost.com.,ns234.mihanwebhost.com.
Potentially bad ns for domain in title - knegar.com NS suspicious ns233.mihanwebhost.com.,ns234.mihanwebhost.com.
Potentially problematic ns configuration in body - Suspicious nameservers: all IP addresses for knegar.com are in set {'46.4.22.188'}

[ SmokeDetector ] SmokeDetector started in standby mode at rev 1859c6a (SmokeDetector: Auto blacklist of shareits\.xyz by double-beep) (running on Makyen/EC2-linux)

[ SmokeDetector | MS ] Potentially bad keyword in body (1): I keep getting a NameError in Python, saying that things are not defined, although I did define them ✏️ by Gabrielle Lucies-Yantis on stackoverflow.com

[ SmokeDetector | MS ] Blacklisted website in answer, potentially bad ns for domain in answer (94): How to upgrade magento 2.3.1 CE to 2.3.3 CE? by Matt1720 on magento.SE

tpu- feedback received

[ SmokeDetector | MS ] Few unique characters in answer (87): React Native RingtoneManager ✏️ by Lux Aeterna on stackoverflow.com

[ SmokeDetector | MS ] Few unique characters in body, mostly punctuation marks in body (119): React Native RingtoneManager ✏️ by Lux Aeterna on stackoverflow.com

tp- feedback received on React Native RingtoneManager [MS]

tp- feedback received

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body, potentially bad ns for domain in body, +1 more (392): Bad Side Effects of Zylophin RX by fikliyan suzi on askubuntu.com

tpu- feedback received

[ SmokeDetector | MS ] Few unique characters in answer, no whitespace in answer (182): Programmatically adding security permissions to files in C# by pattis on stackoverflow.com

tpu- feedback received

[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): How to turn a list of objects into a keyed array/object? by RobertRoth on stackoverflow.com

tpu- feedback received

SmokeDetector

8:56 AM

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How to scan QRCode in android by Rajat Palankar on stackoverflow.com

naa- feedback received

[ SmokeDetector | MS ] Potentially bad keyword in username (1): Developing stronger kicks for soccer by dsffdhgsfjdfghjdfghj on fitness.SE

Transcript for