I set up autoflagging a good bit ago, and lowered the threshold for them to be auto-cast by a good bit every now and then. I'd be interested in participating further, but I'm unsure if there's much else I should read up on before moving forward with asking for privileges. Any advice?

@Spevacus The barrier to entry isn't about rep on SO. It's about familiarity with how things work on the SE Network. [And, that you're not a troll or spammer, which we do get in here from time to time.] Your rep on the network clearly indicates you are familiar with SE. For feedback, there's a little bit to learn about the point of view from which the feedback is given, but it's not much.

[ SmokeDetector | MS ] Potentially problematic ns configuration in answer (1): Robot Framework - run powershell which replaces value in ini file by monique on stackoverflow.com

I'll give that page a re-read. Cheers :)

Makyen/EC2-linux: Executing automatic scheduled reboot.

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Azure CLI Equivalent to Powershell's Add-MsolRoleMember by becke-ch on stackoverflow.com

@Spevacus It would be a good idea to read through the Feedback Guidance, SmokeDetector wiki, and SmokeDetector commands (in particular feedback). [I already linked the Feedback Guidance in my last message, but it's helpful to have all here in one message.]

[ SmokeDetector ] SmokeDetector started in standby mode at rev 2035be1 (SmokeDetector: Auto watch of fitwirr\.com by Makyen) (running on Makyen/EC2-linux)

@Spevacus You are at the point where we'd move ahead with setting up privileges for you, if you wanted to have them.

Wow nice bot, congratz

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Lookup user's YouTube Account with Google Id by Babu on stackoverflow.com

fp- feedback received on WooCommerce plugin not showing single product detail [MS]

naa- feedback received

@SmokeDetector why

@ThomasWard Potentially bad keyword in answer - Position 0-36: <p><a href="https://www.youtube.com/

@SmokeDetector naa

@ThomasWard Recorded answer as an NAA in metasmoke.

@Makyen Gave those links another gander, and they seem to make sense. I'm interested in moving forward with setting up privileges, if you'll have me :)

tpu- feedback received on WooCommerce plugin not showing single product detail [MS]

@Spevacus Great! I'll make it happen. It will be a few minutes.

Appreciated!

accidentally trips @Makyen up because reasons You don't sleep do you Makyen xD

CI on 077afc2 succeeded. Message contains 'autopull', pulling...

[ SmokeDetector ] SmokeDetector started at rev 077afc2 (Makyen: Add SD privileges for Spevacus) (running on teward/Osiris, Python 3.6.9)

Restart: API quota is 10654.

because reasons

Ayy, thank ya!

one disadvantage of me running MS core infra and stuff: you all have to put up with my chaotic levels of semi-randomness xD

Now if the documentation's right, this adds privileges for Charcoal Test and the Tavern along with this room, right?

@ThomasWard Disadvantage? Without a few chaotic-neutral folks running about, what would we do for entertainment?

well i tend to be on the edge of chaotic-neutral to chaotic-evil - I'm an IT Security guy, we have all sorts of chaosness in us >:D

@Spevacus I've added you to the privilege list for SD. You should run the !!/amiprivileged command to verify.

You may also want to look at the userscripts we have available (GitHub), as they can be quite helpful, depending on how you want to participate. For viewing, feedback & flagging in chat, I find FIRE and AIM to be the ones I use the most.

For flagging through the userscripts, your metasmoke account needs to be write authenticated with SE, which, if you haven't already done so, can be done from the authentication page and doesn't require you to also sign up for autoflagging, although authenticating is also a required step for signing up for autoflagging.

In addition, to enable manual flagging, the checkbox that says "Use my account to cast flags automatically" on this page also needs to be checked. If you have no entries in the "ID Site Count Flags Used Today" list at the bottom of that page, then autoflagging will still not be enabled, but manual flagging through the userscripts will be enabled.

Just so you know, we normally tell people when they are getting privileges that we practice the "ton of bricks" discipline method here: If you mess-up sufficiently, or consistently, we come down like a ton of bricks :-).

To quote ArtOfCode: "TL;DR: ton-of-bricks is mostly to say that we almost never need to enforce things because things enforce themselves through having a good community here. If it gets to the point that someone's enforcing something, something's gone badly wrong."

@Makyen unless I come down hard on them in which case it's a "RUN THE SKY IS BURNING! AAAAAAAAAAAAAAA!!!!!" time.

@ThomasWard IT guys (especially in Security) are allowed to be chaotic evil every now and then I would think ;)

@Spevacus Yes. In all rooms which inherit from Charcoal HQ.

!!/amiprivileged

@Spevacus ✓ You are a privileged user.

@ThomasWard :)

@Spevacus s/every now and then/most of the time/

I really should stop downplaying your chaotic-ness, shouldn't I?

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): Problem with images on the iphone(safari) ✏️ by ArtjomM on stackoverflow.com

@ThomasWard I do, sometimes. Last night...was much less than normal/planned. :(

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): How to connect to SharePoint online to run some PowerShell by zaminator on sharepoint.SE

@Makyen No bricks necessary ;) Also, that's a damn good quote from Art.

@Spevacus Yeah, yeah, it is.

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Azure CLI Equivalent to Powershell's Add-MsolRoleMember by becke-ch on stackoverflow.com

SDs whois queries the MS API, right?

@Spevacus yeah probably helps. There're times (usually restricted to Keybase private chats or chats with friends) which scare the heck out of people

@thesecretmaster depends in which circumstances but yes it does for processing and reporting

Naw I mean for !!/whois

@Makyen, could you please have a look at the question I asked some minutes ago, forgot to ping you :)

Not like getting domain info

yes it does

github.com/Charcoal-SE/SmokeDetector/blob/… and line 1554

@Vickel I was just looking at the questions.

@Vickel I think they should be deleted, but I wouldn't call them spam, at this time. It appears to be more a user focused on their problem, who is under the impression that we will be going to their site to figure out what the problem is and then help fix it, rather than having an MRE here and providing an Answer on SO. However, that's just the feel I get from the questions. I'd need to go to the site to see if the most recent issues are really happening...

!!/whois

@ThomasWard Missing an argument.

!!/whois admin

@ThomasWard I am aware of 8 admins. Currently in this room: Thomas Ward, Makyen, thesecretmaster. Not currently in this room: angussidney, tripleee, ArtOfCode, Andy, Undo.

@Makyen that's why I asked, it's borderline spam, but difficult to prove if it's done on purpose. So would you recommend that I retract my spam flags?

@thesecretmaster yes that command does indeed query MS for role states and IDing who's in here or not and such

i don't remember the extent of the roles that can be queried though

@Vickel I wouldn'd use spam flags there. I would raise a custom flag.

@Makyen OK on my way

@Vickel Spam flags really should just be used for things that are obviously spam, or where you know that someone else has raised a custom flag to explain the situation, and it's a good idea to have the post deleted quickly. Using spam flags on something that isn't obvious spam/R/A risks the moderator not seeing what you're seeing and declining the flag. While it's not a big deal to get a declined flag, it does mean that the post doesn't get handled correctly.

[ SmokeDetector | MS ] Mostly punctuation marks in answer (36): Aurelia use if.bind with a condition? by Cintia Britez on stackoverflow.com

@thesecretmaster are you on keybase?

@Makyen I understand, It just looked too obvious to me when checking the first three questions. But then I checked the very first QA pair (from 2017) and there it looked like to be genuine, so it's borderline, I think...

So I've retracted the spam flags

@Vickel There may be a question I'm not seeing (i.e. it's already deleted). I only saw 3 questions. 2 were recent and 1 was from years ago. With an additional recent question, my view on it might have been different.

@Makyen the 4th one was deleted some minutes ago, it kept my spam flag (helpful since question was nuked), same scheme

FWIW I del voted all those questions

I see two are already gone

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): how to split/cut video using vlc in command line after every N minute? by Josep Smith on stackoverflow.com

@Makyen the contributions doc for Smokey has been merged into the repo

CI on 8dc1ddc succeeded.

!!/pull

because paranoia

[ SmokeDetector ] Blacklists reloaded at rev 8dc1ddc (Thomas Ward: Revise CONTRIBUTIONS to dictate requirements for Pull Requests, etc. (#4166)) (running on teward/Osiris)

@ThomasWard Thanks. It looked/looks good. Thank you for putting it together.

thank you for flesching it out so it's more verbose with requirements

it's nice when we all work together XD

> 136M Jul 15 18:34 dump_metasmoke_clean-1594837559.sql.gz

WHOOOO got backups cleaned up again and working with ancillary systems ^.^

\o/

@ThomasWard Yes, I agree. A team can usually do more/better work than a single person.

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Updating SQL Server 2016SP2 to latest CU in Cluster...what happens? by regular_joe on stackoverflow.com

fp- feedback received

fp feedback received on I used to troll while I was underage, I need some screenshots containing my name removed [MS]

Eh

@Makyen github.com/Charcoal-SE/metasmoke/issues/773 is now there, which means we're on the verge of getting the Public DB dumps up again

and since the sanitizer now actually does it's job with the tweaks I made and the ancillary system will hold all the backup copies that means we actually have reliable daily backups

@ThomasWard Great!

dances around chaotically, then falls through a hole in the dimensions

@ThomasWard Why won't we simply serve that docroot as a static site + add the reboot-static-site-server command to the dumping script?

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Updating SQL Server 2016SP2 to latest CU in Cluster...what happens? by a deleted user on dba.SE

fp- feedback received

@ThomasWard :)

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): capacative vs optical fingerprint sensor by nuemlouno on electronics.SE

fp- feedback received

[ SmokeDetector | MS ] Shortened url in answer (56): Can I sell photos of public property? by John on photo.SE

tpu- feedback received

@Daniil Thanks! I'll be sure to drop my questions here if I have any. Being able to manually report is going to be nice when I run across something not-so-nice on MSE.

@Daniil That's wrong for The Tavern. The Tavern inherits from Charcoal HQ, but then has some additional users that only have permissions there. (cc @Spevacus)

@Daniil Looks like it does extend over to the Tavern, see here

[ SmokeDetector ] Blacklists reloaded at rev f5014a7 (SmokeDetector: Auto watch of (?-i:2Zy7Ozc)(?#bit.ly) by Daniil) (running on teward/Osiris)

naa- feedback received on how to split/cut video using vlc in command line after every N minute? [MS]

fp- feedback received on Azure CLI Equivalent to Powershell's Add-MsolRoleMember [MS]

fp- feedback received on How to connect to SharePoint online to run some PowerShell [MS]

@user12986714 because as we discussed, MS is not a static site

fp- feedback received on Robot Framework - run powershell which replaces value in ini file [MS]

i appreciate the suggestions but there's other edge cases that'll need attention

(but not everything needs an audit)

@Spevacus: It seems this is your first time sending feedback to SmokeDetector. Make sure you've read the guidance on your privileges, the available commands, and what feedback to use in different situations.

@Daniil np. We all still have things to learn. I had to go double-check, but I still had the rooms.yml file open from editing it. :) At one point in time, there was no inheritance of permissions from room to room, so there were completely separate lists for each room. Now, there are just a few rooms where the list is completely separate (SOCVR and SOBotics com to mind, but I'd need to go through the list).

@Daniil @Makyen that's clearly spam :p

[ SmokeDetector ] Blacklists reloaded at rev 3875899 (SmokeDetector: Auto watch of Qureka\W*Lite by Daniil) (running on teward/Osiris)

@Daniil That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; in addition, the regex contains an unescaped "."; in most cases, it should be "\."; append -force if you really want to do that.

@Daniil That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.

@ThomasWard It's not quite that clear. I think there was a troubling pattern, but it was hard to make a solid case it was spam. If he'd put the same link into each it would have been a slam dunk

@Machavity well the 'issue' they suggested is E:NOREPRO and they simply link to the site

this is a known pattern of spam behavior

@Daniil That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.

@user12986714 also, what you don't see is that the 'dumping script' is a separate ancillary system

there's no actual interop between MS and the ancillary system for when it handles the dumps.

except when MS will index the site

and there's a chance of a 15 minute period where a link will go bad

SO in those cases we may as well just set the dumps page to actively check what files are available and serve that link instead of a timed index

but there's a few edge cases where it won't be available still (still syncing, etc.)

though the actual sync time was 30s :p

@user12986714 on a separate note: you seem to be wanting to make a lot of suggestions along the lines of "how about we make Metasmoke a static site for [list of pages]"

instead of suggesting it with oneoffs here, I suggest you open a discussion issue on this

because the entire MS application is served via Rails so it's not really that simple to make 'static' pages directly within Rails

and would require a larger discussion

my focus is on Infra for the most part, not the actual MS codebase

Uh oh, it's the police.

@Daniil not really (cc @ThomasWard) To really know, I'd have had to go to the site and check to see if the problem existed, and my testing environment is off-line at the moment, so I wasn't willing to go to the site. IME, a lot of the WooCommerce questions are "it's broken/the plugin doesn't work. [Here's a link]. Please fix". This one didn't appear all that much worse, so... close-vote, down-vote, delete-vote, watch the domain. I'm willing to go for spam with more evidence.

I'm not sure what we have is sufficient, but it definitely should be deleted, and is.

@Spevacus careful - if they're robocops they're actually my minions

:P

@ThomasWard I'll be sure not to hurt them :)

[ SmokeDetector | MS ] Bad keyword in body (95): Gorilla vs Grizzly by Jimothy on worldbuilding.SE

fp- feedback received

@Spevacus Actually, it's the fire department. "We got an alert from a smoke detector"...

Heh

[ SmokeDetector | MS ] Potentially bad keyword in body (1): using react-router-dom links with butttons by Mozarts on stackoverflow.com

do we want !!/watch 5reasons\.life then?

[ SmokeDetector ] SmokeDetector started in standby mode at rev 5c9fb35 (SmokeDetector: Auto watch of (?-i:emmy_bodex)(?#fiverr.com) by Makyen) (running on iBug/Coral)

fp- feedback received

@JeffSchaller how many times has it shown? The general beahvior of "I have a woocommerce but it isn't working right this is the symptoms and this is the site URL: [url]" and it being perfectly fine is a typical thing I've seen

just the 1 time, in MS; so I guess if it's not flag-worthy, maybe not

@ThomasWard The thoughts are to make the dump an entirely new site separate from MS and potentially configure ns/routing for metasmoke.erwaysoftware.com/dumps, as the dump is static + has nothing to do with MS funtionalities (with core restriction already removed)

@user12986714 well then I'd need a static site with the exact same templating and dynamic allocation of backup data as we have currently. Because if we do Redis dumps we still need to show those in Metasmoke

and those're only on the Metasmoke system

and even if they were on their own entirely separate site

you still need some integration there to make sure that people can access it directly from MS

which still requires links, etc. as well as code changing in MS

let's start by getting the dumps working right and accessible first

before we start designing supporting sites, etc. and more software

@user12986714 If it were simply needed to run a static site as such I could do so myself, but it'd be a very bland site with some fancy autoindex fluff in it

@ThomasWard Why won't a ftp server do it?

@user12986714 you really want to run an FTP server exposed to the world for anonymous users, given the numbers thousands of FTP vulnerabilities out there?

security at its worst 101

@ThomasWard I mean... the claimed bug-free openbsd ftpd man.openbsd.org/ftpd will probably be good enough

'claimed' != "actual" especially with it being protocol specific issues

would rather serve an HTTP site than an FTP site

regardless that needs more discussion and flesching out

and security work on my side :p

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): Post Back does not work after writing files to response in ASP.NET by user10147660 on stackoverflow.com

@user12986714 regardless if it's a simple static page we can just do some nginx fancyindex integration I just need the header/footer pages and some CSS :)

fp- feedback received

That sounds a liiiiiitle bit easier than to have a bunch of Rails code trying to guess the time when cron runs/finishes

[ SmokeDetector | MS ] Repeating words in title (67): [Transaction]: verifyArguments: Transaction arguments must be strings: undefined, undefined, undefined, undefined, undefined by UMER AQEEL on stackoverflow.com

@user12986714 never said Rails had to know when the cron run finishes. 15min skew timer would work too, but again this requires more work/discussion/etc.

fp- feedback received

but again more stuff to consider in the long term

at least we have dumps available xD

and daily backups now

so when @Makyen breaks things in flags logs with the delete buttons we can getl og data back lol

baps @Makyen again

@ThomasWard doesn't even try to duck

By the way, it is theoretically possible to do before_destroy: :backup_database sort of things

@user12986714 so some history here:

until I forced them to disable public backups ~2 months ago

the backup calls were executed through Rails

which did a locking behavior that stalled all MS activity and functionality during the backup process

this was before I discovered the security flaws in it

so trying to do a backup call would trigger a lot of other problems.

we COULD do a DB backup but it has the potential to seize up the MS process

Yeah, the idea is that we don't delete users all that often

but that backup wouldn't get pulled into the existing backup dumps being available if we do as you suggest and separate backups and MS integration

@user12986714 which is also why a daily backup is usually sufficient for what we'd need.

at least for restorable backups

but we'd lose a lot of interim data regardless.

@user12986714 if we go this route then MS also has to integrate with the ancillary system and standalone system. That's some TCP tom-foolery I can write up and have Rails dump a task to a worker process. BUT then we will require having Metasmoke and the backups work together for indexing. THEN we can't have a separate static site.

so, you're staring at a Catch-22 problem here - can't have MS integrated backup functions while having a separate static dump site at the same time

(dump behavior is either integrated or its not, so)

!!/report stackoverflow.com/a/62922367/1839439

[ SmokeDetector | MS ] Manually reported answer (94): Communication between two GraphQL api in java by etienne-sf on stackoverflow.com

tpu- feedback received

[ SmokeDetector | MS ] Blacklisted user (71): Error handling with graphql-java-tools and graphql-spring-boot-starter by etienne-sf on stackoverflow.com

fp- feedback received

@ThomasWard I don't understand; why won't the following arch work?

[MS_box] thread(daily_backup):
  loop
    sleep(24 hours)
    call Backup_box::backup_database
    sleep_until_signal
    if SIG_FAILURE
      send_msg_to_chq "DAILY BACKUP FAILURE!!!"

[MS_box] Users::destroy:
  flash "Destroy task enqueued"
  start_thread destroy_user_thread
  return

[MS_box] destroy_user_thread:
  call Backup_box::backup_database
  sleep_until_signal
  if SIG_FAILURE
    send_msg_to_chq "Backup failure, not destroying $uid"
  Users::actually_destroy
  exit

[Backup_box] backup_database:

there's quite a lot more to what happens with backups than a simple script can typically handle

daily backups for instance have a whole extra sanitization step

that requires shell level interactions

file transfer is equally a problem (and the 'dump server' isn't a Rails app so unless you get SFTP working properly in a Rails integration...)

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Updating a single field in react is not working ✏️ by Luke Li on stackoverflow.com

fp- feedback received

@user12986714 also I Am Not A Ruby expert i'm speaking from behavioral observations that happened previously when we let Rails handle backups

[ metasmoke ] ci/circleci success on 4f3b24b: Your tests passed on CircleCI!

[ metasmoke ] ci/circleci success on c41ea1c: Your tests passed on CircleCI!

[ metasmoke ] ci/circleci success on 74213db: Your tests passed on CircleCI!

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): Incorrect currency format in product and checkout pages ✏️ by Dimitar Dimitrov on magento.SE

@ArtOfCode Are you alright with merging anti-long nav PR or do you want to wait until Undo sees it?

(I know long nav is partially my fault, trying to make up for it here :P)

Go for it, we can always make more changes later

So excited for anti-long nav

It always wraps on my screen and it's super annoying

Time for a wider screen :P

[ metasmoke ] ci/circleci success on 3d35bab: Your tests passed on CircleCI!

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Django 1.11: disable cache for authentificated users by NickKolok on stackoverflow.com

fp- feedback received

@ArtOfCode Time for small nav

@Daniil hasn't deployed yet :P

For non-signed-in users it was actually frighteningly small

I had to add an extra item so I wasn't too frightened

Signed in users get shinies

@Daniil when I poke it

...if I can recall whether I can actually trigger deploys from this system...

Don't quote me on this, but a bundle exec cap deploy should work

if you have a key, yes...

cap travis_production deploy

deploy poked @thesecretmaster

thank

small nav here we come!!!!!

on a totally related note, getting files off an ext4 partition from windows is a pain in the unmentionables

@ArtOfCode by the way you may want to check the sql sanitation for metasmoke.erwaysoftware.com/…

hehehe windoze

@thesecretmaster if I was planning on doing much development I'd be on the linux system, but... I'm not today :P

@user12986714 SQL sanitization is fine there, there's no injection, it's just invalid FULLTEXT search syntax

@ArtOfCode Yeah, but shouldn't it escape '>'?

it is

it's in quotes

thus not SQL control

ACK NO

IT STILL WRAPS

ALL MY WORK, IN VAIN, JUST BECAUSE UNDOS USERNAME IS SHORTER THAN MINE

:'(

I'm just shocked and dissapointed

I thought that the nav wouldn't be wrapped anymore, and I failed

Time for a larger screen

No

Time for a shorter nav

sigh I don't think I can get it any smaller though, without it being less usable

Maybe ditch that metasmoke logo

Other idea: Do review the same way SO does, have a lil icon with a red dot.

Or I could stick the dev dropdown in the admin dropdown

By the way some developer might want to try to grep production log with 1) E=^$' && echo security_test | grep -E '.* and 2) C=1' && echo 'security_test :-P

Doesn't matter, I can inject arbitrary code no matter what restrictions you put on my input to grep

Yeah, but not for those without ssh key

Yes

With the deploy button

That... leaves a trace on GH/Travis

Ehhh I mean if we were really concerned about the security of prod log search it'd either be disabled or we'd do it in ruby to remove the command injection risk.

And, besides just causing chaos, there's not much I can do if I broke in to MS

That would be better; the thing dangerous is not code injection, but is unaudittable code injection, which leaves us a compromised system without realizing it until $WayTooLate

Yeah, you're right, but I think that it's not really a worry just based on the level of trust that devs have. But you do have a point.

I think the worst I could do is flag a whole bunch of random posts, and then we'd have mod agreement problems and I prolly would get demodded :P

And like... drop the database, but backups.

A much more dangerous one is to potentially replace the entire metasmoke with a phishing one, without anyone realizing it

Yeah, I guess passwords, but most people use SE oauth

And the tokens don't live on MS

(unless that's changed since I set that up?)

fp feedback received on Django 1.11: disable cache for authentificated users [MS]

But yes, you do have a point, it was a hole and it's patched now.

It is objectively an improvement :P

:-P

@thesecretmaster not to rub it in (okay totally to rub it in), but... mmmm, space

>:(

I can do that too

If I zoom out a lot

[ SmokeDetector | MS ] Link at end of answer (60): Automount encrypted disk with luks on Debian 10 on system start by LukaszK on superuser.com

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Unity doesn't resolve with Admob by digitspro on stackoverflow.com

[ SmokeDetector | MS ] Few unique characters in answer, repeating characters in answer (168): How to derive Gordon growth model by Yunnoe on math.SE

tpu- feedback received

@SmokeDetector Looks like it was catched by a>.*buy

fp- feedback received on Unity doesn't resolve with Admob [MS]

[ SmokeDetector | MS ] Link at beginning of body (41): interface value on the error equation by 420 on scicomp.SE

[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): API Gateway - Custom Lambda Authorizer, Validate passed header value (username) exists in Cognito User pool group by Kacey Gambill on stackoverflow.com

fp- feedback received on interface value on the error equation [MS]

fp- feedback received

@thesecretmaster I'm finding that having the search and flagging buttons on the top-nav waaaaay over on the right to be inconvenient. Those are the buttons I use the most on metasmoke's top-nav, by a considerable margin (probably 80 to 90% of my top-nav clicks are on those). Having to move the mouse much farther than I used to is significantly more effort on most of my interactions. I can fix this for myself in the userscript I use, but I suspect it's going to be inconvenient for others too.

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Old DOS Program Licence File Issue by Oliver Head on reverseengineering.SE

fp- feedback received

[ SmokeDetector | MS ] Link at end of answer, potentially bad asn for hostname in answer (61): What is the difference between html and htmls by Oostr on stackoverflow.com

iBug/Sandy: Executing automatic scheduled reboot.

tpu- feedback received

[ SmokeDetector ] SmokeDetector started in standby mode at rev a46c15d (SmokeDetector: Auto watch of (?-i:Mjyej\.jpg) by Makyen) (running on iBug/Sandy)

@Makyen Ah, ok. Let me see if I can think of an alternate placement that's more convenient and not ugly. I'd really prefer to not have them in word form anymore, but if that's what it has to be, that's what it has to be

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Navigating Next And Prev Posts Under Same Labels in Blogger by Taufik Nurhidayat on stackoverflow.com

fp- feedback received

[ SmokeDetector ] Blacklists reloaded at rev 5bb2ab2 (SmokeDetector: Auto watch of entersay\.com by Daniil) (running on teward/Osiris)

@SmokeDetector Link points to a non-English site.

@thesecretmaster So... according to the record, the priority to optimize w.r.t. time cost, hit are:

HEAD /admin/user_feedback.html	8918.87	12	8605.99	312.87
GET /admin/user_feedback.html	5606.23	18	5504.96	101.27
HEAD /sites/dash.html	4948.45	12	4708.2	240.25
GET /flagging/conditions/:id.*/*	3487.42	11	2851.75	635.67
GET /search.html	2780.3	130	2646.01	135.33
GET /domains/tags/:id.html	2461.89	11	2376.46	85.43
GET /admin/invalidated.html	2364.01	8	2182.12	181.89
GET /spammers/:id.*/*	2150.37	4	2129.82	20.55
GET /spammers/:id.html	1881.86	156	1851.88	29.98

And this crazy one: DELETE /admin/permissions/:user_id.*/* 20749.42 1 20748.77 0.65

@Daniil How do you mean?

@user12986714 Yeah, but I'd prioritize by hit count more than the super rare but very expensive routes

@thesecretmaster Yeah, the 156 hits spammers/:id.html, taking 1.9s is probably a priority

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Servo arms (horns) for potentiometer by thoughtIhadaccount on electronics.SE

fp- feedback received

Ehhhh there's a dev tool that lives there

could move it tho