Charcoal HQ

12:02 AM

[ SmokeDetector | MS ] Post is mostly images (14): A black metal song in episode 41 of My Hero Academia by Sam on anime.SE

teward/Osiris: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started at rev 19942dd (SmokeDetector: Merge pull request #4317 from Charcoal-SE/auto-blacklist-1596958340) (running on teward/Osiris, Python 3.6.9)

Restart: API quota is 19447.

tpu- feedback received on How Android Lite Apps Works? [MS]

SmokeDetector

12:28 AM

[ SmokeDetector | MS ] Potentially bad keyword in username (1): How to deploy django channels with Apache and Daphne? by dhsdshdhk on stackoverflow.com

user435118

@SmokeDetector fpu-

SmokeDetector

fp- feedback received on Eventbrite integration with Webflow form [MS]

fp- feedback received on Uber Clone, address, map [MS]

fp- feedback received on MongoDB Database Compromised [MS]

SmokeDetector

12:50 AM

iBug/Coral: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev 9240024 (SmokeDetector: Auto watch of lasercut24\.net by Eliah Kagan) (running on iBug/Coral)

SmokeDetector

1:07 AM

[ SmokeDetector | MS ] Potentially bad keyword in body (1): What Chemical Could This Represent by Craig on chemistry.SE

SmokeDetector

1:18 AM

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer, username similar to website in answer (63): Approach to extract useful information from binary file by vapehop on reverseengineering.SE

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer, username similar to website in answer (63): Can't seem to figure out what this binary is by vapehop on reverseengineering.SE

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in link text in body, link at beginning of body, pattern-matching website in body, potentially bad keyword in body (303): Runescape sells enhanced UI elements by Sunxuemei on stackoverflow.com

Makyen/EC2-linux: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev 4fc58ea (SmokeDetector: Auto watch of impressorahpdrivers\.com by NobodyNada) (running on Makyen/EC2-linux)

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer, username similar to website in answer (63): Decoding LZSS buffer lookup indices by vapehop on reverseengineering.SE

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer, username similar to website in answer (63): Stuck on XOR decryption of firmware by vapehop on reverseengineering.SE

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer, potentially bad keyword in answer, username similar to website in answer (64): Which encryption/decryption algorithm is used in Synology Cloud Sync format 3.0 session key and data encryption? by vapehop on reverseengineering.SE

[ SmokeDetector | MS ] Shortened url in answer (56): How to restore small whiskey barrel? by Salah LM on woodworking.SE

[ SmokeDetector | MS ] Link at beginning of body (42): csv file not splitting on the delimiter by Shalney Daswani on stackoverflow.com

[ SmokeDetector | MS ] Shortened url in body (45): woodworking Plans by Salah LM on woodworking.SE

tp feedback received

tp feedback received on Approach to extract useful information from binary file [MS]

Jeff Schaller

1:54 AM

!!/watch vapehop\.com

SmokeDetector

@JeffSchaller You don't have blacklist manager privileges, but I've created PR#4321 for you.

PR#4321 ("Jeff Schaller: Watch vapehop\.com") opened by SmokeDetector

Jeff Schaller

!!/watch vapeciga\.com

SmokeDetector

@JeffSchaller That pattern looks like it's already caught by Potentially bad keyword in body and Potentially bad keyword in answer; append -force if you really want to do that.

Jeff Schaller

@SmokeDetector odd; metasmoke.erwaysoftware.com/post/257878 didn't say so

SmokeDetector

tp feedback received on Can't seem to figure out what this binary is [MS]

tp feedback received on Decoding LZSS buffer lookup indices [MS]

Jeff Schaller

1:57 AM

!!/allspam reverseengineering.stackexchange.com/users/34090/vapehop

SmokeDetector

[ SmokeDetector | MS ] Manually reported answer (batch report: post 1 out of 5) (94): Which encryption/decryption algorithm is used in Synology Cloud Sync format 3.0 session key and data encryption? by vapehop on reverseengineering.SE

[ SmokeDetector | MS ] Manually reported answer (batch report: post 2 out of 5) (94): Stuck on XOR decryption of firmware by vapehop on reverseengineering.SE

[ SmokeDetector | MS ] Manually reported answer (batch report: post 3 out of 5) (94): Decoding LZSS buffer lookup indices by vapehop on reverseengineering.SE

[ SmokeDetector | MS ] Manually reported answer (batch report: post 4 out of 5) (94): Can't seem to figure out what this binary is by vapehop on reverseengineering.SE

[ SmokeDetector | MS ] Manually reported answer (batch report: post 5 out of 5) (94): Approach to extract useful information from binary file by vapehop on reverseengineering.SE

tp feedback received on Which encryption/decryption algorithm is used in Synology Cloud Sync format 3.0 session key and data encryption? [MS]

tp feedback received on How to restore small whiskey barrel? [MS]

fp feedback received on csv file not splitting on the delimiter [MS]

tp feedback received on Stuck on XOR decryption of firmware [MS]

tp feedback received on Which encryption/decryption algorithm is used in Synology Cloud Sync format 3.0 session key and data encryption? [MS]

tp feedback received on Stuck on XOR decryption of firmware [MS]

tp feedback received on Decoding LZSS buffer lookup indices [MS]

tp feedback received on Can't seem to figure out what this binary is [MS]

tp feedback received

iBug/Sandy: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev 58848be (SmokeDetector: Merge pull request #4194 from Charcoal-SE/auto-blacklist-1594973069) (running on iBug/Sandy)

[ SmokeDetector | MS ] Few unique characters in answer, repeating characters in answer (167): Acidity of aldehydes and ketones and enolate formation by user97693 on chemistry.SE

@MarcoBonelli Your flag condition was disabled: Accuracy must be over 99.75%

tp feedback received

Makyen

2:28 AM

!!/approve 4321

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 69c27f6 (SmokeDetector: Merge pull request #4321 from Charcoal-SE/auto-blacklist-1597024487) (running on teward/Osiris)

Makyen

!!/blacklist-website- vapehop\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev c4414cc (SmokeDetector: Auto blacklist of vapehop\.com by Makyen) (running on teward/Osiris)

Makyen

!!/blacklist-website- vapeciga\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev ccd9d2a (SmokeDetector: Auto blacklist of vapeciga\.com by Makyen) (running on teward/Osiris)

[ SmokeDetector | MS ] Bad pattern in url body (90): ModuleNotFoundError: No module named 'dateutil' by xosemanolo on stackoverflow.com

fp- feedback received

[ SmokeDetector | MS ] Offensive title detected (52): i cannot withdraw my EFX tokens (since swap to EOS Chain) from Scatter Shit wallet Please Help! by Mirza Saad Baig on eosio.SE

SmokeDetector

3:06 AM

[ SmokeDetector | MS ] Repeating characters in answer (80): No coredump file generated in configured directory sometimes by FaceBro on stackoverflow.com

[ SmokeDetector | MS ] Blacklisted user (71): What does the axis mean? by Blender Guru on blender.SE

fp feedback received

fp- feedback received on No coredump file generated in configured directory sometimes [MS]

user12986714

3:26 AM

!!/report stackoverflow.com/questions/63331556/… "blogspam"

SmokeDetector

[ SmokeDetector | MS ] Manually reported answer (94): How should be my Heroku production settings? by Isiaka Dellyson Lukman on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Command 'ui' is not defined in laravel 6.0 by xiexie on stackoverflow.com

[ SmokeDetector | MS ] Repeating characters in title (65): Why is PostgreSQL not SKYYYYYYYYYYYR so hard? by Jan Bredow on stackoverflow.com

naa- feedback received on How should be my Heroku production settings? [MS]

fp- feedback received

tpu- feedback received

user12986714

@SmokeDetector Well, I should have mentioned that it was a blog post on Aug. 7

SmokeDetector

[ SmokeDetector | MS ] Blacklisted username, blacklisted website in body, link at beginning of body, potentially bad ip for hostname in body, potentially bad ns for domain in body (233): What is Ce Marking Certification? by IAS QATAR on askubuntu.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Loadrunner CLIControllerApp.exe event timeout issue from Azure Pipeline ✏️ by Pankaj Harde on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword with a link in answer (80): State of NTFS Support at OSX 10.9.5 by Anne Brown on apple.SE

tpu- feedback received on What is Ce Marking Certification? [MS]

Makyen

@SmokeDetector This is just trolling.

user12986714

!!/report apple.stackexchange.com/questions/262985/…

SmokeDetector

3:39 AM

@user12986714 Post 1: Already recently reported [ MS ]

tpu- feedback received

fp feedback received on Loadrunner CLIControllerApp.exe event timeout issue from Azure Pipeline [MS]

user12986714

!!/watch premiumcrack\.com

SmokeDetector

@user12986714 You don't have blacklist manager privileges, but I've created PR#4322 for you.

PR#4322 ("user12986714: Watch premiumcrack\.com") opened by SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): fallo en fetch js para enviar un dato usando boton (js) by Programando on es.stackoverflow.com

SmokeDetector

4:15 AM

[ SmokeDetector | MS ] Few unique characters in body, no whitespace in body (190): abcabcabcabcabcabc ✏️ by Katelyn Scott on stackoverflow.com

tp- feedback received

[ SmokeDetector | MS ] Potentially problematic ns configuration in answer (1): EMU1212M PatchMix DSP App Busted Since Win 10 1903 by jpyy on superuser.com

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to add Page Keyword and Page Description of Products synced to Content tree by Hina Garg on sitecore.SE

[ SmokeDetector | MS ] Link at end of answer (61): Question bookmarks are not removed if my account is deleted by Tuday By on meta.SE

[ SmokeDetector | MS ] Bad ns for domain in answer, blacklisted username, blacklisted website in answer, link at end of answer, potentially bad ip for hostname in answer (320): What is the way to determine traits in dialogue? by bon bon on gaming.SE

tpu- feedback received

tpu- feedback received on Question bookmarks are not removed if my account is deleted [MS]

tripleee

4:36 AM

!!/watch mywood\.me

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev be99af8 (SmokeDetector: Auto watch of mywood\.me by tripleee) (running on teward/Osiris)

naa- feedback received on EMU1212M PatchMix DSP App Busted Since Win 10 1903 [MS]

tripleee

@SmokeDetector vandalism reverted

SmokeDetector

@tripleee Registered question as true positive. If you want to blacklist the poster, use trueu or tpu.

tripleee

!!/watch premiumcrack\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev ae28392 (SmokeDetector: Auto watch of premiumcrack\.com by tripleee) (running on teward/Osiris)

tripleee

4:42 AM

!!/blacklist-website shell-shockers\.online

SmokeDetector

@tripleee That pattern looks like it's already caught by Blacklisted website in answer and Blacklisted website in body; append -force if you really want to do that.

tripleee

!!/watch ce[\W_]*+marking[\W_]*+certification

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev e4476f3 (SmokeDetector: Auto watch of ce[\W_]*+marking[\W_]*+certification by tripleee) (running on teward/Osiris)

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Value tallying code dysfunctions when put into discord command by vanilla on stackoverflow.com

tripleee

@user12986714 are you saying that's a spam indicator?

SmokeDetector

fp- feedback received on fallo en fetch js para enviar un dato usando boton (js) [MS]

fp- feedback received on Command 'ui' is not defined in laravel 6.0 [MS]

tpu- feedback received on What does the axis mean? [MS]

tpu- feedback received on How should be my Heroku production settings? [MS]

SmokeDetector

5:07 AM

fp- feedback received

tripleee

5:21 AM

!!/bisect all seven days

SmokeDetector

@tripleee Matched by all\W*+(?:7|seven)\W*+days on line 22202 of watched_keywords.txt

tripleee

the watch was caused by metasmoke.erwaysoftware.com/post/255402

this was the first FP since the watch metasmoke.erwaysoftware.com/…

if it triggers an FP again let's just remove it

SmokeDetector

[ SmokeDetector | MS ] Link at end of answer (61): Role Based Authorization using JWT - Spring security by Cameli Born on stackoverflow.com

tpu- feedback received

tripleee

!!/watch roadtripplanner\.io

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 788919a (SmokeDetector: Auto watch of roadtripplanner\.io by tripleee) (running on teward/Osiris)

SmokeDetector

5:44 AM

teward/Horus: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev 4fc58ea (SmokeDetector: Auto watch of impressorahpdrivers\.com by NobodyNada) (running on teward/Horus)

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, potentially bad ns for domain in body, +1 more (394): Le Régime Keto Try Down These Kilos Loss by degitjhon on meta.SE

tpu- feedback received

[ SmokeDetector | MS ] Few unique characters in body, mostly punctuation marks in title, no whitespace in body, potentially bad keyword in body, repeating characters in body, +1 more (354): ----------------------- ✏️ by x4s on ru.stackoverflow.com

[ SmokeDetector | MS ] Blacklisted user (71): Можно ли с помощью Python скачать файл по ссылке, не зная имени и расширения файла ✏️ by Voko on ru.stackoverflow.com

[ SmokeDetector | MS ] Blacklisted user (71): Можно ли с помощью Python скачать файл по ссылке, не зная имени и расширения файла by Voko on ru.stackoverflow.com

[ SmokeDetector ] Blacklists reloaded at rev 96eab4e (tripleee: ! Watch roadplanner.io IP addresses) (running on teward/Osiris)

tp- feedback received on ----------------------- [MS]

[ SmokeDetector | MS ] Bad keyword in title, link at beginning of body (140): Who is the Best website design and development company in faridabad,delhi/ncr? by aadi web solutions on ux.SE

fp feedback received on Фильтры на сайте никак не влияют на ссылку сайта (парсинг) [MS]

teward/Osiris: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started at rev 96eab4e (tripleee: ! Watch roadplanner.io IP addresses) (running on teward/Osiris, Python 3.6.9)

Restart: API quota is 17434.

tpu- feedback received

tripleee

6:09 AM

!!/watch aadiwebsolutions\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 07bacf5 (SmokeDetector: Auto watch of aadiwebsolutions\.com by tripleee) (running on teward/Osiris)

tripleee

!!/watch aadi[\W_]*+web[\W_]*+solutions(?!\.com)

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 7cc835e (SmokeDetector: Auto watch of aadi[\W_]*+web[\W_]*+solutions(?!\.com) by tripleee) (running on teward/Osiris)

tripleee

tripleee$ ip-search 178.33.235.187
      4 178.33.235.187
	      1 femalescortsinbangalore.com
	      1 aadiwebsolutions.com
	      2 bangalorescorts.com
tripleee$ ns-search genhost.in
      3 ['ns1.genhost.in.', 'ns2.genhost.in.']
	      1 aadiwebsolutions.com (2020-08-10 06:02:03,987)
	      1 bangalorescorts.com (2018-11-04 16:45:06,723)
	      1 femalescortsinbangalore.com (2018-02-13 17:07:16,165)

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): can not make rig work on scissor car lift animation by doc405 on blender.SE

[ SmokeDetector ] Blacklists reloaded at rev 11d5268 (tripleee: ! Watch NS genhost.in) (running on teward/Osiris)

fp- feedback received

tripleee

6:16 AM

but VLQ

SmokeDetector

fp feedback received on Можно ли с помощью Python скачать файл по ссылке, не зная имени и расширения файла [MS]

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Strange Postfix logwatch log summary on my Ubuntu 18.04 Server (Local/Physical Server) ✏️ by Ravi on serverfault.com

fp feedback received on Strange Postfix logwatch log summary on my Ubuntu 18.04 Server (Local/Physical Server) [MS]

fp- feedback received

[ SmokeDetector | MS ] Bad keyword in body, link at beginning of body, potentially bad keyword in body (138): How to enable Kiosk mode for iOS by Michael John on apple.SE

[ SmokeDetector | MS ] Bad keyword in body (95): Which are the top 8 Modular Kitchen Brands in India? by Sazid Akhtar on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in answer (86): Which are the top 8 Modular Kitchen Brands in India? by Sazid Akhtar on stackoverflow.com

user12986714

6:32 AM

@tripleee I would think that it is much more likely spam

SmokeDetector

tpu- feedback received

tpu- feedback received on Which are the top 8 Modular Kitchen Brands in India? [MS]

tpu- feedback received on How to enable Kiosk mode for iOS [MS]

tripleee

@user12986714 yeah, then I understood correctly

SmokeDetector

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, link at beginning of body, link at end of body, +3 more (631): Lunaire Keto Reviews and Where to purchase? by fabip24673 on askubuntu.com

tpu- feedback received

tripleee

!!/watch buildingandinteriors\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 07df0dc (SmokeDetector: Auto watch of buildingandinteriors\.com by tripleee) (running on teward/Osiris)

fp- feedback received on What Chemical Could This Represent [MS]

tripleee

6:36 AM

!!/watch atozketodiet\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev e0ca8dd (SmokeDetector: Auto watch of atozketodiet\.com by tripleee) (running on teward/Osiris)

tripleee

!!/blacklist-website hexnode\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 70264f8 (SmokeDetector: Auto blacklist of hexnode\.com by tripleee) (running on teward/Osiris)

[ SmokeDetector | MS ] Potentially bad keyword in username (1): Why does 0.999... to infinite equal zero by Anthony Dwayne Chapelle on mathoverflow.net

[ SmokeDetector | MS ] Bad keyword in body, potentially bad ip for hostname in body, potentially bad ns for domain in body, potentially bad keyword in body (98): Quickly Extends The Driving Hormone by carol george on astronomy.SE

[ SmokeDetector | MS ] Bad keyword in answer (86): preventing video download in flow player by Christin Calma on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Xamarin Forms - Webview Detect URL Change by Khoa on stackoverflow.com

[ SmokeDetector ] SmokeDetector started in standby mode at rev 9240024 (SmokeDetector: Auto watch of lasercut24\.net by Eliah Kagan) (running on iBug/Coral)

tpu- feedback received on preventing video download in flow player [MS]

tpu- feedback received on Quickly Extends The Driving Hormone [MS]

[ SmokeDetector | MS ] Username similar to website in answer (62): Make homemade seitan taste like commercial by the Plant based dad on cooking.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Use of "Holocaust" in The Great Gatsby ✏️ by Benjamin Harman on english.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Use of "Holocaust" in The Great Gatsby by Incertus 3 on english.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Use of "Holocaust" in The Great Gatsby by neurodoc on english.SE

Mast

6:59 AM

sdc bisect wellness-cbd

SmokeDetector

@Mast No such command 'wellness-cbd'.

@Mast 'wellness-cbd' is not caught by a blacklist or watchlist item.

Mast

!!/watch wellness.cbd -force

SmokeDetector

@Mast The regex contains an unescaped "."; in most cases, it should be "\."; append -force if you really want to do that.

:55201634 The regex contains an unescaped "."; in most cases, it should be "\."; append -force if you really want to do that.

Mast

Yes, I really want to do that. Whether there's a - or a ` ` between them, catch both. I explicitly want to catch any character.

17 TP

!!/watch-force wellness.cbd

SmokeDetector

@Mast You don't have blacklist manager privileges, but I've created PR#4323 for you.

PR#4323 ("Mast: Watch wellness.cbd") opened by SmokeDetector

fp- feedback received on Use of "Holocaust" in The Great Gatsby [MS]

fp- feedback received

fp- feedback received on Use of "Holocaust" in The Great Gatsby [MS]

fp- feedback received on Xamarin Forms - Webview Detect URL Change [MS]

Mast

7:05 AM

sdc bisect buildingandinteriors.com

SmokeDetector

@Mast Matched by buildingandinteriors\.com on line 22491 of watched_keywords.txt

Mast

Naturally...

SmokeDetector

[ SmokeDetector | MS ] Blacklisted user (71): Is it possible to rotate YouTube videos while watching on desktop PC? by ColinWhite2008 on superuser.com

fp feedback received

tripleee

!!/bisect Anthony Dwayne Chapelle

SmokeDetector

@tripleee Matched by Anthony\W*Dwayne\W*Chapelle on line 22471 of watched_keywords.txt

tripleee

7:22 AM

@Glorfindel ^ is this a troll we should flag?

Mast

Sometimes.

tripleee

@SmokeDetector ^ @Glorfindel

Mast

I've seen troll posts under that name.

Wasn't sure about that particular one.

9/4 with a lot of garbage posts.

Random example of a very iffy post

tripleee

@SmokeDetector this is ripe for blacklisting already, and we should probably not use any character there ... sorry, I'm going to reject this in favor of a stricter regex, and blacklist it

!!/blacklist-keyword wellness[\W_]*+cbd

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 29ff32e (SmokeDetector: Auto blacklist of wellness[\W_]*+cbd by tripleee) (running on teward/Osiris)

Mast

7:28 AM

@tripleee No problem, immediate promotion to the blacklist counts as a win in my book. I will compare both the regexes and try to learn from the difference.

SmokeDetector

Makyen/EC2-linux: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev 4fc58ea (SmokeDetector: Auto watch of impressorahpdrivers\.com by NobodyNada) (running on Makyen/EC2-linux)

Glorfindel

@tripleee they're semi-trolling the network with low-quality posts and sometimes downright abusive stuff. See also

13

Q: One person creating multiple Riemann Hypothesis-related accounts

I have been flagging these posts individually, but I thought maybe a meta question would be a good follow-up, in case the moderators are not aware of the behaviour. As @YemonChoi points out, the author of the post Is renormalization a valid reason why the riemann hypothesis could be undecidable?...

(I know not everything they post is red-flaggable, but I hope this is fine since it's only a watchlist term.)

tripleee

@Glorfindel thanks

@SmokeDetector closed, but does not seem to be out-and-out trolling?

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of body (42): Is the comma in two text fields at the same time? ✏️ by Вадим Кузьмин on stackoverflow.com

fp- feedback received

tripleee

!!/blacklist-username (?-i:^Michael John$)

SmokeDetector

7:42 AM

[ SmokeDetector ] Blacklists reloaded at rev e316e50 (SmokeDetector: Auto blacklist of (?-i:^Michael John$) by tripleee) (running on teward/Osiris)

[ SmokeDetector ] Blacklists reloaded at rev 4488a2f (tripleee: ! Watch Cloudflare NS pair Alice+Seth) (running on teward/Osiris)

[ SmokeDetector | MS ] Potentially bad keyword in username (1): Javascript function for finding multiples of a number by sdfsdf on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How does noise affect the implementation of quantum gates? by Abhishek Mukherjee on quantumcomputing.SE

[ SmokeDetector | MS ] Bad keyword with a link in answer, potentially bad ns for domain in answer, potentially bad keyword in answer, potentially bad keyword in username (83): How should an independent contractor's resume differ from that of a candidate seeking a permanent position? by Aman Samadhiya on freelancing.SE

fp- feedback received on Javascript function for finding multiples of a number [MS]

fp- feedback received on How does noise affect the implementation of quantum gates? [MS]

tpu- feedback received

tripleee

7:59 AM

!!/blacklist-website tractorjunction\.com

Marco Bonelli

Hmm what's going on? @tripleee

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 0a06cef (SmokeDetector: Auto blacklist of tractorjunction\.com by tripleee) (running on teward/Osiris)

tripleee

@MarcoBonelli weird, do you see anything in your flagging history?

Marco Bonelli

Let me check...

tripleee

probably @Makyen or @ArtOfCode would be better equipped to look into that, I'm not terribly familiar with that part of metasmoke

Marco Bonelli

8:01 AM

Nope, nothing. MS never flagged on my behalf.

SmokeDetector

[ SmokeDetector | MS ] Few unique characters in body, numbers-only title (153): 1234567890-1234567890- ✏️ by user11953788 on stackoverflow.com

tp feedback received

iBug/Sandy: Executing automatic scheduled reboot.

[ SmokeDetector ] Blacklists reloaded at rev b945fae (tripleee: ! Watch tractorjunction.com IP addresses) (running on teward/Osiris)

tp feedback received on WordPress auto login after registration not working [MS]

[ SmokeDetector ] SmokeDetector started in standby mode at rev 58848be (SmokeDetector: Merge pull request #4194 from Charcoal-SE/auto-blacklist-1594973069) (running on iBug/Sandy)

tripleee

!!/blacklist-username (?-i:^Aman Samadhiya$)

SmokeDetector

@tripleee An invalid pattern was provided, please check your command.

Marco Bonelli

Apparently it doesn't let me re-enable the condition. Still says that it's below 99.75 when it's 100. Condition ID is 686 if that helps, SmokeDetector pinged me earlier in here to notify me of the change. Either I'm missing something or it looks like a bug. cc/ @Makyen @ArtOfCode

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 1441ae3 (SmokeDetector: Auto blacklist of (?-i:^Aman Samadhiya$) by tripleee) (running on teward/Osiris)

tripleee

8:07 AM

!!/blacklist-website tractorguru\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 7bc4c85 (SmokeDetector: Auto blacklist of tractorguru\.com by tripleee) (running on teward/Osiris)

Mast

@MarcoBonelli There have been more users with autoflag-setting problems lately.

Marco Bonelli

Interesting.

Mast

I wouldn't sweat it, just focus on manual flagging first.

Marco Bonelli

Was the 99.75 thing a requirement that has been added lately? Or was it always there? Because I remember when enabling flagging for the first time the default setting (which I could enable) was way lower accuracy.

tripleee

8:19 AM

@MarcoBonelli I think it was always there, or at least from very early on

user435118

sdc report travel.stackexchange.com/a/158782/105447

SmokeDetector

[ SmokeDetector | MS ] Manually reported answer (94): Online resource for finding co-working space while traveling by Sandhya M on travel.SE

user435118

@MarcoBonelli Do you have any flagging conditions at all?

Marco Bonelli

@Daniil only that one, which MS doesn't let me enable.

user435118

Also, you need to check the “flags enabled” box at the top of your condition, in case you missed it

Marco Bonelli

8:27 AM

@Daniil I did check it before hitting "save", but to no avail.

user435118

Ah, I just remembered. There were issues with setting a condition for SO only. Try adding MSE to that condition.

Marco Bonelli

@Daniil Ah, interesting. That worked.

SmokeDetector

[ SmokeDetector | MS ] Body starts with title and ends in url, link at end of body, potentially bad keyword in body (198): Q. Who was the first martyr in Islam? by Noble Student on askubuntu.com

tpu- feedback received

Eliah Kagan

!!/watch noblestudent\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 60068b8 (SmokeDetector: Auto watch of noblestudent\.com by Eliah Kagan) (running on teward/Osiris)

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): Best Unisex PG/Hostels in Manyata, Bangalore? by zolo stays on meta.SE

tpu- feedback received

tpu- feedback received on Online resource for finding co-working space while traveling [MS]

tripleee

8:39 AM

!!/watch sneed\.in

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev f31c688 (SmokeDetector: Auto watch of sneed\.in by tripleee) (running on teward/Osiris)

tripleee

!!/watch zolo[\W_]*+stays(?!\.com)

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 9e57915 (SmokeDetector: Auto watch of zolo[\W_]*+stays(?!\.com) by tripleee) (running on teward/Osiris)

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Why ferrite core transformer not giving output? by Raquib Rahaman on electronics.SE

fp- feedback received

tripleee

!!/watch noble[\W_]*+student(?!\.com)

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 17e8704 (SmokeDetector: Auto watch of noble[\W_]*+student(?!\.com) by tripleee) (running on teward/Osiris)

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): Anonymous account usage by Sachin Jain on sharepoint.SE

Ryan M

8:45 AM

@SmokeDetector fp- disclosed affiliation

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev be5b8e5 (tripleee: ! Watch zolostays.com IP addresses) (running on teward/Osiris)

naa- feedback received

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): ExecutorService Performance Issues ✏️ by Deepak Kumar Yadav on stackoverflow.com

[ SmokeDetector | MS ] Link at beginning of body (42): Can we create e-commerce site like this gomechanic.in/pune in Wordpress by technical_geek on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): A suggestion regarding improving my class? by Shubham Prashar on stackoverflow.com

naa- feedback received on ExecutorService Performance Issues [MS]

tripleee

!!/watch gomechanic\.in

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 54c4063 (SmokeDetector: Auto watch of gomechanic\.in by tripleee) (running on teward/Osiris)

tripleee

@SmokeDetector suspiciously spammy - why would they link to a particular path within the site?

SmokeDetector

naa- feedback received

user435118

8:56 AM

@tripleee Because they want to recreate that specific path?

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Replace the original Samsung Galaxy S9 battery immediately by zodiac208 on stackoverflow.com

tpu- feedback received

tripleee

!!/blacklist-username (?-i:^zodiac208$)

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 9f7ff0a (SmokeDetector: Auto blacklist of (?-i:^zodiac208$) by tripleee) (running on teward/Osiris)

[ SmokeDetector | MS ] Link at beginning of answer (32): Where can I find the SQL-89 standard? by Jeremy Lee on dba.SE

fp- feedback received

user435118

@tripleee What's the point to blacklist the username if 1. All the detections are on SO 2. We are cathing all their posts anyway 3. Adding loads of unnecessary blacklist will slow down the scanning of posts? I see the point if they cross-post to multiple sites and we miss a few posts but I don't see the point here

Mast

If we know for sure it's crap, raising the confidence levels will help with flagging, right? That's what the confidence levels are for.

We're training a system that becomes better and better, more accurate.

user435118

9:07 AM

@tripleee Same here and this username has too many fp's (34 across SE)

Mast

We help the system, system helps us.

FPs are problematic.

user435118

@Mast That can be done with other methods like keyword, phone number, IP and website watches and blacklists

user435118

I'm just going off what I was told, just wondering why admins would contradict themselves

Ryan M

@Daniil How do you search usernames SE-wide, out of curiosity?

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in title, link at beginning of body (140): LIC Agent Job|LIC Career|LIC Salary and benefits |LIC Job in Hyderabad by Join as LIC Agent on superuser.com

Ryan M

9:11 AM

It would be nice to get the confidence up, though, so that it gets cross-posted to SOCVR. That blatant spam has been up for 10 minutes now (update: down now).

One more post and it'll qualify for blacklisting

user435118

@RyanM See Search for usernames across the network and in particular this SEDE query. Note: The list is updated on Sunday morning when SEDE refreshes

Ryan M

@Daniil Ah nice, thanks!

user435118

@RyanM Yep.

SmokeDetector

tpu- feedback received

tripleee

!!/watch joinaslicagents\.in

SmokeDetector

9:14 AM

[ SmokeDetector ] Blacklists reloaded at rev c5f315d (SmokeDetector: Auto watch of joinaslicagents\.in by tripleee) (running on teward/Osiris)

tripleee

@Daniil autoflagging mainly; also they seem to have created a new account each time, which is abusive in and of itself, and there is no guarantee they will restrict their spam to promoting this one domain which we are currently watching

Ryan M

@Daniil though I only find that one now-banned user who just posted that spam when I run that query

user435118

@RyanM I never said that username has fp's

tripleee

@Daniil I agree that it is risky and should be removed as soon as we see any FPs

but the ones I could find were all dormant, and at least one of them is a spam account, too

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): PHP Unserialization and duplicate variable names by Pianoscool on stackoverflow.com

fp- feedback received

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Keep hidden taskbar in background of maximized windows by Gerald Menzel on superuser.com

[ SmokeDetector ] Blacklists reloaded at rev 67f6ef7 (tripleee: ! Watch IP 95.217.142.125) (running on teward/Osiris)

naa feedback received on How to toggle/switch Windows taskbar from "show" to "auto-hide" (and vice-versa)? [MS]

[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad keyword in body (2): Jump Start Manufacturing Company-Automotive Power System Understanding by Bertlinsheng on ham.SE

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer, potentially bad ns for domain in answer (2): What are the benefits and drawbacks of variable hoisting in programming languages? by Sreevatsan on stackoverflow.com

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +3 more (686): Benefits of using Granite Male Enhancement: by Granitedssjf on meta.SE

tpu- feedback received

[ SmokeDetector | MS ] Blacklisted website in body, link at beginning of body, potentially bad ip for hostname in body (142): What is Halal Certification? by Iso KUWAIT on mathoverflow.net

tpu- feedback received

tpu- feedback received on Jump Start Manufacturing Company-Automotive Power System Understanding [MS]

[ SmokeDetector | MS ] Link at beginning of body (42): can you solve this problem for me which is related with javascript , A lesson in freecodecamp.com [Testing Objects for Properties] by Creating a channel Insha Allah on stackoverflow.com

fp- feedback received on What are the benefits and drawbacks of variable hoisting in programming languages? [MS]

fp- feedback received

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to get sticker ID in telegram? by Ноунейм 7 on stackoverflow.com

naa- feedback received

Mast

9:40 AM

@SmokeDetector Domain part of username.

tripleee

!!/watch halal[\W_]*+certification

Ryan M

@Daniil oh sorry, I misread your original message...missed what it replied to. My bad.

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 42e340d (SmokeDetector: Auto watch of halal[\W_]*+certification by tripleee) (running on teward/Osiris)

tripleee

!!/blacklist-website linsheng\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev c235704 (SmokeDetector: Auto blacklist of linsheng\.com by tripleee) (running on teward/Osiris)

tripleee

9:45 AM

!!/blacklist-username ^bert[\W_]*+linsheng$

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 6a6d076 (SmokeDetector: Auto blacklist of ^bert[\W_]*+linsheng$ by tripleee) (running on teward/Osiris)

[ SmokeDetector | MS ] Blacklisted website in body, body starts with title and ends in url, link at end of body, potentially bad keyword in body (297): best online quran academy by Naeem Ahmad on superuser.com

tpu- feedback received

Mast

!!/bisect livequranforkids.com

SmokeDetector

Matched by the following regexes:
livequranforkids\.com on line 18327 of watched_keywords.txt
quran[\W_]*+for[\W_]*+kids on line 249 of blacklisted_usernames.txt
quranforkids\.com on line 3386 of blacklisted_websites.txt

Mast

Good.

tripleee

!!/watch (?-i:^Naeem Ahmad$)

SmokeDetector

9:48 AM

[ SmokeDetector ] Blacklists reloaded at rev 3bb8d8e (SmokeDetector: Auto watch of (?-i:^Naeem Ahmad$) by tripleee) (running on teward/Osiris)

Jeff Schaller

@Mast if you're able to see the page at the "MS" link for the report, it says at the bottom which keywords or blacklists contributed to the spam score

SmokeDetector

[ SmokeDetector | MS ] Potentially bad asn for hostname in body, potentially bad keyword in body (2): Backlinks not showing by Pinky Sh on stackoverflow.com

CI on ebf5ee8 failed.

Mast

@JeffSchaller Yup, but there's small differences between the two lists.

user435118

@SmokeDetector @tripleee typo: - ns_ -> - ns:

tripleee

@Daniil argh, thanks for noticing

SmokeDetector

9:54 AM

[ SmokeDetector | MS ] Potentially bad asn for hostname in body, potentially bad keyword in body, potentially bad keyword in username (3): How to Boost Shopify Store Sales by Fizfy Solutions on meta.SE

tp feedback received

tripleee

!!/watch fizfy\.com

SmokeDetector

@tripleee That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.

[ SmokeDetector ] Blacklists reloaded at rev 28acacb (tripleee: ! Typo) (running on teward/Osiris)

tripleee

!!/watch fizfy(?!\.com)

SmokeDetector

@tripleee That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.

Mast

!!/bisect fizfy.com

SmokeDetector

9:59 AM

Matched by the following regexes:
fizfy\.com on line 15740 of watched_keywords.txt
fizfy(?!\.com)? on line 21370 of watched_keywords.txt

Mast

Ah, that's why...

Is it necessary to have both?

tripleee

the user name should trigger on the second

Transcript for