Charcoal HQ

metasmoke

1:04 PM

tp feedback received on [MS] Is it allowed to wear silk mixed cotton cloths

Rubiksmoose

I went with tp but no flag

we can keep an eye on it. Those hashtags were just too much to ignore.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Cant seem to change width of bootstrap cards or add spacing? by Momori06 on stackoverflow.com

Mast

@JeffSchaller Bisect doesn't do a lot of things it should (IMO) be doing.

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Blacklisted user (71): What is the meaning of "exploration" in reinforcement and supervised learning? ✏️ by MickAel on ai.SE

metasmoke

1:08 PM

fp- feedback received

Hi guys ;)

Hello!

@Spevacus Hi!

@Mast fair enough; I was confused along with you, so I got curious and poked around the Commands page to see if they said anything about it. Didn't get as far as looking at the actual code to confirm, though.

SmokeDetector

1:25 PM

[ SmokeDetector | MS ] Potentially bad keyword in body (1): White border between flex items ✏️ by silvanomsjr on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Blacklisted user (71): Why do I get EnvironmentNotWritableError while installing eli5 by Debjyoti Banerjee on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer (35): General question relating to ISO 27001 compliance by Jessy Shan on security.SE

metasmoke

fp- feedback received

SmokeDetector

1:37 PM

[ SmokeDetector | MS ] Potentially bad keyword in body (1): XPATH in Selenium IDE to store text doesn't work ✏️ by Davos_d7 on stackoverflow.com

metasmoke

tpu- feedback received on [MS] General question relating to ISO 27001 compliance

fp- feedback received

Spevacus

@VictorVosMottor With regards to this report, there's actually an ongoing campaign for spammers to spam training in ISO certification. The website linked in the post is advertising training for that certification (see the "Get in touch" at the end of the post as well) and thus is spam. At first glance it looks informative, but it's really just advertising.

See also other key words, like "guarantees that our products are set to the highest standards via approved and documented processes and that we are committed to the highest standard of information security." - Note the use of "our products" and "we are committed"

!!/watch- iasiso-latinamerica\.com

metasmoke

PR#4889 ("Spevacus: Watch iasiso-latinamerica\.com") opened by SmokeDetector

Victor VosMottor

@Spevacus sorry, it is really confusing (

Spevacus

It's okay! That one's easy to miss at first glance.

I happen to have seen quite a few of these personally.

You'll get it. :)

Victor VosMottor

1:43 PM

@Spevacus I'll be more careful next time ;)

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Wordpress get list of child categories with pagination by Wajid Ullah Khan on stackoverflow.com

[ SmokeDetector | MS ] Few unique characters in answer, mostly punctuation marks in answer (123): Laravel initial page load is very slow because of duplicate queries it runs in order to get the correct translations ✏️ by Henk on stackoverflow.com

metasmoke

fp- feedback received on [MS] Wordpress get list of child categories with pagination

tp- feedback received

Spevacus

@SmokeDetector This is vandalism, but it's vandalism of a non-answer.

Victor VosMottor

@Spevacus Yeah

@Spevacus Do ya remember that i told you about a troll who posted malicious code and one of you !!/watch'ed "опасный код". It actually means "dangerous code". I created a bit better regex (but i works only with few linux/macos commands). Can you !!/watch it?

(sudo){0,1}(rm\s-rf\s~{0,1}\/(\s--no-preserve-root){0,1})|(\:\(\)\{\:\|\:\&\}\;\:)|(mv\s(.*)\/dev\/null)|(dd\sif=\/dev\/(.*)\sof=\/dev\/sda)

I did my best really ;)

@Spevacus hey?

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in answer (86): SharePoint version storage by masood taheri on sharepoint.SE

metasmoke

1:53 PM

tpu- feedback received

Spevacus

!!/watch- cosmeticsreviewsworld\.com

metasmoke

PR#4890 ("Spevacus: Watch cosmeticsreviewsworld\.com") opened by SmokeDetector

Spevacus

@VictorVosMottor You can do that yourself! But, let me search through MS with it to to see if we've caught anything with it first ;)

Victor VosMottor

@Spevacus ok, write me when it will be done ;)

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of answer (33): Where is Angle Measure Tool in ArcMap? ✏️ by RAKESH KUMAR on gis.SE

metasmoke

1:55 PM

naa- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): woo commerce sell products in particular area in cities by ganji madhukar on stackoverflow.com

metasmoke

fp- feedback received

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Blacklisted website in answer, link at end of answer, potentially bad ip for hostname in answer (155): Allow downvoting comments by Grateful Heart on meta.SE

metasmoke

tpu- feedback received

Spevacus

2:16 PM

@VictorVosMottor I gave your regex a search in MS, and it came back with a fair few FP's. Are you sure this is something we should watch?

Tried to link the search I used but chat formatting doesn't like it.

SmokeDetector

[ SmokeDetector | MS ] Few unique characters in body, mostly punctuation marks in body, mostly punctuation marks in title (148): Deleted....................ihinibibibub ✏️ by Orang on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): Simple Keras ML model for predicting multiplication isn't working by tobi.tobt on stackoverflow.com

metasmoke

tp- feedback received on [MS] Deleted....................ihinibibibub

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of answer (33): Pricing API for Azure by shanmugam on stackoverflow.com

metasmoke

naa- feedback received

Victor VosMottor

@Spevacus maybe i'm wrong but i really think it should work

SmokeDetector

2:28 PM

[ SmokeDetector | MS ] Bad keyword in answer, pattern-matching website in answer (164): Reset focus on Vue SPA page by zoha khan on stackoverflow.com

metasmoke

tpu- feedback received

Spevacus

Probably already caught, but worth a shot:

!!/watch- lgservicecenterbangalore\.co

SmokeDetector

@Spevacus That pattern looks like it's already caught by Bad keyword in body and Bad keyword in answer; append -force if you really want to do that.

double-beep

@VictorVosMottor you need to catch a space after sudo because the regex catches sudorm -rf ...

Victor VosMottor

@double-beep yes, sure!

updated

double-beep

2:32 PM

also, capturing groups are discouraged

SmokeDetector

[ SmokeDetector | MS ] Bad keyword with email in body, potentially bad ns for domain in body, potentially bad keyword in body (59): We are looking partners for new project by Spaul on magento.SE

metasmoke

tpu- feedback received

Victor VosMottor

!!/help

SmokeDetector

@VictorVosMottor I'm SmokeDetector, a bot that detects spam and offensive posts on the network and posts alerts to chat. A command list is available here.

Victor VosMottor

!!/whois blacklister

SmokeDetector

2:37 PM

@VictorVosMottor I am aware of 43 blacklist managers. Currently in this room: double-beep, Eliah Kagan, Makyen, Mithical, John Dvorak, DavidPostill, thesecretmaster, ArtOfCode, Suraj Rao. Not currently in this room: iBug, doppelgreener, WELZ, rene, CalvT, A J, a spaghetto, NobodyNada, Thomas Ward, Ferrybig, angussidney, K.Dᴀᴠɪs, tripleee, Zoe, Ashish Ahuja, mag, Shree, Erik the Outgolfer, micsthepick, Byte Commander, paper1111, ProgramFOX, Das_Geek, Henders, Tetsuya Yamamoto, Andy, bertieb, bwDraco, Undo, Glorfindel, Mast, Nisse Engström, Machavity, Kyll.

[ SmokeDetector | MS ] Luncheon meat detected (41): Where are the report queries and layouts stored in Oracle Apex 3.2? by Roger Pilkey on stackoverflow.com

metasmoke

fp- feedback received

Victor VosMottor

@Spevacus maybe it will be better to add this commands separately ?

Spevacus

@VictorVosMottor What do you mean?

Robert Columbia

@SmokeDetector f

@SmokeDetector k

Victor VosMottor

@Spevacus I mean !!/watch rm\s-rf\s\/ and all other commands like this.

Spevacus

2:47 PM

@VictorVosMottor It might be. When you've landed on a regex (or multiple regex strings) you'd like to watch, you can use !!/watch (your regex here) yourself to make a Pull Request for your regex to be watched.

You don't need me to do it for ya! ;)

It'll be reviewed by a blacklist manager whenever they have a couple of minutes to spare.

Victor VosMottor

@Spevacus ok, thanks ;)

!!/watch rm\s-rf\s\/

SmokeDetector

@VictorVosMottor You don't have blacklist manager privileges, but I've created PR#4891 for you.

metasmoke

PR#4891 ("Victor VosMottor: Watch rm\s-rf\s\/") opened by SmokeDetector

Victor VosMottor

!!/watch rm\s-rf\s\/\s--no-preserver-root

SmokeDetector

@VictorVosMottor You don't have blacklist manager privileges, but I've created PR#4892 for you.

metasmoke

2:49 PM

PR#4892 ("Victor VosMottor: Watch rm\s-rf\s\/\s--no-preserver-root") opened by SmokeDetector

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of answer, pattern-matching website in answer, potentially bad keyword in answer (112): From where can I get malayalam translation of srimad bhagavatam by Krsna Dasa on hinduism.SE (@Pandya)

Spevacus

Yeah that first one has 25 FP's. I don't expect that one to be too useful.

The second one might be, though.

metasmoke

tpu- feedback received

fp- feedback received

SmokeDetector

fp feedback on autoflagged post: From where can I get malayalam translation of srimad bhagavatam [MS]

Autoflagged FP: flagged by @SmokeDetector, @Ferrybig

Spevacus

That question does appear to ask for such resources.

Makyen

2:52 PM

@SmokeDetector The question is explicitly asking for sources to buy a book.

Waffles

double-beep

yeah, I just realised

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of body (45): Is there a way to convert buddyboss member URL to user_id? by hafizuddin on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): SQLserverからのデータ取得で「Invalid column name 'N'」になる by Yudai Suzuki on ja.stackoverflow.com

[ SmokeDetector | MS ] Link at end of answer, potentially bad ns for domain in answer, username similar to website in answer (125): Sync MP3 Ratings on Android, with MediaMonkey / MusicBee on Windows by tech windows on android.SE (@AndrewT.)

metasmoke

tpu- feedback received

Spevacus

3:00 PM

!!/watch- techwindows\.org

metasmoke

PR#4893 ("Spevacus: Watch techwindows\.org") opened by SmokeDetector

Daniel Widdis

waffles

Victor VosMottor

!!/watch dd\sif=.*\sof=\/dev\/sda

SmokeDetector

@VictorVosMottor The regex contains an unescaped "."; in most cases, it should be "\."; append -force if you really want to do that.

Victor VosMottor

!!/watch dd\sif=.*\sof=\/dev\/sda -force

SmokeDetector

3:03 PM

@VictorVosMottor The regex contains an unescaped "."; in most cases, it should be "\."; append -force if you really want to do that.

double-beep

!!/watch-force regex

Victor VosMottor

!!/watch-force dd\sif=.*\sof=\/dev\/sda

@double-beep thanks a lot ;)

SmokeDetector

@VictorVosMottor You don't have blacklist manager privileges, but I've created PR#4894 for you.

metasmoke

PR#4894 ("Victor VosMottor: Watch dd\sif=.*\sof=\/dev\/sda") opened by SmokeDetector

Victor VosMottor

!!/help

SmokeDetector

3:04 PM

@VictorVosMottor I'm SmokeDetector, a bot that detects spam and offensive posts on the network and posts alerts to chat. A command list is available here.

Spevacus

@DanielWiddis To be fair, I manually added that domain to that report when I saw Glorfindel bring it up.

Victor VosMottor

!!/coffee

SmokeDetector

@VictorVosMottor brews a cup of Americano for @VictorVosMottor

Makyen

@VictorVosMottor We're not going to watch something that has .* in it. At an absolute minimum, the number of characters matched by the . needs to be limited to a small number.

!!/reject 4894 "Don't use an unlimited repetition of ."

SmokeDetector

@Makyen Please provide an adequate reason for rejection so the user can learn from their mistakes. Use -force to force the reject

@Makyen Closed pull request #4894.

Daniel Widdis

3:05 PM

@Spevacus Maybe it was there and just poorly linked like @Glorfindel said, though. I remember having a 'huh' moment. Should trust my spidey-spam senses.

Spevacus

Hehehe

Victor VosMottor

@Makyen Why ?

Makyen

@VictorVosMottor Is --no-preserver-root a typo or intentional?

SmokeDetector

[ SmokeDetector | MS ] Bad keyword with email in answer (85): Custom Trustpilot invite to review email by wesley pablo on stackoverflow.com

[ SmokeDetector | MS ] Offensive answer detected, toxic answer detected (158): Copy rows based on cell value and paste on a new sheet with same cell value name by Cristian F on stackoverflow.com

metasmoke

tpu- feedback received on [MS] Custom Trustpilot invite to review email

tpu- feedback received

Spevacus

3:09 PM

!!/watch-number- +18133243782

metasmoke

PR#4895 ("Spevacus: Watch +18133243782") opened by SmokeDetector

Makyen

@VictorVosMottor Because there's no reason to be looking for the additional text when it's, potentially, separated by up to 30,000 characters from the first part. Basically, it's computationally expensive, unnecessary, and if it's really separated by a large number of characters, it's probably not what you are actually looking for.

Spevacus

!!/watch- lisakimberly(?:@gmail\.com)?

(Pretty sure that's how that works)

metasmoke

PR#4896 ("Spevacus: Watch lisakimberly(?:@gmail\.com)?") opened by SmokeDetector

fp feedback received on [MS] SQLserverからのデータ取得で「Invalid column name 'N'」になる

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): Buy now button in php without shopping cart by Andres Turjansky on stackoverflow.com

metasmoke

3:12 PM

fp- feedback received

Victor VosMottor

@Makyen typo sorry

Makyen

!!/reject-force 4892 "typo"

SmokeDetector

@Makyen Closed pull request #4892.

[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): How to change the Visual composer post grid's blog title from <h4> to <h2> tag? by Kunal Gulati on stackoverflow.com

metasmoke

fp- feedback received

Victor VosMottor

!!/watch rm\s-rf\s\/\s--no-preserve-root

@Makyen ^

SmokeDetector

3:25 PM

@VictorVosMottor You don't have blacklist manager privileges, but I've created PR#4897 for you.

metasmoke

PR#4897 ("Victor VosMottor: Watch rm\s-rf\s\/\s--no-preserve-root") opened by SmokeDetector

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): A wizard is magically engineering the perfect agriculture animal that will replace as many farm animals as possible, what is he making? by Wastrel on worldbuilding.SE

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Change domain name without changing host (OVH) by Elisa on webmasters.SE

Daniel Widdis

@VictorVosMottor what post is this supposed to be catching?

Spevacus

3:33 PM

If I remember correctly, it's tailored to catch problematic code that's posted by a russian troll or multiple trolls.

Not sure exactly, though, and I haven't been able to see an example post to see if it'd be used.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Pinterest API returns 0 for all pins comment counts by Gururaj Hathwar on stackoverflow.com

metasmoke

fp- feedback received

fp- feedback received on [MS] Change domain name without changing host (OVH)

Makyen

@VictorVosMottor I updated the regex somewhat. I'd suggest working on each portion separately, but I've kept them together to make looking at the overall effect easier. You can find a version of it to test here. I'd suggest that you fork it and deal with each section separately.

Please add substantial things which you don't want to catch, but which are similar to what you do want to catch. A substantial amount of designing a regex is making sure you reject the things you're not interested in matching.

You appear to not be aware that our watchlist and keyword blacklist have \b automatically prepended and appended to the regular expression. Your regexes need to account for them (i.e. include them in your testing, but not include them when adding to the list).

However, in the example I linked, the \W*:\(\)\{:\|:&\};:\W* portion is not something I'd accept in a normal watch, as it's computationally expensive for not much gain. For the normal watch and blacklist, the \W* on both ends would be necessary to make that have a possibility of matching, given the \b which is included at the start and end of the watchlist and keyword blacklist.

At a minimum, if that portion is really something we should be looking for, then we would want to treat it separately from the normal watchlist entries, due to the \b bookending, which is automatically added to the normal list.

Victor VosMottor

@DanielWiddis most of 'em are now deleted.

@Makyen thanks a lot!

Makyen

np

BTW: My choice of regex101.com instead of regexr.com is only personal preference, based mostly on regex101.com just being the one I use as a go-to for regex testing. Having only briefly tried regexr.com, I don't see anything inherently wrong, but I don't like having to scroll a long regex.

SmokeDetector

3:46 PM

[ SmokeDetector | MS ] Bad pattern in url answer (64): AttributeError: module 'tensorflow._api.v2.config.experimental' has no attribute 'set_lms_enabled' by Afshin Zlfgh on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body (95): My Android studio app crashes when I attempt to make a GET request ✏️ by The Learning Coder on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad keyword in body (2): Unable to access Splunk Web after launching Splunk by john paul on stackoverflow.com

[ SmokeDetector | MS ] Pattern-matching website in body, potentially bad ns for domain in body (97): good hotel worth booking by Formica1234 on apple.SE

metasmoke

fp- feedback received on [MS] My Android studio app crashes when I attempt to make a GET request

tpu- feedback received

tpu- feedback received on [MS] Unable to access Splunk Web after launching Splunk

Spevacus

!!/watch- ehotelsreviews\.com

Makyen

@Makyen I made a minor update to the regex, so the link to regex101.com was updated.

metasmoke

3:50 PM

PR#4898 ("Spevacus: Watch ehotelsreviews\.com") opened by SmokeDetector

Victor VosMottor

@Makyen Thanks for regex101.com! It is really more comfortable ;) I'm not completely new to regexes but I use them a bit rare ;)

SmokeDetector

[ SmokeDetector | MS ] Few unique characters in answer, no whitespace in answer, repeating characters in answer (264): Querying Azure Blob Table Storage on a Headless Linux for Nagios by Daniel Procházka on stackoverflow.com

metasmoke

tpu- feedback received

Makyen

@VictorVosMottor np. I'm glad you find it helpful.

Daniel Widdis

This whole chat room is an education in regex.

SmokeDetector

3:58 PM

[ SmokeDetector | MS ] Link at beginning of body (45): Sensor size of Sony HDR-HC7e ✏️ by Phönix 64 on photo.SE

[ SmokeDetector | MS ] Offensive answer detected, potentially bad keyword in answer, toxic answer detected (159): Windows Photos App "Save" instead of "Save a Copy" as the default by Karl F Herman on superuser.com

metasmoke

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, link at end of body, potentially bad ns for domain in body, +2 more (395): Where To Get Keto Premiere [Weight Loss Product]? by ketopillsau on patents.SE

metasmoke

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in username (2): How to find the IP address by email? by Excelr Tuhin on superuser.com

[ SmokeDetector | MS ] No whitespace in title (68): vewdwdwedwedewddwedwdewdwe ✏️ by Wafinator on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Telegram bot нow add bot to group? by Bekkazy on stackoverflow.com

metasmoke

4:17 PM

tp- feedback received

Victor VosMottor

!!/watch gridhosting\.co\.uk

metasmoke

tpu- feedback received on [MS] How to find the IP address by email?

SmokeDetector

@VictorVosMottor That pattern looks like it's already caught by Potentially bad keyword in body and Potentially bad keyword in answer; append -force if you really want to do that.

Victor VosMottor

@SmokeDetector Got it ;)

!!/whoami

SmokeDetector

@VictorVosMottor My id for this room is 120914, and it's not apnorton's fault.

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Only new events imported from calendar to sheet by user14302879 on stackoverflow.com

metasmoke

4:26 PM

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Mostly punctuation marks in body, repeating characters in body (97): Please help I need help and the title has to be 15 characters long by utkarsh samdani on askubuntu.com

metasmoke

tpu- feedback received

SmokeDetector

Makyen/EC2-linux: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev a31c9a8 (Undo1: Merge pull request #4855 from Charcoal-SE/plan-z --autopull) (running on Makyen/EC2-linux)

Thomas Ward

@Makyen saw your message, no problem and no worries, I'm in no rush. At least we've discovered there's issues and bugs that need fixing :)

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in link text in body, bad keyword in title, potentially bad keyword in body, potentially bad keyword in title (264): Where to buy Adderall 30mg in Canada? by Ambiensleepguide on stackoverflow.com

metasmoke

4:39 PM

tpu- feedback received

Spevacus

!!/watch- ambiensleepguide\.com

metasmoke

PR#4899 ("Spevacus: Watch ambiensleepguide\.com") opened by SmokeDetector

Spevacus

Lots of new spam domains today.

Daniel Widdis

Must have been a start-of-fall sale.

Thomas Ward

!!/accept 4899

SmokeDetector

4:41 PM

@ThomasWard No such command 'accept'.

Thomas Ward

screw off

!!/approve 4899

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev dec74eb (SmokeDetector: Merge pull request #4899 from Charcoal-SE/auto-blacklist-1600792826) (running on teward/Osiris)

teward/Osiris: Executing automatic scheduled reboot.

metasmoke

Makyen/EC2-num02: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started at rev fc3d591 (Undo1: plan z) (running on Makyen/EC2-num02, Python 3.6.12)

SmokeDetector

[ SmokeDetector ] SmokeDetector started at rev dec74eb (SmokeDetector: Merge pull request #4899 from Charcoal-SE/auto-blacklist-1600792826) (running on teward/Osiris, Python 3.6.9)

Restart: API quota is 10839.

Victor VosMottor

@Spevacus Why it reboots so often ?

SmokeDetector

4:53 PM

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, potentially bad keyword in answer (172): Did I get "hacked"? Need help by jane holly on security.SE

metasmoke

tpu- feedback received

Victor VosMottor

!!/watch onlineghosthacker247@gmail\.com

SmokeDetector

@VictorVosMottor That pattern looks like it's already caught by Bad keyword in answer and Bad keyword in body; append -force if you really want to do that.

[ SmokeDetector | MS ] Blacklisted user (71): Why npm is not able to install modeules both localy and globally by Nate Gallagher on stackoverflow.com

metasmoke

naa- feedback received

Makyen

@VictorVosMottor There are actually four different SD instances which are currently running (3xSD, 1xMS). Each has an automatic reboot scheduled every 6 hours. All the instance's reboots are fairly in-sync at the moment, so it looks like a lot at one time. In addition, the instance which is "active" posts a message which looks quite a bit like a reboot when the watchlists and/or blacklists are changed. The "active" instance will also reboot when there's a change to the code it's supposed to be running.

Victor VosMottor

5:00 PM

@Makyen thx

Spevacus

Does NAA feedback remove a user from the user-blacklist?

Well... I guess I could always just...

!!/isblu stackoverflow.com/users/14317999/nate-gallagher

SmokeDetector

@Spevacus User is blacklisted (14317999 on stackoverflow.com).

Spevacus

So it does not. Neat.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): Why is this XPATH not working in Selenium IDE (UI.VISION) by Davos_d7 on stackoverflow.com

metasmoke

fp- feedback received

Kulfy

5:27 PM

!!/test-a Dumpmedia

SmokeDetector

> Would not be caught as a post, title or username.

> Would not be caught as an answer.

Kulfy

!!/scan superuser.com/a/1587515/1049284

SmokeDetector

@Kulfy Post 1: This does not look like spam

Kulfy

Hmm. User posted on AU and SU.

I'm not sure if that's really spam.

Spevacus

@Kulfy That site's also pretty interesting. I'm... pretty sure that this isn't Clint Eastwood...

Thomas Ward

5:39 PM

@Kulfy whats the AU post?

Same.

i meant a link lol

waffles

0

A: How to do I convert an webm (video) to a (animated) gif on the command line?

i recommend you to use a third party converting tool called DumpMedia Video Converter, it has online and offline versions, I use the online tool all the time, save time and space, but you can use the offline tool to convert in batch, means you can convert the whole playlist at one go.

Victor VosMottor

I guess it is not.

Mast

5:41 PM

@Kulfy Not really an answer anyway.

SmokeDetector

[ SmokeDetector ] SmokeDetector started in standby mode at rev fe74f63 (Makyen: Add SmokeDetector privileges for Victor VosMottor) (running on iBug/Coral)

Mast

It's a terribly fishy post, I could imagine raising a flag on that.

@VictorVosMottor That's not how we catch gmail addresses.

!!/bisect onlineghosthacker247@gmail.com

SmokeDetector

@Mast Matched by onlineghosthacker\d+(?:\W*+(?:at\W*+)?gmail\W*+(?:dot\W*+)?(?:com)?)?(?#onlineghosthacker247 seen) on line 2071 of bad_keywords.txt

Spevacus

*squints*

Mast

Or onlineghosthacker247(?:@gmail\.com)?, if they'd ever write it normally.

Spevacus

5:46 PM

Ah, yeah, that one is typically masked with spaces and other weirdness to try and get by detection.

Mast

Not very successfully, but I'd love if someone finds a rule that raises the confidence on those posts safely. Too many of them are under 200.

They change it up just enough to make that tricky.

Spevacus

My first instinct is to suggest blacklisting "online ghost hacker" (with or without spaces between) which should catch the requisite e-mail that's always in there. But I'm assuming you're looking for something a bit more elegant that goes with the rest of the body?

Mast

@Spevacus That would trigger Bad keyword in answer, which is already triggered.

So no bonuspoints.

Spevacus

Are the "mailto:" links considered keywords or links? Would it be possible to blacklist that as if it was a website?

Would be "blacklisted website in answer" for some bonus weight if we could do that.

Mast

I don't think anything not a website should go on the website list.

Spevacus

5:54 PM

Fair.

The most recent instances appear to stem from a user named jane holly. Though I'm sure that's bound to change eventually.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): TSQL - Group Sales_Rep rows to columns and display DESCRIP column as rows No aggregate by Mark on stackoverflow.com

Mast

@Spevacus Yes. We could blacklist it, get a couple of FP and in a week or two we'll never get a TP on it again.

All the while increasing the confidence on 2-3 posts I guess.

Spevacus

Why can't the spammers just be predictable? :(

Mast

But that's all just gut feeling.

@Spevacus Only the keto ones. And some of the Indians.

metasmoke

fp- feedback received

SmokeDetector

5:58 PM

[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Value error in keras CNN in model fitting by SABITHA S G on datascience.SE

Mast

We could target the titles...

But too easy to get wrong.

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How to keep application awake in flutter? by LearnAndTeach on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Google Sign-in not working in new Huawei devices: "There was a problem communicating with google servers" ✏️ by CYREX on android.SE (@AndrewT.)

[ SmokeDetector | MS ] Link at beginning of answer (33): How to compare two ISO standard fingerprint templates? by methu on stackoverflow.com

metasmoke

fp- feedback received

naa- feedback received

Ryan M

6:13 PM

I am unable to read the !!/isblu command without mentally appending "da ba dee, da ba die" to it

3

Mast

That's !!/imblu

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How would you make a good iron farm? by Dra_gOn on gaming.SE

Mast

@SmokeDetector A YouTube video hiding in a Pinterest post hiding behind a Google search.

I'm not sure what to make of that.

SmokeDetector

[ SmokeDetector ] SmokeDetector started in standby mode at rev dec74eb (SmokeDetector: Merge pull request #4899 from Charcoal-SE/auto-blacklist-1600792826) (running on Makyen/EC2-linux)

metasmoke

tp feedback received

[ SmokeDetector ] SmokeDetector started at rev fc3d591 (Undo1: plan z) (running on Makyen/EC2-num02, Python 3.6.12)

SmokeDetector

6:26 PM

[ SmokeDetector ] SmokeDetector started at rev dec74eb (SmokeDetector: Merge pull request #4899 from Charcoal-SE/auto-blacklist-1600792826) (running on teward/Osiris, Python 3.6.9)

Restart: API quota is 9702.

metasmoke

naa- feedback received

SmokeDetector

6:44 PM

[ SmokeDetector | MS ] Few unique characters in answer, potentially bad keyword in answer (88): Set "component state" by hand in GenerateTableFetch processor by user14323073 on stackoverflow.com

metasmoke

tpu- feedback received

Victor VosMottor

6:57 PM

!!/help

SmokeDetector

@VictorVosMottor I'm SmokeDetector, a bot that detects spam and offensive posts on the network and posts alerts to chat. A command list is available here.

Victor VosMottor

!!/brownie

SmokeDetector

@VictorVosMottor Brown!

Victor VosMottor

!!/lick

SmokeDetector

@VictorVosMottor licks ice cream cone

metasmoke

7:05 PM

fp feedback received on [MS] Google Sign-in not working in new Huawei devices: "There was a problem communicating with google servers"

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to print a string on a specific position in the console? by Saptak P on stackoverflow.com

SmokeDetector

7:26 PM

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): StoreKit verification error 21002: The data in the receipt-data property was malformed ✏️ by zedoul on stackoverflow.com

metasmoke

fp feedback received on [MS] How to keep application awake in flutter?

naa feedback received on [MS] How to print a string on a specific position in the console?

fp feedback received

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of answer (33): Correcting grammatical errors versus content in post-graduate coursework submissions in the sciences by kristine Jane on academia.SE

metasmoke

tpu- feedback received

Spevacus

!!/watch- knovva\.com

metasmoke

PR#4900 ("Spevacus: Watch knovva\.com") opened by SmokeDetector

Mast

7:33 PM

!!/approve 4900

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 5daf642 (SmokeDetector: Merge pull request #4900 from Charcoal-SE/auto-blacklist-1600803193) (running on teward/Osiris)

Mast

!!/gitstatus

SmokeDetector

On branch deploy
Your branch is up to date with 'origin/deploy'.

Untracked files:
(use "git add <file>..." to include in what will be committed)

errorLog.txt

nothing added to commit but untracked files present (use "git add" to track)

[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): Can I fix 6 pin volume potentiometer by connecting the Right & Left outputs? by Stellablue on electronics.SE

[ SmokeDetector | MS ] Link at end of answer, potentially bad ns for domain in answer, potentially bad keyword in answer (63): Why does Thunderbird/Firefox need my Windows account password to create a Primary/Master Password? by kiuyt on superuser.com

metasmoke

fp- feedback received on [MS] Can I fix 6 pin volume potentiometer by connecting the Right & Left outputs?

Spevacus

@SmokeDetector k Copy pasted some text from this answer above it, then threw a spam link in at the end.

metasmoke

7:38 PM

tpu- feedback received

Spevacus

Still alive: android.stackexchange.com/questions/38048/…

SmokeDetector

[ SmokeDetector | MS ] Luncheon meat detected (41): Easiest way to get substring from QString in Qt by Danzow on stackoverflow.com

Mast

@Spevacus Poof

Spevacus

Woohoo!

Mast

What was the MS on that?

@SmokeDetector Fixed during grace period.

Spevacus

7:53 PM

@Mast Here you are.

Mast

!!/bisect techwindows.org

SmokeDetector

@Mast 'https://techwindows.org' is not caught by a blacklist or watchlist item.

Mast

!!/approve 4893

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev d1e04e9 (SmokeDetector: Merge pull request #4893 from Charcoal-SE/auto-blacklist-1600786837) (running on teward/Osiris)

Mast

!!/reject 4891 "Way too many FP. Current score in MS is 1 true positive, 25 false positives, and 2 NAAs. And who knows how many false hits in already existing, uncaught legitimate questions."

SmokeDetector

7:55 PM

@Mast Please provide an adequate reason for rejection so the user can learn from their mistakes. Use -force to force the reject

@Mast Closed pull request #4891.

Mast

@SmokeDetector cc @VictorVosMottor

!!/approve 4888

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 95e130c (SmokeDetector: Merge pull request #4887 from Charcoal-SE/auto-blacklist-1600776905) (running on teward/Osiris)

[ SmokeDetector ] Blacklists reloaded at rev ed04d99 (SmokeDetector: Merge pull request #4888 from Charcoal-SE/auto-blacklist-1600778265) (running on teward/Osiris)

Makyen

@Mast FYI: Convert URLs | Charcoal convert from SE post URL

Mast

!!/approve 4889

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev c65ac55 (SmokeDetector: Merge pull request #4889 from Charcoal-SE/auto-blacklist-1600782124) (running on teward/Osiris)

metasmoke

8:02 PM

fp- feedback received

Mast

@Makyen Thanks.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): how to draw a line or play sprites on the path of the player unity2d by Malcolm Cooper on stackoverflow.com

Makyen

np

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): Influence of historical data in Distance Matrix API by Cristian David Aguazaco on stackoverflow.com

metasmoke

fp- feedback received on [MS] how to draw a line or play sprites on the path of the player unity2d

SmokeDetector

8:04 PM

[ SmokeDetector | MS ] Potentially bad keyword in username (1): Explanation of a quote from The Great Gatsby by jhgfds on english.SE

metasmoke

fp- feedback received on [MS] Influence of historical data in Distance Matrix API

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in answer, blacklisted user (72): Cannot connect MySQL Workbench to MySQL server by Angel Torre on askubuntu.com

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): How to use _spPageContextInfo in sharepoint Application by bizloadsolutions on stackoverflow.com

Mast

@SmokeDetector Undisclosed affiliation, username is identical to name of author.

metasmoke

8:05 PM

tpu- feedback received

Mast

@SmokeDetector Username in domain.

!!/watch- bizloadsolutions\.wordpress\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 0642fed (SmokeDetector: Auto watch of bizloadsolutions\.wordpress\.com by Mast) (running on teward/Osiris)

Mast

@Mast 4889 with reservations.

should be fine

@metasmoke @VictorVosMottor Why?

Spevacus

@Mast Not sure where the PR found a false positive in its comment. The MS search doesn't reveal any.

Mast

@Spevacus Couldn't find any either. There's no occurrence of it on SE and I don't see an immediate problem with it, but whatever MS was seeing might throw up later.

SmokeDetector

8:12 PM

[ SmokeDetector | MS ] Post is mostly images (14): I am having trouble making my page responsive ✏️ by Peregrine Falcon on stackoverflow.com

Spevacus

Coolio, thanks for the approval ;D

Mast

!!/reject 4897 "Just because the code is malicious, doesn't mean it's spam or a troll. Insufficient justification."

SmokeDetector

@Mast Closed pull request #4897.

Mast

Is malicious code on-topic anywhere? Sure. Plenty of places. Including Code Review.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Percentile in Case Statement In Athena SQL by Harry on stackoverflow.com

metasmoke

8:14 PM

fp- feedback received

Mast

d.tax, very evil...

!!/approve 4890

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev e4d6a3c (SmokeDetector: Merge pull request #4890 from Charcoal-SE/auto-blacklist-1600782868) (running on teward/Osiris)

Mast

!!/approve 4898

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev a3c2d8b (SmokeDetector: Merge pull request #4896 from Charcoal-SE/auto-blacklist-1600787480) (running on teward/Osiris)

[ SmokeDetector ] Blacklists reloaded at rev 3044370 (SmokeDetector: Merge pull request #4898 from Charcoal-SE/auto-blacklist-1600789849) (running on teward/Osiris)

Spevacus

@SmokeDetector ignore-

Wasn't spam 3 months ago, won't be in the future.

metasmoke

8:19 PM

fp- feedback received on [MS] I am having trouble making my page responsive

SmokeDetector

8:35 PM

[ SmokeDetector | MS ] Repeating words in body (42): conda install tensorflow-gpu by curious-g on stackoverflow.com

SmokeDetector

8:53 PM

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Can you give examples where there are multiple theories which give the same predictions of an experiment or phenomena? by Kay Bei on physics.SE

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Passportjs Invalid login due to multiple username in database (nodejs, jade, npm) by Adebayo Omolumo on stackoverflow.com

Transcript for