Charcoal HQ

SmokeDetector

00:01

[ SmokeDetector | MS ] Bad keyword in answer, potentially bad ip for hostname in answer (88): CBD Pre-scribed Cannabis Oil onboard a flight to United Kingdom by Swotson on travel.SE

metasmoke

tpu- feedback received

cigien

sdc watch- alpinols\.com

metasmoke

PR#5384 ("cigien: Watch alpinols\.com") opened by SmokeDetector

Zoe

!!/approve 5384

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 672a2ca (SmokeDetector: Merge pull request #5384 from Charcoal-SE/auto-blacklist-1609200155) (running on teward/Osiris)

[ SmokeDetector | MS ] Few unique characters in body, repeating words in body (135): deleted this post deleted ✏️ by Mehmet Bayram on stackoverflow.com

cigien

00:07

@SmokeDetector v

Zoe

sd v

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in username (1): When is "Dammit to hell" used? by gggdddjjj on ell.SE

metasmoke

fp- feedback received

Zoe

Mildly sus, ngl

cigien

On ell.se? I don't think so. How else would one ask that?

SmokeDetector

00:11

[ SmokeDetector | MS ] Toxic answer detected (80): Navigation not working for deeply nested component! Cant find solution? by kalculated on stackoverflow.com

metasmoke

fp- feedback received

naa- feedback received

ppwater

@cigien Why do you think that is naa? ^

cigien

It's not, my bad.

Zoe

meh, probably fine

cigien

Yeah, but still it's an answer.

ppwater

00:12

Ah, just checking if I missed something

cigien

@ppwater No. Well, FP is definitely appropriate anyway.

ppwater

Yeah.

Zoe

Just remembered some similar context on asking clarification on certain words that were tpu-

ppwater

@Zoe Is it? Why?

Makyen

!!/reject 5383 "This doesn't look like it's worth the potential FP. While there aren't a large number of accounts on SE which match this, there are some. In general, we should try to stay away from blacklisting a username which might be someone's actual name."

SmokeDetector

00:15

@Makyen Closed pull request #5383.

Zoe

@ppwater Emphasis on were, those questions were heavily contextual. Just seemed like it matched that pattern

cigien

@Makyen Ok, understood, thanks.

ppwater

@Zoe Oh, okay.

cigien

Can someone show me how to do a search by a regex for a username on SE? I can't seem to figure it out.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad ns for domain in answer (2): My own nameservers don't work without adding glue records, why? by rajkosto on serverfault.com

ppwater

00:25

@cigien I think you can't... meta.stackexchange.com/questions/189715/…

metasmoke

fp- feedback received

ppwater

You can't search by username But user ID I think. (not so sure. I should try out, but I don't want to)

cigien

@ppwater Hmm, that does seem to be the case. How did Makyen find all those Shane Watson's on SE then?

ppwater

@cigien text search?

@cigien user id?

cigien

@ppwater No, that only shows content where the name is mentioned in the body I think.

@ppwater But how do I get those IDs? I only know the names.

@Makyen This makes sense, but I can't seem to figure out how to do a search on SE for a pattern in a username. How did you go about this?

ppwater

00:31

@cigien If you go to a profile, stackoverflow.com/users/14091877/ppwater like mine, you see a link to a network profile. stackexchange.com/users/19279602/ppwater maybe 19279602 is my user id (the number)?

Or not.

cigien

@ppwater Right, if I know the account, I can get to the ID. But I don't know the account. And I want to search across SE, not just SO.

ppwater

Oh.. I can't seem to do it..

Makyen

@cigien I used: data.stackexchange.com/stackoverflow/query/1242966/…, which was created by Glorfindel and linked in their answer on MSE.

cigien

@Makyen Oh, I see. That makes complete sense. Thank you.

Makyen

np

metasmoke

00:35

Makyen/EC2-num02: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started at rev 63b113a (Makyen: This is the MS instance, so needs to post feedback) (running on Makyen/EC2-num02, Python 3.6.12)

cigien

@Makyen Oh, nice. Thanks for the link as well.

Makyen

np

SmokeDetector

[ SmokeDetector | MS ] Mostly punctuation marks in title (28): myContract.events.MyEvent() vs web3.eth.subscribe('logs', ...); by Mario Roma on ethereum.SE

metasmoke

fp- feedback received

ppwater

00:52

!!/alive

SmokeDetector

@ppwater ¯\_(ツ)_/¯

[ SmokeDetector | MS ] Bad keyword with email in body (56): Error in Sql syntax when connecting to a database using mysql by Azid Ali on stackoverflow.com

ppwater

@SmokeDetector f

SmokeDetector

01:11

[ SmokeDetector | MS ] Bad keyword in answer (87): CBD Pre-scribed Cannabis Oil onboard a flight to United Kingdom by Alpinols on travel.SE

metasmoke

tpu- feedback received

tp feedback received

cigien

^ That was a misclick. I got triggered by the alpinols. Probably the same user as Swotson, but they're not promoting their product this time.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How can you access USSD with a PWA? by cduffus on stackoverflow.com

metasmoke

tpu- feedback received

fp feedback received on [MS] CBD Pre-scribed Cannabis Oil onboard a flight to United Kingdom

Spevacus

I went through the same thing just now...

cigien

01:16

sdc watch- africastalking\.com

metasmoke

PR#5385 ("cigien: Watch africastalking\.com") opened by SmokeDetector

cigien

@Spevacus Yeah, I figured it would trip up others the same way, hence the comment.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): JOptionPane , Còmo setear por defecto el foco en el jtext cuando se abra el componente.? by PC-Ingenieria on es.stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in answer (87): How to burn MP3 files to a playable audio CD by Maria Night on superuser.com

metasmoke

fp- feedback received

cigien

sdc bisect acethinker

SmokeDetector

01:22

@cigien Matched by acethinker(?!\.com) on line 589 of bad_keywords.txt

cigien

Hmm, even mentioning acethinker seems to qualify it as spam.

SmokeDetector

[ SmokeDetector | MS ] Post is mostly images (14): How to test a Google Apps Script with multiple active users before publishing the addon? ✏️ by Servicio Racional on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Redirect specific useragent using HTaccess by Get money on stackoverflow.com

cigien

sdc watch- beseductiv\.com

metasmoke

PR#5386 ("cigien: Watch beseductiv\.com") opened by SmokeDetector

cigien

@metasmoke Very spammy link, posted by new user with spammy? name.

metasmoke

01:31

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in answer, potentially bad ip for hostname in answer, potentially bad keyword in answer, username similar to website in answer (153): Why does THC or CBD give me a mental boost? by Alpinols on psychology.SE

metasmoke

tpu- feedback received

cigien

@Spevacus Ok, this Alpinols thing is spam. Also, the one we both marked FP has been marked TP by a mod on travel.se, and the account appears to be nuked as well.

sdc watch- fivethirtyeight\.com

metasmoke

PR#5387 ("cigien: Watch fivethirtyeight\.com") opened by SmokeDetector

cigien

sdc watch- oxygenmag\.com

metasmoke

01:40

PR#5388 ("cigien: Watch oxygenmag\.com") opened by SmokeDetector

Spevacus

@cigien feedback adjusted, thanks for the ping

Side note: Fivethirtyeight is a very reputable site for facts on... Well, quite a few things. The most recently applicable being U.S. election status updates.

cigien

@Spevacus np, thanks.

Spevacus

Doesn't make that answer any less spam, but I'm not sure that fivethirtyeight is a part of that.

cigien

@Spevacus Oh, you're right. SE shows 455 results. Please reject that.

SmokeDetector

[ SmokeDetector | MS ] Offensive title detected (53): force windows 8 to properly shut down instead of quick shit down/hibernate (login issue as well) by TheStuntman on superuser.com

Spevacus

01:43

!!/reject 5387 "Lot of FPs, reputable site."

SmokeDetector

@Spevacus Closed pull request #5387.

cigien

The oxygenmag.com doesn't show any hits on SE. so I think that one's ok to watch.

metasmoke

fp- feedback received

Spevacus

!!/approve 5388

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev a9e017e (SmokeDetector: Merge pull request #5388 from Charcoal-SE/auto-blacklist-1609206037) (running on teward/Osiris)

cigien

01:45

I somehow think that's not the last we'll hear from alpinols.

SmokeDetector

[ SmokeDetector | MS ] Bad keyword with email in body (56): Network Manager Ubuntu 20.04.1 LTS by Pedro Landi on askubuntu.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Luật Thành Đô is a good law firm or not? by Luat Thanh Do on stackoverflow.com

metasmoke

tpu- feedback received

fp- feedback received on [MS] Network Manager Ubuntu 20.04.1 LTS

SmokeDetector

02:04

[ SmokeDetector | MS ] Link at beginning of answer (34): Sliding Glass Door Broward County is there any local by Pro Home Services on diy.SE

metasmoke

tpu- feedback received

cigien

sdc report diy.stackexchange.com/q/212371

SmokeDetector

[ SmokeDetector | MS ] Blacklisted user (71): Sliding Glass Door Broward County is there any local by Pro Home Services on diy.SE

cigien

@SmokeDetector Spam seed

sdc watch- sliding-glass-door-repair-pros\.com

metasmoke

PR#5389 ("cigien: Watch sliding-glass-door-repair-pros\.com") opened by SmokeDetector

cigien

02:08

Oops, I meant to leave "Spam seed" as the comment on the post I reported, but it took "Spam" as the feedback, and "seed" as the comment. What should I do?

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of body (42): What scale is this? Is it Jewish or Russian? by Rafael on music.SE

Spevacus

It's alright, just be mindful of that in the future. Also you can always edit the comment to be what you wanted.

!!/approve 5389

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 5ba8464 (SmokeDetector: Merge pull request #5389 from Charcoal-SE/auto-blacklist-1609207606) (running on teward/Osiris)

Spevacus

Perhaps also leave a comment explaining that you had accidentally feedbacked.

cigien

@Spevacus Done, and done. Thanks. I'll try to remember the keywords that count as feedback, and avoid that in the future.

Spevacus

02:13

Oh, also also - You can do !!/report (link) "Reason here" to automatically leave a comment on the MS report (and in the Why section of the report) to avoid that extra comment process entirely.

Quotes are required.

cigien

Oh, that's perfect. I forgot about that. Thanks again.

Spevacus

No problem :)

Makyen

@cigien The SOCVR Request Generator also has !!/report as one of the request types, with the request reason which you enter being posted as the comment. You might want to go through the options on the Request Generator, as you can tell it to always show the SD commands and have all SD commands sent to this room.

Spevacus

That's handy.

cigien

@Makyen Oh, cool. I've never used the Request Generator for an SD report. I'll go through the options as well, I haven't used those either. There's much more to that userscript than I realized. Thank you.

Makyen

02:28

np (both). Yeah, it was already posting messages to chat, so adding a few SD commands which are related to the post and/or user was a relatively minor extension of the functionality, and prevented me from wanting a completely different script to perform those functions.

SmokeDetector

02:38

Makyen/EC2-linux: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev 02f3044 (SmokeDetector: Auto unwatch of miniorange\.com by tripleee) (running on Makyen/EC2-linux)

iBug/Lily: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev 02f3044 (SmokeDetector: Auto unwatch of miniorange\.com by tripleee) (running on iBug/Lily)

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Male cat with mucus in stool by RMF on pets.SE

Adrian Mole

@cigien Hello...

cigien

This user posted 4 identical link only answers. No affiliation I can see, but still spam right?

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of body (42): Why is "on_read" and "on_write" close timing different? by namk on stackoverflow.com

Adrian Mole

How would anyone know if there's affiliation unless they can read Chinese?

cigien

@AdrianMole Hey hey. It looks like spam to me. Posted in quick succession especially.

Adrian Mole

02:45

My concern is that it's not a new user (over 2 years) ... but no other post.

cigien

Their name is Zhou Zebiao, which is not what the link says. But yeah, can't be sure.

metasmoke

fp- feedback received

fp- feedback received on [MS] Male cat with mucus in stool

Spevacus

Mod-accessible PII might reveal some affiliation we can't see. In short succession like that, it's quite likely there's undisclosed affiliation... But I can't be sure.

cigien

btw, the NAA flags are fine, you can leave those anyway.

Adrian Mole

@Spevacus Also, each is sort of relevant to the questions.

cigien

02:49

Yeah, I'd agree with Spevacus, it's very fishy, but I'm not comfortable reporting.

Adrian Mole

So, I come here for some certainty, and what do I get ... more uncertainty. ;-P

cigien

Oh, you wanted certainty? I think the ministry of silly hats is the right room for you :)

Spevacus

Spam is wild like that.

Adrian Mole

Wild spam? Made from the flesh of wild boars?

cigien

Ok, Bhargav nuked all the posts. Which doesn't mean they're spam of course.

Adrian Mole

02:52

One had at least one spam flag, though.

cigien

@AdrianMole Wait, what are you basing that on? I'm only seeing a couple of words related to the question. The links may be completely unrelated.

Adrian Mole

I said "sort of relevant" ... dunno.

Spevacus

I'll admit I didn't read the whole blog post (can't let the possible-spammer win, can we?) but it seemed tangentially related to my untrained eyes.

Adrian Mole

^ Same

Spevacus

Probably searched for keywords/tags and plastered it across those questions as answers. Oh well, we'll see if it becomes a larger trend later.

cigien

02:55

Ok, yeah, they are kind of related.

How does one watch a username like that?

Spevacus

The best solution would be to !!/addblu, imo.

Adrian Mole

Smokey has eyes that see the user ID.

Spevacus

Their next FP will clear it, and it gives us a heads up of their next activity.

cigien

sdc addblu stackoverflow.com/users/10108538

SmokeDetector

@cigien User blacklisted (10108538 on stackoverflow.com).

cigien

02:57

Sounds good. If they're not spamming, the next FP will sort it out.

metasmoke

tp feedback received on [MS] @hazi the user that asked the Monster question

cigien

^ Oh, should that be TP then? I marked it as FP earlier.

Makyen

@cigien Please see the second paragraph in Feedback Guidance: Repairable offensive posts.

cigien

@Makyen Ok, I see, it's not the entire post, but the edit itself that should have been blocked. Got it, thanks.

Hmm, my feedback just disappeared completely. I take it that was removed by an admin just now?

Spevacus

It appears to have been invalidated by an admin, yes.

Adrian Mole

03:06

Clever, those admins.

cigien

@Spevacus Yeah, that line is just shaded in red. Never seen that before, thanks.

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title (193): Why Can CBD Oil Help Me With Anxiety? by Alpinols AG on psychology.SE

metasmoke

tpu- feedback received

cigien

Alpinols again. Different account too.

sdc watch- alpinols\.ch

metasmoke

PR#5390 ("cigien: Watch alpinols\.ch") opened by SmokeDetector

Undo

03:14

!!/approve 5390

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev e45fad1 (SmokeDetector: Merge pull request #5390 from Charcoal-SE/auto-blacklist-1609211584) (running on teward/Osiris)

SmokeDetector

03:24

[ SmokeDetector | MS ] Potentially bad keyword in body (1): How to send notifications in Android? ✏️ by Neil Castellino on stackoverflow.com

metasmoke

fp- feedback received

fp feedback received on [MS] How to send notifications using alarms from start to end time, between fixed intervals, everyday, even if the app is killed in background in Android?

cigien

sdc bisect killed from the background So I used Alarm Manager

SmokeDetector

@cigien 'killed from the background' is not caught by a blacklist or watchlist item.

cigien

@SmokeDetector poof-force

Ok then.

Spevacus

Oh, that regex.

cigien

03:29

Keeps popping up in unexpected places.

@Spevacus I don't particularly want to look at it again. Is that the same one we saw a few days ago?

Spevacus

I think so, I didn't get the best look at it, though. It was posted and my eyes essentially just glazed over.

cigien

Yeah, likewise. Unpleasant to have to deal with. Hats off to whoever wrote it.

Spevacus

It's probably the result of many alterations throughout its lifetime.

cigien

Oh yeah, didn't think of that. Hats off to the lot of them then.

SmokeDetector

[ SmokeDetector | MS ] Misleading link (24): How to join an enumerated char list in Elixir by Glauber Silva on stackoverflow.com

metasmoke

03:40

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Horizontal hierarchy tree with group labels (labeled hierarchy) by John4 on tex.SE

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): LED ceiling fixture certain diodes blinking by gghh3456 on diy.SE

metasmoke

fp- feedback received

SmokeDetector

03:59

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Wechat uri not opening Wechat app in webpage/browser ✏️ by eliza beth on stackoverflow.com

teward/Osiris: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started at rev e45fad1 (SmokeDetector: Merge pull request #5390 from Charcoal-SE/auto-blacklist-1609211584) (running on teward/Osiris, Python 3.6.9)

Restart: API quota is 7335.

metasmoke

fp- feedback received

SmokeDetector

04:17

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to embed button with Vue code into cell inserted with insertCell()? ✏️ by Dmitry Fedorov on stackoverflow.com

metasmoke

fp- feedback received

cigien

sdc bisect handmade

SmokeDetector

@cigien Matched by handmade on line 14083 of watched_keywords.txt

cigien

Should we be watching handmade? There's 52 TP, and 131 FP. Also, the few TP I looked at would be caught by other things.

SmokeDetector

API quota rolled over with 7254 requests remaining. Current quota: 19999.

stackoverflow: 1596
math: 1141
ru.stackoverflow: 742
physics: 561
askubuntu: 491
superuser: 472
electronics: 373
es.stackoverflow: 346
unix: 340
serverfault: 248
pt.stackoverflow: 243
stats: 241
tex: 222
ell: 213
diy: 194
blender: 179
gis: 175
mathoverflow.net: 171
codegolf: 139
english: 130
apple: 125
salesforce: 119
scifi: 116
mathematica: 107
dba: 102
magento: 98
meta: 92
wordpress: 92
ethereum: 87
android: 81
rpg: 80
security: 78
cs: 78
chemistry: 77
academia: 74
codereview: 72
money: 71
ai: 71

ppwater

04:27

Hmm, I think we can unwatch it..

cigien

Technically, no :) Even if we should unwatch, only blacklisters can run the unwatch command.

I'm just being a grammar pedant, I know what you mean :)

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Getting "complete" and "menu-complete" to work together ✏️ by rayiik on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Off the shelf solutions to problem of 2 way to 1 way rotation by noName123 on engineering.SE

[ SmokeDetector | MS ] Blacklisted user (71): Find all the real roots of: $x^2+ \frac{x^2}{(x+1)^2}=3$? ✏️ by RAPETI HARSHAVARDHAN on math.SE

metasmoke

fp- feedback received on [MS] Off the shelf solutions to problem of 2 way to 1 way rotation

fp- feedback received

cigien

04:41

sdc isblu math.stackexchange.com/users/867741

SmokeDetector

@cigien User is not blacklisted (867741 on math.stackexchange.com).

cigien

Good.

sdc test a>) but I haven't found a place to buy

SmokeDetector

@cigien "but I haven't found a place to buy" is not caught by a blacklist or watchlist item.

@cigien "a>) but I haven't found a place to buy" is not caught by a blacklist or watchlist item.

cigien

@SmokeDetector why

SmokeDetector

@cigien Potentially bad keyword in body - Position 664-702: a>) but I haven't found a place to buy

> Would not be caught as a post, title or username.

cigien

04:46

hmm, is that a special character I'm not seeing?

Spevacus

That's a "buy ... a" (and reverse) regex I believe. It might be in findspam.py

cigien

Ah, right, findspam.py isn't queried with bisect or test. I'll take a look.

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in link text in answer, bad keyword in username, potentially bad asn for hostname in answer, potentially bad keyword in answer, potentially problematic ns configuration in answer (173): Clicking on 'Manage Offline Files' does nothing in the Sync Center by Managed IT Services in Dubai on superuser.com

metasmoke

tpu- feedback received

cigien

sdc bisect shazebict.com

SmokeDetector

04:58

@cigien Matched by shazebict\.com on line 12511 of watched_keywords.txt

Cody Gray

!!/report stackoverflow.com/a/65487470

SmokeDetector

[ SmokeDetector | MS ] Manually reported answer (94): Google Analytics SEO - PHP API by 周泽彪 on stackoverflow.com

metasmoke

tpu- feedback received

Cody Gray

!!/bisect blog.csdn.net

SmokeDetector

@CodyGray 'blog\\.csdn\\.net' is not caught by a blacklist or watchlist item.

> Would not be caught as a post, title or username.

Spevacus

05:01

Try that without escaping the periods.

cigien

Hmm, didn't we blacklist that user just now?

SmokeDetector

:56575284 > Would not be caught as a post, title or username.

Spevacus

I think Cody undeleted it and reported it just now.

SmokeDetector

@CodyGray 'blog.csdn.net' is not caught by a blacklist or watchlist item.

Cody Gray

@Spevacus Nope. This was a new one.

Spevacus

05:02

Oh? Smokey's slow, or that's a different user. Lame.

Cody Gray

It was a different user. Had only posted once.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): In the sentence "walking alone at night is scary", is 'alone at night' an adjective or an adverb? by Lee Zhiyuan on ell.SE

cigien

I'm guessing same person, but different account.

Cody Gray

I don't think we can watchlist this one, though. Too many false positives, based on an SO search.

Spevacus

I see. Well, that confirms our earlier suspicions.

Cody Gray

05:03

Not exactly.

I didn't read the earlier discussion, but given the large number of other answers with an SO link to the same content, many of them appearing to be legitimate answers, I am not 100% convinced it is a spam campaign.

May just be regular old NAAs. But I still want them deleted.

So I'd still like to have a report.

I guess I need my own SD...

Spevacus

Eh, more just that this user (if indeed they are the same user) was deliberately promoting... Something.

We weren't confident enough to spam flag or anything though. No obvious affiliation.

Cody Gray

Right, but what something?

Exactly.

cigien

Maybe we could watch something more specific, like blog.csdn.net/weixin_? Haven't run an SE search to see FPs though.

Cody Gray

There's no evidence it wasn't just a user trying to answer the question with a link to a "relevant" blog post.

Spevacus

Right.

Cody Gray

05:05

Although, truthfully, at least for English SO, I don't have an issue with blocking links to a blog that is entirely in Chinese.

cigien

Can we do site specific blocks like that?

Cody Gray

I'm 99% sure that the answer is "no".

I'm also 100% behind that feature request.

So, lots of high percentages here.

Spevacus

It would need to be coded into findspam.py, and it's generally only done for larger site specific problems I think... Nothing immediately available.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): What files can be safely deleted from the MinGW-w64 binaries? by nazibalalam on stackoverflow.com

Makyen

@Spevacus @cigien You're correct that it's the link + buy regex, but, no, it's in the normal watchlist, so !!/bisect will detect it.

Cody Gray

05:08

@Spevacus I think SO qualifies itself as a "larger site specific problem" :-)

Spevacus

Hah!

@Makyen Oh so we're just bad at bisecting? ;)

cigien

@Makyen But I thought the bisect I ran was correct.

sdc bisect a>) but I haven't found a place to buy

SmokeDetector

@cigien "a>) but I haven't found a place to buy" is not caught by a blacklist or watchlist item.

Spevacus

It's possible that more whitespace is required on either end of the string.

Cody Gray

@Spevacus Try trisecting next time

SmokeDetector

05:10

@cigien " a>) but I haven't found a place to buy" is not caught by a blacklist or watchlist item.

:56575372 " a>) but I haven't found a place to buy" is not caught by a blacklist or watchlist item.

Makyen

@cigien You're assuming that what was captured in the why data is the only portions of the text which are needed in order to trigger the regex.

cigien

@Makyen Oh, I've definitely been doing that. What are the other things I should be looking for?

Makyen

@cigien In this case, or generally?

Spevacus

@CodyGray My mistake. Should've been omegasecting from the beginning.

cigien

@Makyen Preferably generally :) If the answer is something I would be able to comprehend.

Cody Gray

05:13

Hah! I should start adding that caveat to all of my questions.

Inevitable answer: "You're too dumb to understand anything."

cigien

That's always a risk ;)

tripleee

@cigien some of the blacklist and watch expressions have lookarounds which will not end up in the captured text

Makyen

@cigien Well, the general answer is find the regex and then determine what the regex needs in order to be triggered. Alternately, you know text which will trigger the regex is contained within the post where it was detected. So, you can test larger portions of the text until you get enough such that it will trigger.

SmokeDetector

[ SmokeDetector | MS ] Blacklisted website in answer, blacklisted user (164): Google review for a hacked site by Ayushman Jaiswal on stackoverflow.com

metasmoke

tp feedback received

Makyen

05:18

@cigien For finding regexes in the lists, I commonly use grep to search through the files.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): Use SQLite SELECT to combine joined table column into one row for each category using a junction table by Vento on stackoverflow.com

cigien

@Makyen Ok, that might in fact be a good way to practice my regex skills.

metasmoke

fp- feedback received

cigien

@Makyen I think the second approach will be easier though, at least initially. I'll try that out, and hopefully I'll soon get a feel for which direction I should be expanding the search for the text I bisect.

I should probably play around with that during quieter periods, so as not to clutter up the chat.

Makyen

@cigien As for the regex which you're looking for, it's one that gets searched for on an irregular basis. If you do a search for "buy before" in this room, you'll find a few messages with it.

SmokeDetector

05:23

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): What's the issue with inventing a cold cathode X-ray tube for CAT scans? by ESL on physics.SE

cigien

@Makyen Indeed. Plus an explanation from you.

tripleee

@cigien you can use the Charcoal Test room for any noisier experimentation

or ultimately run your own Smoke Detector instance in a private room if you really geek out

Cody Gray

Huh. What else can be done from that room?

cigien

@tripleee Thank you, that's way better.

Makyen

@cigien For this to be detected by the regex, the "a>" at the start needs to be "</a>".

SmokeDetector

05:28

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Is There A Way To Make Flowey Like you? by Crea Torr on gaming.SE

metasmoke

fp- feedback received

tripleee

@CodyGray it's just another room with Smokey in it, though Halflife also lives there

cigien

@Makyen Yup, that's all it took :) Thank you so much. I'm going to muck around in Charcoal Test a fair bit for this stuff I think. It doesn't seem to be getting in anyone's way when I do that.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): How can I "give" a forked process a diferent dynamic library than the one it "asks" for? by Sally Beuford on unix.SE

metasmoke

[ SmokeDetector ] SmokeDetector started at rev 63b113a (Makyen: This is the MS instance, so needs to post feedback) (running on Makyen/EC2-num02, Python 3.6.12)

Makyen

05:31

@CodyGray SD is listening for commands in that room, as it is in several rooms. All commands are available in every room in which SD is listening. In general, we try to keep most interaction, particularly interaction which changes the state of SD, MS, or their GitHub repositories, here in Charcoal HQ.

Cody Gray

@tripleee I was thinking more if reporting could/should be done there. But I guess there's no real advantage.

SmokeDetector

[ SmokeDetector ] SmokeDetector started at rev e45fad1 (SmokeDetector: Merge pull request #5390 from Charcoal-SE/auto-blacklist-1609211584) (running on teward/Osiris, Python 3.6.9)

Makyen/EC2-linux received failover signal.

Restart: API quota is 19668.

tripleee

@CodyGray generally better to do it here; I have occasionally done blacklisting from there when I had evidence from Halflife which was convenient to copy/paste without switching rooms, but it occasionally led to confusion over in this room (minor confusion, but still)

Cody Gray

Also weird... why does that room have the SO chat theme, even though it's hosted on the SE chat server?

SmokeDetector

Restart: API quota is 19987.

Cody Gray

05:35

(Sorry, I'm experiencing severe, intermittent chat outages at the moment.)

(Which are different from chat outrages, although I experience those at times, too.)

Makyen

@CodyGray You can have rooms on chat.SE which have SO as their parent site, which will give them the SO chat theme.

Cody Gray

Interesting. I didn't know that.

Makyen

@CodyGray So am I. It also appears that SD is.

!!/location

SmokeDetector

@Makyen teward/Osiris e45fad1 (SmokeDetector: Merge pull request #5390 from Charcoal-SE/auto-blacklist-1609211584)

@Makyen Makyen/EC2-linux 02f3044 (SmokeDetector: Auto unwatch of miniorange\.com by tripleee)

[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): How to make use of class_weights to calculated custom loss fuction while using custom training loop (i.e. not using .fit ) by Pravin Girase on stackoverflow.com

Makyen

!!/standby-except osiris

SmokeDetector

05:36

Makyen/EC2-linux is switching to standby

[ SmokeDetector ] SmokeDetector started in standby mode at rev 02f3044 (SmokeDetector: Auto unwatch of miniorange\.com by tripleee) (running on Makyen/EC2-linux)

tripleee

@CodyGray (me too)

metasmoke

fp feedback received

Cody Gray

I'm almost certain I've been told the answer before, but... does Charcoal have whitelists?

If so, I would suggest looking into whitelisting model.fit. I've seen that result in several FPs, since it gets parsed as a domain name when it really shouldn't.

tripleee

there are a few, but they are basically corner cases and should perhaps be called something else (not only for reasons of political correctness)

Makyen

@CodyGray If the room has a parent site, not just the SE default, which is what Charcoal HQ has, then full moderator powers are limited to moderators who are moderators of that parent site, if the room is "private" (e.g. a "private" room is not automatically accessible to moderators of other sites).

Spevacus

05:40

Whitelisting model.fit on the wishlist.

tripleee

@CodyGray yeah, there are a few like that, and yes, we looked into fixing it at one point but the scope of the existing whitelist was slightly wrong IIRC

Spevacus

And the wishlist is on the pretty-please-with-sugar-on-top list.

Makyen

@CodyGray Yeah, the detection which picks that one up doesn't currently have a whitelist.

Cody Gray

@Makyen Yeah, I guess that feature makes sense in the context of the majority of SE sites. I'm just surprised a chat room on the SE chat server can have SO as its parent site, I suppose.

tripleee

there's an old bug report github.com/Charcoal-SE/SmokeDetector/issues/490

it's not hard to do per se but the proper solution would probably be to take the existing whitelists and change their scope, which needs more testing and understanding of what exactly the effects of those changes will be

SmokeDetector

05:51

[ SmokeDetector | MS ] Few unique characters in body, numbers-only title (154): 12312121212121212 by Martik Ambaliya on stackoverflow.com

metasmoke

tpu- feedback received

Makyen

Well, for the model.fit case specifically, it's that it, and at least one other domain, get detected on 34.102.136.180, which is a watched CIDR, with what appears to have a 398 Total / 11 TP (2.76% TP) / 376 FP / 14 NAA record. However, 5 of the 11 TP are only caught by this watch.

SmokeDetector

[ SmokeDetector | MS ] Offensive answer detected (78): AdWords Keyword Tool contradicts Google Trends by benjamin.chau on stackoverflow.com

metasmoke

tp feedback received

cigien

Hmm, that's back.

ppwater

05:56

@cigien What's back?

Cody Gray

@SmokeDetector TP, but the problem here isn't really the keyword "shitter". Rather, this is part of an ongoing campaign promoting links to blog.csdn.net/weixin_45114252/article/details/111809983

SmokeDetector

@CodyGray Registered answer as true positive. If you want to blacklist the poster, use trueu or tpu.

Spevacus

Smokey, chill!

cigien

@ppwater What Cody just said.

Cody Gray

No point in backlisting the user. There is no user. :-)

ppwater

05:57

@cigien Oh, thanks

tripleee

!!/watch weixin_\d+(?# blog.csdn.net)

Spevacus

I think there's a bit of ash where it once was...

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 93610d3 (SmokeDetector: Auto watch of weixin_\d+(?# https://blog.csdn.net/) by tripleee) (running on teward/Osiris)

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How do I convert an excel table to a javascript array? by TefoD on superuser.com

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): What's the issue with inventing a cold cathode X-ray tube? by ESL on physics.SE

ppwater

sd f

metasmoke

fp feedback received on [MS] What's the issue with inventing a cold cathode X-ray tube for CAT scans?

fp- feedback received on [MS] How do I convert an excel table to a javascript array?

SmokeDetector

06:12

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): What does American Virtual Cloud Technologies, Inc. offer that Big Tech clouds don't? by I never attended university. on softwareengineering.SE

[ SmokeDetector | MS ] Manually reported answer (94): Replacement of fflush(stdin) by Katuwa Mulla on stackoverflow.com

metasmoke

tp feedback received

fp- feedback received on [MS] What does American Virtual Cloud Technologies, Inc. offer that Big Tech clouds don't?

SmokeDetector

06:31

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title, toxic body detected (60): Can i pull out and quickly masturbate to ejaculate while having sex with my wife by Omar Hussain on islam.SE

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Link at end of answer (61): VPN via middle/jump server by Harry Oliver on serverfault.com

metasmoke

tpu- feedback received

cigien

sdc watch- groupxit\.com

metasmoke

PR#5391 ("cigien: Watch groupxit\.com") opened by SmokeDetector

SmokeDetector

06:34

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Multiple dllhost.exe virus? by Dane Brazinski on superuser.com

tripleee

!!/approve 5391

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 33d92c7 (SmokeDetector: Merge pull request #5391 from Charcoal-SE/auto-blacklist-1609223627) (running on teward/Osiris)

metasmoke

fp- feedback received

SmokeDetector

06:58

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Cannot read property 'native-element' of undefined by AWIRUT RITSAK on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in body, potentially bad asn for hostname in body (96): I need to configure the .httaccess file by Uttam Prajapat on stackoverflow.com

metasmoke

fp feedback received

SmokeDetector

[ SmokeDetector | MS ] Manually reported question (93): Hottest answers of all time on a specifc tag not right ✏️ by U11-Forward on meta.SE

double-beep

@SmokeDetector fp

SmokeDetector

@double-beep Registered question as false positive and removed user from the blacklist.

metasmoke

fp- feedback received on [MS] Cannot read property 'native-element' of undefined

Transcript for