Charcoal HQ

SmokeDetector

00:02

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): Kali Linux 2016 Rolling Inverted Mouse Scrolling ✏️ by oa79 on unix.SE

[ SmokeDetector | MS ] Blacklisted user (71): How to detect Operating System with JavaScript (without deprecated window.navigator) by coolman44 on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad asn for hostname in body, potentially bad ip for hostname in body (2): NoReverseMatch at /add_stock Reverse for 'delete' with arguments '('',)' not found. 1 pattern(s) tried: ['delete/(?P<id>[^/]+)$'] by django34 on stackoverflow.com

metasmoke

fp feedback received on [MS] How to detect Operating System with JavaScript (without deprecated window.navigator)

tp feedback received on [MS] Is it right to call out out “50...40..30..RETARD” in a C172 simulator?

fp feedback received on [MS] Kali Linux 2016 Rolling Inverted Mouse Scrolling

fp feedback received

SmokeDetector

[ SmokeDetector | MS ] Username similar to website in answer (64): Alignment in Twitter Bootstrap 3 navbar toggle by jonasdev on stackoverflow.com

[ SmokeDetector | MS ] Few unique characters in body (94): is there an easy way to determine whether a function over or under the x-coorindate? by AhamdTübingen on math.SE

metasmoke

Makyen/EC2-num02: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started at rev 63b113a (Makyen: This is the MS instance, so needs to post feedback) (running on Makyen/EC2-num02, Python 3.6.12)

fp- feedback received on [MS] ASP.NET Web API using Entity Framework error within controller

Spevacus

00:17

I had some spare time and decided I would see how many watches each blacklister had in the list. I grabbed the list of blacklisters and the raw watched_keywords file, parsed it and here are the results! First, Makyen has a staggering 8695 watchlist items, followed only by tripleee with 5246. Coming in third is Glorfindel at 1690 and Eliah Kagan at 1312.

5

Here's a pie chart to illustrate how much of the watchlist each person makes up.

7

Ryan M

@SmokeDetector edited to "......................................deleted................................", custom-flagged to explain

@Spevacus whooo I made it on the chart :D

Spevacus

/o/

cigien

That's very cool. Can you share the raw numbers as well?

Spevacus

@cigien Yup! Here's the raw data, in the form of a Google Sheets doc.

cigien

Thanks.

Spevacus

00:24

I used C# to parse the text file and manually grabbed a list of all of the blacklisters via the related whois command and tossed it into a spreadsheet file. Someone else could probably do better than I at illustrating it (I just used Sheets' table tool) but there's that!

I had initially planned on grabbing everyone (all privileged users) and comparing it to the watchlist, but I quickly noticed that not every user in users.yml uses the same name as the comment next to their IDs indicates. I suppose I could yoink all users from rooms.yml as most privileged usernames are there, but I actually only thought of that just now... So, hey.

cigien

@SmokeDetector f domain doesn't actually go anywhere.

@Spevacus I'm looking forward to seeing those results when you have spare time next ;)

Spevacus

One of the issues is that some users like changing their usernames. When someone adds something to the watchlist, it takes their current username from the chat parent of the user sending it at the time. For example, Sonic very frequently changes his name and submits more than a couple of watches (46 at the moment), and I have no way of tracking each user's username changes if I'm doing this all manually. For the known outliers I can make exceptions (matching against only "Sonic") but...

I'm not sure how effective that would be if quite a few users have changed their name between watchlist items.

cigien

Oh, I wonder how common it is for users to change their usernames. Seems like something one wouldn't want to do often. At least I wouldn't.

Spevacus

00:40

Something I'd also be interested in is how many TP's watches on behalf of each watch author have been produced. However that's getting into using the data exploders on MS and I am nooot proficient with SQL or any of that stuff (It's on the "I need to learn this" list, though!). Plus it would likely be a huge list of regexes (associated with their author) that would take MS forever to search for TP's for and count.

SmokeDetector

[ SmokeDetector | MS ] Non-latin link in answer (79): Update <ul> with event handler function by Mauricio Lima on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): My CSV data when read into R via read.table after so many lines, stops creating new rows and separating the values by "," by Finn Harrigan on stackoverflow.com

metasmoke

fp- feedback received

fp- feedback received on [MS] Update <ul> with event handler function

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): I'm trying to write a code from a book that allows you to type your first name and display it by Lorenzo on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

01:02

[ SmokeDetector | MS ] Offensive body detected, offensive title detected (97): What is the difference between 1) Build solution (ctrl+shit+B), 2) Build"FileName" (Shift+F7) and 3) Build only "FileName" in Visual Studio 2019? by Zahhak on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body (95): A Common Lisp solution to "Einstein's Riddle" by hilal saim on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] No whitespace in title (69): UpdateInstallationDisk by Steve on askubuntu.com

metasmoke

fp- feedback received

Ryan M

01:13

@Spevacus I've vaguely toyed with the idea of "scoring" rules by their contribution to both good and bad detections. So for instance, a post detected solely because of a watch would give that watch full credit (for TP) or penalty (for FP) for detecting it, but if it only contributed 1 extra point to a 600+ weight post, it'd get far less credit/penalty.

definitely won't have time for that in the near future, though.

Spevacus

@RyanM Sounds awesome but very time consuming, hahaha.

Ryan M

If I do do it, it'll be by re-using code from SD.

SmokeDetector

01:32

[ SmokeDetector | MS ] Toxic answer detected (80): How do you run a docker container that is already made that requires input from the user? by Ryan Morris on stackoverflow.com

metasmoke

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Mostly punctuation marks in answer (36): Bold font weight for LaTeX axes label in matplotlib by Dafydd Gibbon on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Calculating level of confidence from an interval estimate by user308062 on stats.SE

metasmoke

01:47

naa- feedback received

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in answer (86): How to download videos from YouTube to Google Drive by Maria Night on webapps.SE

[ SmokeDetector | MS ] Bad keyword in answer (86): Json fetch returning elements in random order (Javscript) by Guilherme A C Zaluchi on stackoverflow.com

metasmoke

02:05

fp feedback received on [MS] Derivation of Euler-Lagrange equations for Brox Optical Flow

metasmoke

02:18

fp- feedback received

naa- feedback received on [MS] How to detect Operating System with JavaScript (without deprecated window.navigator)

fp- feedback received on [MS] Multiple memcached servers question

SmokeDetector

[ SmokeDetector | MS ] Post is mostly images, potentially bad keyword in answer (15): Users should have the "Unsung Hero" badge, but they have not by الدنيه مادري شبيهه وياي on meta.SE

[ SmokeDetector | MS ] Post is mostly images (14): How to position image inside container and be under then text? by Lichay Tiram on stackoverflow.com

Makyen/EC2-linux: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev fc220f4 (SmokeDetector: Merge pull request #5518 from Charcoal-SE/auto-blacklist-1609921007) (running on Makyen/EC2-linux)

metasmoke

02:39

tpu- feedback received on [MS] Users should have the "Unsung Hero" badge, but they have not

SmokeDetector

teward/Osiris: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started at rev 2623aa1 (SmokeDetector: Auto watch of khalifklenton(?:@gmail\.com)? by Makyen) (running on teward/Osiris, Python 3.6.9)

Restart: API quota is 6447.

Rob

@Makyen The previous instance of MetaSmoke was taking over a minute to load the [MS] links; I was going to report it but there was a reboot, which mostly fixed the problem. Now it takes over 4 seconds, which is still too slow (but much better); here's an example link, and another (which took 19 seconds). Thanks.

SmokeDetector

iBug/Lily: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev 02f3044 (SmokeDetector: Auto unwatch of miniorange\.com by tripleee) (running on iBug/Lily)

Rob

02:54

Those two reboots were under 5 minutes apart.

Now links load promptly.

Makyen

@Rob OK. I'm glad to hear that it's working better. I'm not sure what you mean by a reboot, but I get the feeling you mean the "Executing automatic scheduled reboot" messages in chat. Those messages indicate that the respective SmokeDetector instance is rebooting, not MS.

Rob

Yes, the chat messages seem close together. The "bug" (complaint) was that clicking on an [MS] link took forever to load, but now it's almost instantly.

This took 6 seconds.

This is almost instant. - Seems wildly inconsistent.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Was the goat gland doctor a eugenicist by KT Jay on history.SE

Rob

20 seconds, and I've visited it previously (if there's any caching).

Makyen

@Rob Well, there is a cache, so you may or may not be hitting that. There's also the possibility that you were making the requests when something else was happening on the system (e.g. backups, someone doing multiple poorly formed regex searches, etc.).

Rob

03:03

^^ ... and that one was quickly loaded.

OK.

Just letting you know.

Makyen

I appreciate knowing. If it does become consistently slow, please do let me, or another admin, know.

Rob

OK, back in an hour or three. Thanks.

metasmoke

fp- feedback received on [MS] How to position image inside container and be under then text?

Makyen

np. Have fun. :)

SmokeDetector

03:22

[ SmokeDetector | MS ] Link at beginning of answer, potentially bad keyword in answer (35): Free music recognition API ✏️ by Leon J on softwarerecs.SE

[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer, blacklisted user (73): Free music recognition API ✏️ by Mikhail Samin on softwarerecs.SE

metasmoke

fp- feedback received

Yatin

@SmokeDetector affiliation added

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): Software to identify music being played in the sound card output ✏️ by Mikhail Samin on softwarerecs.SE

metasmoke

fp feedback received

Yatin

Ah, boy, am I gonna be notified for all their answers getting an update :(

Oh wait

Other answers were nuked

Spevacus

03:34

Yeah your mod flag resulted in quite a lot of deletion.

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of answer, potentially bad asn for hostname in answer (35): How to uninstall nginx (installed from source)? by sysadmnewmbie on unix.SE

metasmoke

naa- feedback received

SmokeDetector

03:55

[ SmokeDetector | MS ] Link at end of answer, pattern-matching website in answer, potentially bad ns for domain in answer (140): What is the use of "Disallow: /sitepanel/ and Disallow: /cgi-bin/"? by Mayur Negi on stackoverflow.com

metasmoke

tpu- feedback received

cigien

sdc watch museumfacts\.co\.uk

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 9920b29 (SmokeDetector: Auto watch of museumfacts\.co\.uk by cigien) (running on teward/Osiris)

[ SmokeDetector | MS ] Few unique characters in answer, repeating words in answer (174): Comma after "In Section 2", "In what follows", or "In 1999"? by user411296 on english.SE

metasmoke

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Low hashrate with Nvidia GeForce GTX 1050 Ti by ellooku on ethereum.SE

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Increase product image size in Amasty's One Step Checkout Magento 2 by ComputerGiant on magento.SE

SmokeDetector

04:21

[ SmokeDetector | MS ] Link at end of answer, potentially bad ns for domain in answer, potentially bad keyword in answer, potentially problematic ns configuration in answer (64): How can I switch between the two Java versions in Mountain Lion now that Java Preferences is gone? by Identified Call on apple.SE

metasmoke

tpu- feedback received

SmokeDetector

API quota rolled over with 5837 requests remaining. Current quota: 19999.

stackoverflow: 1937
math: 1243
ru.stackoverflow: 817
askubuntu: 558
physics: 511
superuser: 503
es.stackoverflow: 412
electronics: 385
unix: 330
stats: 281
gis: 281
pt.stackoverflow: 252
serverfault: 249
tex: 247
blender: 234
ell: 191
salesforce: 188
mathoverflow.net: 185
apple: 182
english: 175
diy: 174
dba: 163
mathematica: 146
wordpress: 138
worldbuilding: 124
magento: 123
meta: 119
datascience: 112
codereview: 101
softwareengineering: 100
sharepoint: 97
security: 95
ethereum: 90
workplace: 86

cigien

sdc watch typingspeedtestonline\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 515f283 (SmokeDetector: Auto watch of typingspeedtestonline\.com by cigien) (running on teward/Osiris)

cigien

sdc blacklist-website digitalindiagov\.in

SmokeDetector

04:27

[ SmokeDetector ] Blacklists reloaded at rev 9e8f628 (SmokeDetector: Auto blacklist of digitalindiagov\.in by cigien) (running on teward/Osiris)

Yatin

@cigien Why the heck is the Ministry of Electronics & IT spamming us!?

It is a government website

God now my government is a spammer

This is frustrating metasmoke.erwaysoftware.com/…

cigien

Well, our government's been guilty of worse :( Looks like it was watched about 6 months ago first time it popped up. I'm not sure, it certainly has the feel of a .in website.

Yatin

Does asking why they are doing this come under the RTI?

Ryan M

@Yatin Are you sure you're not thinking of digitalindia.gov.in?

cigien

Well, that would explain it :)

Spevacus

04:38

Ah, they're faking the "gov" by merging it with digitalindia. Didn't even spot that.

That's brutal.

Yatin

My blood is literally boiling.

cigien

Don't spammers sometimes use legitimate gov sites as well? Maybe that would make them trolls.

Spevacus

If they can manage to get their content on there in the form of an article, forum post, etc. they'll definitely try to spam it.

Yatin

I wonder if the government knows about this.

I might email them (official website)

This looks like phishing

Ryan M

That's not a bad idea.

Also if we're on the topic of government websites being used for spam, here's one from my state government: metasmoke.erwaysoftware.com/post/272204

(it was compromised by spammers)

Spevacus

04:41

It wasn't long ago that a legitimate college's website was spammed. I think someone actually pointed it out to me as I watched it, and I dug a bit. The spammer used a forums section to post their spam and then spammed that on SE.

Yatin

Wow

That is sick

Ryan M

it looks like the website is now just offline, at least, instead of hosting keto spam...

cigien

@Spevacus Yeah, it was me. University of Toronto I think.

Spevacus

Thought it was you.

Spammers suck. :(

cigien

Yeah, here. I was very surprised to see that. I think it was my first time though, I'm getting less surprised seeing stuff like that as time goes on :p

Ryan M

04:45

My university's domain appears twice on metasmoke, but both are false positives. phew.

cigien

Now I'm scared to check mine :(

Ryan M

For the CA gov one, I watched it like this:

!!/bisect calgovcouncil.org

SmokeDetector

@RyanM 'cagovcouncil.org' is not caught by a blacklist or watchlist item.

@RyanM Matched by

calgovcouncil\.org(?#currently appears to be hacked by keto spammers, remove this watch if it looks anything like a government website when you check it)

on line 24429 of watched_keywords.txt

Ryan M

It's no longer hacked by keto spammers, but also still doesn't look like a government website, so who knows who's really in control of it...

Yatin

:O

cigien

04:47

Oh, I hadn't thought of adding a comment to the regex itself. That's a very nice idea, thanks.

Spevacus

Mine's on there 10 times, all FP. Well, actually...

metasmoke

fp feedback received on [MS] Does anyone have the complete Mechanics Course Notes by Lammert? I am willing to pay

Spevacus

11 FP :P

I'm wondering if that's technically TP because of the "Hey I can pay for dis" bit

cigien

@Yatin Do you think that'll have an effect?

Ryan M

yeah hmmm borderline

Yatin

04:48

@cigien No harm in trying

Worst case, nothing happens. Best, they go bye bye.

cigien

Definitely. Go for it. I was just wondering if it would make a difference.

True.

Yatin

I am actually in a class right now... Will look into it after that :p

Spevacus

Pay attention to lecture! >:(

Yatin

There is a 10-15 second lag between the video and the audio. I don't understand anything. Neither do others. I told sir, he was like meh. So... I am just noting the topics and will study them later...

Spevacus

Fair 'nuff :)

Yatin

04:51

:p

cigien

@Spevacus No, not really. Just misguided. Doesn't even look like they got their email right.

SmokeDetector

[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +2 more (489): warrior-keto-canada-99.webselfsite.net/ by Starczwershjdxc on puzzling.SE

metasmoke

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Few unique characters in body, no whitespace in body, repeating characters in body (260): Steady-state tracking error has to equal zero, what values do I need? ✏️ by Adam Smith on engineering.SE

cigien

@SmokeDetector v

SmokeDetector

05:03

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Need particpant for Market Survey for flower lovers🌸 by alwis suryatmaja on ux.SE

metasmoke

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): different robots.txt on website joomla 3.0 by Никита Васильев on stackoverflow.com

cigien

sdc watch (?-i:QgKrg5Q6b5rLWa7GA)(?#forms.gle)

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 2ba6b31 (SmokeDetector: Auto watch of (?-i:QgKrg5Q6b5rLWa7GA)(?#forms.gle) by cigien) (running on teward/Osiris)

cigien

sdc watch-force warrior[\W_]*+keto(?:[\W_]*+(?:canada|\d++|[\da-f]{5,}+)s?)*

SmokeDetector

05:07

@cigien That pattern looks like it's already caught by Bad keyword in body and Bad keyword in answer; append -force if you really want to do that.

[ SmokeDetector ] Blacklists reloaded at rev 540a5eb (SmokeDetector: Auto watch of warrior[\W_]*+keto(?:[\W_]*+(?:canada|\d++|[\da-f]{5,}+)s?)* by cigien) (running on teward/Osiris)

[ SmokeDetector | MS ] Offensive body detected, offensive title detected (97): Is fascism correlated with welfare state development? by Ppaca on history.SE

metasmoke

fp- feedback received

tripleee

@SmokeDetector question seems innocuous, but OP's response to a comment looks slightly trollish

Yatin

Hmm... digitalindiagov.in doesn't look like phishing. TBH I don't even know what the purpose of that website is. I had actually gone to digitalindia.gov.in. I see what @cigien meant.

Meh

I'll drop that email idea

Looks more like a blog with the same name

But yea, the spamming looks very sus

Ryan M

@SmokeDetector looks like a particular network-banned troll that we don't have a Teams entry for yet...

oh no just kidding, I just didn't recognize the name

SmokeDetector

[ SmokeDetector | MS ] Blacklisted username, potentially bad keyword in username (91): C# Regex without special characters by Wesley Raeel on stackoverflow.com

metasmoke

05:22

fp- feedback received

Yatin

@Spevacus You can make a teams post on that one... Kinda like stackoverflow.com/c/charcoal/questions/683. With [tag:fun] maybe :)

SmokeDetector

[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad keyword in answer, username similar to website in answer (66): Switch off a device to save energy by upsaves energy on stackoverflow.com

metasmoke

tpu- feedback received

Spevacus

@Yatin I shall tomorrow then :)

tripleee

!!/blacklist-website upsavesenergy\.com

cigien

05:31

sdc blacklist-website upsavesenergy\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 3ee1b39 (SmokeDetector: Auto blacklist of upsavesenergy\.com by tripleee) (running on teward/Osiris)

@cigien That pattern looks like it's already caught by Blacklisted website in body and Blacklisted website in answer; append -force if you really want to do that.

tripleee

oh the excitement

cigien

:D

Ryan M

@SmokeDetector tpu- strongly suspect troll; have not flagged, though.

cigien

sdc blacklist-username (?-i:^upsaves energy$)

SmokeDetector

05:34

[ SmokeDetector ] Blacklists reloaded at rev 4fadf46 (SmokeDetector: Auto blacklist of (?-i:^upsaves energy$) by cigien) (running on teward/Osiris)

[ SmokeDetector | MS ] Potentially bad keyword in title (1): Python assignment help. Flattening list by Luke Marut on stackoverflow.com

metasmoke

fp- feedback received

cigien

@tripleee Did you see the transcript? Spevacus made a list of blacklisters and how many watches they've made. You're second :)

tripleee

didn't see that, but I occasionally run something like that myself

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of body (43): How to train Deeper Bottleneck ResNet50? by Wayne on stackoverflow.com

cigien

RyanM had an idea for a very interesting search, if you want to give that a shot.

metasmoke

05:38

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Bad ip for hostname in body, bad ns for domain in body, blacklisted website in body (295): Need Brief Introduction about Sql Server DBA? by bathina naga on serverfault.com

metasmoke

tpu- feedback received

tripleee

oooh, a pie chart ... the bane of all useful reporting

also some watches seem to be missing

$ cut -f2 watched_*.txt | sort | uniq -c | sort -rn | head -n 20
9616 Makyen
5564 tripleee
1692 Glorfindel
1376 Eliah Kagan
1136 Shree
1059 Machavity
 972 Tetsuya Yamamoto
 614 double-beep
 588 Mast
 429 Daniil
 414 Ryan M
 366 Spevacus
 322 Zoe
 291 Nisse Engström
 273 Das_Geek
 257 cigien
 234 iBug
 211 Mithrandir
 194 K.Dᴀᴠɪs
 177 doppelgreener

xcodz-dot

basically what is happening?

tripleee

plus the 300-odd in YAML which are basically all by me

@xcodz-dot if you are new to this room, check out the links in the room description (upper right corner if you are on desktop)

Yatin

05:43

@xcodz-dot Hello! Welcome to CharcoalHQ! Please go through our About Us: charcoal-se.org/about

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Is Open-source version of Dash deployable for large datasets and multiple users? by Paritosh Sharma on stackoverflow.com

tripleee

@cigien Sonic the X changes their name quite a lot, other than that just a couple I think

metasmoke

fp- feedback received

Spevacus

@tripleee That is precisely why I chose a pie chart ;)

Yatin

@cigien Have you met E_net4? :p

` stackoverflow.com/users/1233251/e-net4-the-flagger

Spevacus

05:48

@tripleee This could be because I only pulled from watched_keywords instead of watched_*

cigien

@Yatin Yeah, I think I've seen them change their username at least once. But you can only change names once a month, right?

Yatin

Nah, I don't recall there being a time limit on that... I once asked them once, they said that they avoid doing it too often...

I might be wrong about the time limit though

Ryan M

@cigien well...sort of...

Yatin

Ah that might be the reason why they avoid doing it often :p

cigien

@RyanM Huh, that's a fun one :p

Hmm, is there a way to see all the usernames a particular profile has ever used? SEDE must allow for a query like that, right?

Yatin

05:54

That would be cool

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body (390): bill maher cbd oil by AlanisReich on apple.SE

metasmoke

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): bot don't read other .js files by alexbouvinkurtti on stackoverflow.com

cigien

sdc watch-force bill[\W_]*+maher[\W_]*+cbd[\W_]*+oil(?:[\W_]*+(?:tincture|\d++|[\da-f]{5,}+)s?)*

SmokeDetector

@cigien That pattern looks like it's already caught by Bad keyword in body and Bad keyword in answer; append -force if you really want to do that.

[ SmokeDetector ] Blacklists reloaded at rev 3b4163b (SmokeDetector: Auto watch of bill[\W_]*+maher[\W_]*+cbd[\W_]*+oil(?:[\W_]*+(?:tincture|\d++|[\da-f]{5,}+)s?)* by cigien) (running on teward/Osiris)

metasmoke

06:09

fp- feedback received

Makyen/EC2-num02: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started at rev 63b113a (Makyen: This is the MS instance, so needs to post feedback) (running on Makyen/EC2-num02, Python 3.6.12)

cigien

sdc blacklist-website searchyourway\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 9251225 (SmokeDetector: Auto blacklist of searchyourway\.com by cigien) (running on teward/Osiris)

cigien

4 TP, but preexisting campaign. Latest post with searchyourway.com also contains already blacklisted domain found in similar spam metasmoke.erwaysoftware.com/post/285702

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): How to align the external RGB camera with Azure Kinect depth sensor ✏️ by horristic on stackoverflow.com

metasmoke

fp- feedback received

Yatin

06:21

@SmokeDetector why

SmokeDetector

@Yatin Potentially bad keyword in body - Position 168-182: &utm_campaign=

Yatin

sdc bisect &utm_campaign=

SmokeDetector

@Yatin Matched by [?&]utm_campaign= on line 26154 of watched_keywords.txt

Yatin

Hm..

Ryan M

Top 50 watchlist contributors, with normalization of every name I could figure out and an "Other" grouping for the rest:

Mayken: 9617
tripleee: 5563
Glorfindel: 1692
Eliah Kagan: 1376
Shree: 1136
Machavity: 1059
Tetsuya Yamamoto: 972
double-beep: 614
Mast: 588
Daniil: 432
Zoe: 418
Ryan M: 414
Spevacus: 366
Nisse Engström: 291
Das_Geek: 273
cigien: 258
iBug: 234
Mithrandir: 211
K.Dᴀᴠɪs: 194
doppelgreener: 192
NobodyNada: 179
user12986714: 172
Jeff Schaller: 170
Erik the Outgolfer: 164
WELZ: 147

7

Yatin

06:29

^^ idk doesn't look like spam to me

tripleee

@Yatin that particular one is fine, the watch is admittedly broad

Yatin

Ohk

Ryan M

I have a related watch on utm_\w*+=stack\w*+ but spammers aren't always consistent :-)

tripleee

perhaps a case could be made for editing out the campaign-y stuff from that URL but probably better just ignore that particular post if it comes up again

Yatin

Yep I was wondering if I should edit that part out

Guess I'll ignore it

SmokeDetector

06:33

[ SmokeDetector | MS ] Bad keyword in answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer, potentially bad keyword in answer, potentially problematic ns configuration in answer (90): External hard drives do not show up on Windows by sample company on superuser.com

metasmoke

tpu- feedback received

Ryan M

@RyanM Surprisingly, only 6 people have watches under multiple names, all of which can be accounted for with 8 prefix checks.

oh dang it

I forgot Sonic's non-Sonic name, despite getting all the "Sonic" names.

well, add on another 24 :-p

SmokeDetector

CI on fffb5db succeeded.

tripleee

@RyanM gparyani I think

oh you discovered that already

Ryan M

Yep, I just forgot to add it to the script that normalizes the names.

SmokeDetector

06:42

[ SmokeDetector | MS ] Bad keyword in body, potentially bad keyword in title, potentially bad keyword in username, blacklisted user (168): Which is the best college for MBA in Bangalore based on placement? by RCMB Banglore on 3dprinting.SE

metasmoke

tpu- feedback received

tripleee

@SmokeDetector autoflagged

SmokeDetector

@tripleee That post was automatically flagged, using flags from: SmokeDetector, Rubiksmoose, Floern.

[ SmokeDetector | MS ] Link at beginning of body (43): Does IONOS BUSINESS PLAN web hosting support Laravel and spring boot and Django Frameworks and Vuejs? by Johnie on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Url-only title, bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, +7 more (930): torch-keto-diet-18.webselfsite.net/ by Kelsiefadel018 on askubuntu.com

metasmoke

06:47

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of body (43): Android EmbossMaskFilter alternative by MSJanjua on stackoverflow.com

metasmoke

fp- feedback received

cigien

sdc blacklist-username (?-i:^RCMB Banglore$)

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev e8eea8b (SmokeDetector: Auto blacklist of (?-i:^RCMB Banglore$) by cigien) (running on teward/Osiris)

[ SmokeDetector | MS ] Url-only title, bad ip for hostname in body, bad pattern in url body, blacklisted website in body, link at end of body, +2 more (583): dentafend.medium.com/dentafend-reviews-hurry-up-limited-time-offer-b654c9a7b137 by AlberParky on askubuntu.com

metasmoke

tpu- feedback received

tripleee

07:02

@cigien weird that they consistently misspell Bangalore but probably an excellent hint

cigien

Yeah, and a misspelling like that doesn't inspire confidence in the college :p

tripleee

they are not alone, 428 results across Stack Exchange

cigien

There are quite a few variations in spellings in place names like that actually. Though I don't recall seeing that particular one.

tripleee

misspelling it in Duck Duck Go still only brings up pages whose title has the official spelling; one approved alternative is Bengaluru apparently but none of the ones I checked seemed to actually contain the typo

cigien

Looking at the first few results on SE, the usernames that are recognizable are all Indian. Or subcontinent at least. "Banglore" would actually be a reasonable way to misspell it, since that's how one would say it. The second "a" is not generally pronounced.

SmokeDetector

07:16

[ SmokeDetector ] SmokeDetector started in standby mode at rev 97ec3bb (SmokeDetector: Merge pull request #4504 from Charcoal-SE/auto-blacklist-1598529021) (running on iBug/Daisy)

SmokeDetector

07:27

[ SmokeDetector ] SmokeDetector started in standby mode at rev 97ec3bb (SmokeDetector: Merge pull request #4504 from Charcoal-SE/auto-blacklist-1598529021) (running on iBug/Daisy)

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): .NET CORE MVC - Generic solution to filter different tables by Kendall Chen on stackoverflow.com

metasmoke

naa- feedback received

cigien

@SmokeDetector tp undisclosed affiliation. Author of linked blog.

SmokeDetector

@cigien Registered answer as true positive. If you want to blacklist the poster, use trueu or tpu.

[ SmokeDetector | MS ] Blacklisted user (71): Grammar of Clojure by Yang Xu on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Paging & sorting & filtering to razor page scaffolding automatic by Kendall Chen on stackoverflow.com

metasmoke

tpu- feedback received

fp- feedback received on [MS] Grammar of Clojure

Cody Gray

User comes back from a gibberish post with an image of code. That is an improvement by SD's standards, but only slightly.

I'm tempted to put a watch back on the user just so we can continue to catch the rest of the incoming low-quality content...

@cigien Really? I've been mispronouncing it all this time? I always say the second "a".

SmokeDetector

07:34

[ SmokeDetector | MS ] Potentially bad keyword in body (1): What is the meaning of news analysis? by Worlddata on stackoverflow.com

metasmoke

tp feedback received

tripleee

@CodyGray we routinely !!/addblu them back in these situations -- I'll do that

Cody Gray

!!/bisect worlddata.ai

tripleee

though they improved the post slightly already

SmokeDetector

@CodyGray 'worlddata.ai' is not caught by a blacklist or watchlist item.

tripleee

07:35

!!/addblu stackoverflow.com/users/8034193

SmokeDetector

@tripleee User blacklisted (8034193 on stackoverflow.com).

[ SmokeDetector | MS ] Repeating characters in body (68): How to make the numbers move together in the orange square? by Thomas on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): nginx access.log request include ""GET 43.228.64.38 HTTP/1.1" 502 2940 "-" "undefined" by Darry Kinger on stackoverflow.com

tripleee

!!/watch worlddata\.ai

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 7970630 (SmokeDetector: Auto watch of worlddata\.ai by tripleee) (running on teward/Osiris)

metasmoke

fp feedback received on [MS] How to make the numbers move together in the orange square?

fp- feedback received

Cody Gray

@tripleee OK, thanks. I wasn't sure if that was a good enough reason.

People don't always like my approach to using SD as basically a tool that can work for me specifically.

cigien

07:37

@CodyGray The profile has 2 TP already and the latest post is not stellar. It's fine to add them back. If they post FPs again, they'll get unblacklisted.

tripleee

@CodyGray I'm still up for discussing a separate instance without the spam filtering rules if you want to explore that, though I'm not sure how much time I can spend on that; but I can certainly host it and probably get it set up for you

Cody Gray

I really don't have the time at the moment. I trade sleep for moderation as it is. I don't need a justification for more.

But thanks for the offer. Maybe someday.

tripleee

if we agree that this is something which could be more broadly useful, I can certainly look into tearing out the findspam.py guts and running a separate instance in another room

cigien

@CodyGray Native English speakers would. It's just pronounced differently by speakers of different languages.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Creating a Modal using craft CMS and twig by Jayme Sinn on craftcms.SE

metasmoke

07:43

fp- feedback received

SmokeDetector

07:54

CI on e49280f succeeded.

Cody Gray

@SmokeDetector \o/

cigien

Congrats :)

Transcript for