Charcoal HQ

SmokeDetector

00:03

[ SmokeDetector | MS ] Link at beginning of answer (34): Change Data Capture - SQL SERVER? by Ryan on stackoverflow.com

metasmoke

tpu- feedback received

Makyen

@cigien On the site they moderate, moderators can see the usernames which the user has used on that site. Regular users have no direct way to see prior user names. An SEDE query could get you the username which the user was using in the prior week and you could use archives of the data dump to get even older names.

Three other ways to find old usernames are:

⠀⠀⠀A) search in the comments left on the user's older posts, which can contain an @ mention with an old username;

⠀⠀⠀B) look at the responses to the user's chat messages, which will contain an @ mention; and

⠀⠀⠀C) look at the user's list of "recent" chat messages, which will retain the username which was in use at the time it was posted. A hint with the user's "recent" chat message list is that the data is actually paginated, so you can obtain earlier messages by the user by appending a page parameter to the URL.

There are userscripts which add pagination buttons on chat's user history pages. The two UI looks I'm aware of: spacemonaut's Chat User History Pagination and Sam's Chat Pagination, which is also a part of his Chat Improvements script.

metasmoke

Makyen/EC2-num02: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started at rev 63b113a (Makyen: This is the MS instance, so needs to post feedback) (running on Makyen/EC2-num02, Python 3.6.12)

fp- feedback received on [MS] How can I get script link for fontawesome.com

SmokeDetector

[ SmokeDetector | MS ] Scam aimed at customers in body (8): Is it normal to receive working SMS verification code from strange number Facebook ✏️ by Jaafar5 on security.SE

metasmoke

00:23

fp- feedback received

fp feedback received on [MS] MKV to AVI convertor?

fp feedback received on [MS] My wordpress blog posts page is broken

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Accidentally printed a chocolate mold instead of the object itself by WhatsYourFunction on 3dprinting.SE

Makyen

00:39

@tripleee Yeah, I, also, have been thinking about something along those lines. Specifically, I've been thing about refactoring findspam.py into a file, findspam.py (or something like "postprocessing.py"), which has all the code which processes posts through the list of detections and something like "detections.py" which contains just the detections. Then we could allow for the existence of something like "detections_custom.py", which, when it exists, could be used instead of "detections.py".

Along with that, I've been planning on moving which SE WebSocket to use into the config file (at least optionally). Doing so would allow people to more easily set up an instance which is just looking at one specific site (or a list of sites), rather than all of SE. At the same time, move the SE API key into config, as such uses aren't really "SmokeDetector" and legitimately should use a different SE API key (and the larger API quota isn't needed to look at one site, even with a queue depth = 1).

SmokeDetector

[ SmokeDetector | MS ] Post is mostly images (14): VBScript script progress notification by Mark Llewellyn on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

01:06

[ SmokeDetector | MS ] Link at beginning of answer (34): What's the best plugin for a membership based site by Boby Bravo on stackoverflow.com

Makyen

@tripleee As far as I'm aware, chat message throttling is per-user, not per-IP address. However, at the moment, the SD and MS users are being posted from different IP addresses, so even if the throttling is per-IP address, what one does wouldn't affect the other in the current configuration.

@tripleee A post is only considered for autoflagging the first time it is reported to MS. The post is also disqualified from autoflagging if it's been edited prior to the report. OTOH, if a matching spam wave is configured, then an additional report will result in the post being autoflagged. I suspect a spam wave will override the limit on not autoflagging edited posts, but I have neither looked at the code nor had a case which I remember that indicated it was one way or the other.

SmokeDetector

01:23

[ SmokeDetector | MS ] Link at beginning of answer (34): Proper way to protect cables above surface-mounted electrical panel by Daohui Zhang on diy.SE

cigien

@Makyen Thanks for the information. C works quite nicely. And the "recent" chat messages go back indefinitely, so this lets me at least compile a list of all usernames a profile has ever posted a message with in some chat room.

metasmoke

tpu- feedback received on [MS] What's the best plugin for a membership based site

cigien

sdc watch billspk\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev e047ae0 (SmokeDetector: Auto watch of billspk\.com by cigien) (running on teward/Osiris)

Makyen

@cigien Yes, (C) works well, but only if the user has been active in chat. :;

cigien

01:31

@Makyen True :) Do those data dump archives go back indefinitely? That would allow one to search for all of them, in theory at least.

Makyen

@cigien I haven't looked.

cigien

@Makyen Ok. No worries, I'll investigate it further myself if I actually end up needing to do this :) Thanks for the tip.

Makyen

np

cigien

sdc watch blitzz\.io

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 321fa4f (SmokeDetector: Auto watch of blitzz\.io by cigien) (running on teward/Osiris)

metasmoke

01:38

fp- feedback received on [MS] Why do ExecuteSQLRecord and CSVRecordSetWriter updated the time zone of datetime values?

Makyen

@thesecretmaster I have some questions: what advantages does managing the blacklists/watchlists on or via MS gain us? What additional dependencies does it introduce (e.g. would we still be able to update the lists when MS doesn't exist, which is a common enough occurrence such that it would be a substantial concern)? If it does introduce additional dependencies, do the expected positives outweigh the potential negatives.

Does having the blacklists/watchlists managed by MS make it such that if someone wants to set up their own instance of SD (which is done by some people, and is definitely done when testing new code for SD), would they now need their own instance of MS in order to have the blacklists/watchlists?

If the blacklists/watchlists are managed by MS, how are we going to interface with those lists? For example, are we still going to have them in GitHub too? Are we going to be able to edit the lists locally in our own editor of choice and push changes (something I do routinely)?

SmokeDetector

[ SmokeDetector | MS ] Offensive body detected, toxic body detected (102): Can anyone teach me how to set them in "proguard-rules.pro" when some .dart files I don’t want to be obfuscated? ✏️ by Meteorite on stackoverflow.com

[ SmokeDetector | MS ] Few unique characters in answer, repeating words in answer (174): For a basic unarmed strike, is only the proficiency bonus included in the attack roll, or is the Strength modifier also added? by user67934 on rpg.SE

Ryan M

@SmokeDetector tp- edit only adds offensive content

metasmoke

tp feedback received

SmokeDetector

02:01

[ SmokeDetector | MS ] Potentially bad keyword in body (1): How can you possibly profit from hedging, in view of Algorithmic Trading? ✏️ by NNOX Apps on quant.SE

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Offensive answer detected, potentially bad keyword in answer, toxic answer detected (159): How do I relight the pilot light on my Magic Chef stove? by Andrew on diy.SE

metasmoke

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Boys function for Gaussian integrals in ab-initio calculations by R. J. Mathar on chemistry.SE

SmokeDetector

02:28

[ SmokeDetector | MS ] No whitespace in body, no whitespace in title (167): dsjkljlg123kdkfkfkggh ✏️ by jsdifjew on math.SE

cigien

@SmokeDetector v

SmokeDetector

[ SmokeDetector | MS ] Link at end of body (99): DrupalVM not working by Thakur on drupal.SE

metasmoke

fp- feedback received

SmokeDetector

Makyen/EC2-linux: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev fc220f4 (SmokeDetector: Merge pull request #5518 from Charcoal-SE/auto-blacklist-1609921007) (running on Makyen/EC2-linux)

SmokeDetector

02:50

[ SmokeDetector | MS ] Link at beginning of answer (34): Interaction effects between latent variables in SEM in lavaan by Lanny on stackoverflow.com

[ SmokeDetector | MS ] Link at beginning of body (42): Can someone please answer this survey? Use the Link below plz by no one on stackoverflow.com

metasmoke

tpu- feedback received

naa- feedback received on [MS] Interaction effects between latent variables in SEM in lavaan

SmokeDetector

iBug/Lily: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev 02f3044 (SmokeDetector: Auto unwatch of miniorange\.com by tripleee) (running on iBug/Lily)

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Leakage and bias in XGBoost trading strategy by Federico Juvara on quant.SE

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted username, blacklisted website in body, potentially bad ip for hostname in body, +2 more (385): Warum sind Sexpuppen dieses Jahr beliebter? by kobedoll on photo.SE

metasmoke

tpu- feedback received

SmokeDetector

03:01

[ SmokeDetector | MS ] Potentially bad keyword in body (1): can someone help me identify this type of camera? by user96977 on photo.SE

[ SmokeDetector | MS ] Link at beginning of answer (34): UEFI Boot options menu at every boot : how to make it work? by Jenny Feng on superuser.com

thesecretmaster

@Makyen Oh, I thought that most of these issues had been discussed back when helios was initially proposed, and the one barrier was dev-time. My first thoughts on advantages would be more automation around blacklist management, and things like treating terms differently if they haven't been seen in years or something. It would also allow fewer git pulls and reboots which sounds like a good thing to me, although I don't really do much with smokey so I'm not sure.

SD would still be able to add and delete *list items, so it wouldn't require MS to be up, although MS would be an alternate way to add/remove items. I believe it would live on an AWS lambda (at least that was the design last time I heard about it), so downtime is very unlikely.

SmokeDetector

[ SmokeDetector ] SmokeDetector started at rev 321fa4f (SmokeDetector: Auto watch of blitzz\.io by cigien) (running on teward/Osiris, Python 3.6.9)

Restart: API quota is 6267.

thesecretmaster

I think we'd want public read-only access and only require a key for writes, so any test SD instance could pull the lists without any authentication

It would break the workflow of manually editing those files, although my hope would be that any of those workflows could be integrated into MS.

SmokeDetector

03:24

iBug/Daisy: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev 58c6f91 (SmokeDetector: Merge pull request #4482 from Charcoal-SE/auto-blacklist-1598424585) (running on iBug/Daisy)

Makyen

@thesecretmaster The git pulls and reboots for strictly only blacklists/whitelists (BL/WL) changes are fairly innocuous at this point. For changes which are to only files which contain the BL/WL, SD just pulls the current state of the repository from GitHub and re-reads the files, repopulating the primary BL/WL regular expressions. It's definitely not a full reboot.

Other than the actual pull from GitHub, which is relatively lightweight, there's not a lot which could be saved in there without substantial restructuring. Sure, we could just re-read only the list that actually changed, but we could do that now too.

If we're getting strictly an "add" notification, I guess we could have a separate, short list for each that is updated to save re-processing the whole list, but we'd have to do a full sync-up periodically and for any removal, other than removals from just the short list.

For changes to the files other than the BL/WL files, SD does do as much of a reboot as it ever does w/o someone restarting it at the console.

thesecretmaster

Oh, ok, then I guess there's not much use for a non-github *list manager

Makyen

@thesecretmaster I was largely out of the loop when that was discussed. It was prior to when I was more engaged in the project, so I'm not really familiar with what helios really is, or was intended to be. For me it's always been a fairly nebulous concept as to what it was really intended to accomplish.

thesecretmaster

Honestly it's before my time as well, I just know the 3 MS issues at the very bottom of the issue list that refer to it :P

I thought it would also be a nice-to-have for if other projects wanted to use our lists, but I don't think that's a realistic use-case or one we should worry about at all.

Makyen

@thesecretmaster What would be beneficial is cross-SD instance management of the various lists which are held on a per-instance basis (i.e. that are not on GitHub). That would be things like the user blacklist, user whitelist, chat user notify lists, post ignore list.

thesecretmaster

03:33

Ah, that might be the problem Helios was intended to solve?

Possibly that was the original idea, then black/watchlists got added because there was no reason to keep them in git if they could go in Helios?

Makyen

I was under the impression that it would, but really am not familiar enough with helios to be able to say what it really was going to do.

thesecretmaster

Hmmm I feel like there was a specification somewhere.

I'll go dig

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): What would the economy look like on a generation ship? by Tod3 on worldbuilding.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to fight browser fingerprinting? ✏️ by cloud em on security.SE

thesecretmaster

Ah here's the spec: gist.github.com/AWegnerGitHub/f17e4f65c089712f888de429323cd86b

It looks like it was notifications and black/watch lists?

Makyen

@thesecretmaster Well, it's something that could be solved with either holding those lists somewhere else, or having the lists held by each instance, but letting the instances communicate in some manner.

For instance, it could be solved by having a WebSocket relay where an SD instance could either send via the WebSocket or POST and have arbitrary JSON data relayed to all the other instances. Then the instances could maintain a local list while getting updates (or any other communication they wanted/needed). There would need to be some data-sync logic in SD, but it shouldn't be too bad.

@thesecretmaster Hmmm... Ok let me take a look.

metasmoke

03:42

fp- feedback received on [MS] What would the economy look like on a generation ship?

SmokeDetector

03:56

[ SmokeDetector | MS ] Potentially bad keyword in body (1): can someone help me identify this type of camera? by user96977 on photo.SE

ArtOfCode

@Makyen ...I thought we had that

Will the smoke detector WS channel not do that already?

Makyen

@thesecretmaster For the BL/WL, it sounds like a lot of the reduction in turn-around time which that proposal was intending to gain was not having to wait for CI for BL/WL changes. The full CI is ~2 minutes, or so. However, SD no longer waits for CI to complete in order to make a change to the BL/WL. It just runs through (some of?) the checks which are specific to the BL/WL (e.g. no duplication; no detected by other detections; etc.) and then just makes the change.

Yes, overall, it does take substantial/noticeable time. A portion of that is git/GitHub, but there's also a portion of that which is reloading the lists, rebuilding the regexes (which could be substantially less in many cases with some architecture changes; e.g. breaking the lists), etc.

Overall, it would be interesting to get actual data as to which parts of the process are taking what time, and what those parts are actually costing us (i.e. are we doing other processing while waiting), other than the wall time (e.g. what threads are running concurrently).

Hmmm.... thinking about this, there are some concurrency issues which I'm note sure are appropriately handled. I'd need to look at the code which does all this in more substantially more depth.

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body, potentially bad keyword in body (96): CBD: Good or Bad? by cyndibrant on medicalsciences.SE

Makyen

@ArtOfCode I've asked if it was possible and, IIRC, you said it wouldn't be hard to do. I'm not aware of it actually existing. I know that MS can send arbitrary JSON data to SD instances, but I'm not aware of a way to have SD pass data to MS to have it directly forwarded to the WebSocket (e.g. received by all instances as {"from_sd": "[Whatever SD sent here]"}). It could exist and I'm just not aware of it.

(or something like that)

metasmoke

tpu- feedback received

Makyen

04:10

ArtOfCode

@Makyen I... don't know, to be honest. Need to read the code :)

Machavity

!!/watch theinspirespy\.com

SmokeDetector

@Machavity That pattern looks like it's already caught by Potentially bad keyword in body and Potentially bad keyword in answer; append -force if you really want to do that.

Makyen

@ArtOfCode :) We should probably also decide if the data should be sent via the WebSocket or if it should be sent just as part of the response to status pings. It may be sufficient for such messages to be sent just in response to the status ping. Doing so wouldn't add the requirement that the standby instances keep the MS WebSocket open. Although it shouldn't be too bad to add that requirement, given that it's low traffic.

ArtOfCode

Easier technically to send it via WS, so we don't have to store it and keep track of what's been sent where

thesecretmaster

04:23

If it's easier for SD to get it via status pings, it could go in redis with a short TTL

SmokeDetector

API quota rolled over with 5851 requests remaining. Current quota: 19999.

stackoverflow: 1894
math: 1177
ru.stackoverflow: 920
superuser: 550
askubuntu: 493
physics: 471
es.stackoverflow: 422
electronics: 370
unix: 362
stats: 320
gis: 304
pt.stackoverflow: 259
serverfault: 252
tex: 243
mathoverflow.net: 222
blender: 208
salesforce: 205
ell: 187
dba: 178
worldbuilding: 165
mathematica: 163
diy: 157
english: 140
wordpress: 128
apple: 122
codegolf: 120
magento: 119
codereview: 109
politics: 96
scifi: 94
gaming: 88
ethereum: 88
sharepoint: 87
rpg: 87
drupal: 84
security: 83

SmokeDetector

04:39

[ SmokeDetector | MS ] Mostly non-latin answer (50): Google::Apis::ClientError: forbidden: The caller does not have permission when using service account call with ruby google api by Ko Aung Aung on stackoverflow.com

metasmoke

tpu- feedback received

SmokeDetector

04:56

[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): 404 request to "?standalone=true" with SSL by Rooholamin Honarvar on stackoverflow.com

metasmoke

fp- feedback received

SmokeDetector

[ SmokeDetector | MS ] Link at end of body, potentially bad keyword in body (100): Software Development Company in US | IT Services & Solutions in US | Aspire Software Consultancy by Aspire Software Consultancy on meta.SE

metasmoke

tpu- feedback received

ppwater

sdc watch- aspiresoftwareconsultancy\.com

SmokeDetector

@ppwater The regex contains an unescaped "."; in most cases, it should be "\."; append -force if you really want to do that.

metasmoke

05:01

PR#5657 ("ppwater: Watch aspiresoftwareconsultancy\.com") opened by SmokeDetector

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of answer (34): Looking for a desktop app to sort my photos library by face by a deleted user on softwarerecs.SE

Makyen

!!/approve 5657

cigien

sdc approve 5657

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 0b7299d (SmokeDetector: Merge pull request #5657 from Charcoal-SE/auto-blacklist-1610600489) (running on teward/Osiris)

cigien

Hmm, are 2 merges like that an issue?

Makyen

05:03

OK. Only merged once.

There were two reloads of the blacklist (I assume), but there's only one merge.

cigien

I see. If 2 merges do happen, I take it they should be unwatched to remove them both, and then watched again?

Makyen

That would be a reasonable way to deal with it.

cigien

Ok, thanks.

Makyen

np. Thank you.

metasmoke

fp- feedback received

SmokeDetector

05:09

[ SmokeDetector | MS ] Potentially problematic ns configuration in answer (1): Does copyright law apply if I download films in Iran? by Morteza on law.SE

metasmoke

tpu- feedback received

tripleee

@Makyen no but there is a (human) race condition in that "fp- feedback received" from metasmoke which corresponds to the latest SD report metasmoke had seen at the time might not be the latest SD report in chat ... maybe those too should be linked now

cigien

sdc watch vakiltop\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 2891842 (SmokeDetector: Auto watch of vakiltop\.com by cigien) (running on teward/Osiris)

tripleee

re: chat search I have used the RSS search button which comes up on the lower right in the chat search results, though (weirdly) that doesn't restrict the search to a single chat room

Makyen

05:13

@tripleee Yeah, I've also thought that just having a single format for the MS feedback messages would be a good idea. There's always going to be the possibility of a race condition there, even once the MS messages are back to being in the main SD instance (as coming from the metasmoke user).

SmokeDetector

[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Why are world maps cut off? by a deleted user on gis.SE

metasmoke

fp- feedback received

Yatin

@SmokeDetector that is an image of a map. Nothing to do with homoeopathy

Makyen

@tripleee IIRC, that RSS feed ignores both the room and user restriction. OTOH, if you have custom code which is receiving it, rather than just a viewer, you could filter it upon receipt.

ArtOfCode

05:28

@thesecretmaster Aye, but then you have to keep track of what instance has had it or not... it's just easier to be stateless and dump it straight to the socket

thesecretmaster

Yeah, I mean stateless is always easier

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Would a helium-filled football/soccer ball actually fly farther than a normal ball? by shweta tiwari on physics.SE

metasmoke

tpu- feedback received

ppwater

sdc bisect aakash.ac.in

SmokeDetector

@ppwater Matched by aakash\.ac\.in on line 24075 of watched_keywords.txt

Yatin

05:32

As a student who studied in Allen, I have solemnly sworn to hate Aakash Institute :P

sdc bisect NCERT Solutions

SmokeDetector

@Yatin 'NCERT Solutions' is not caught by a blacklist or watchlist item.

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): CPQ - Disable Proration by salesforceninja on salesforce.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to run Android ICS on a PC (win7) inside a VM? by William Acker on android.SE (@AndrewT.)

metasmoke

tpu- feedback received

ppwater

sdc watch- fingerskilz\.tv

metasmoke

PR#5658 ("ppwater: Watch fingerskilz\.tv") opened by SmokeDetector

cigien

sdc approve 5658

SmokeDetector

05:34

[ SmokeDetector ] Blacklists reloaded at rev 527fece (SmokeDetector: Merge pull request #5658 from Charcoal-SE/auto-blacklist-1610602429) (running on teward/Osiris)

metasmoke

naa- feedback received on [MS] Django 301 and 403 forbidden errors on my static files in production

cigien

@SmokeDetector tp undisclosed affiliation

SmokeDetector

@cigien Registered answer as true positive. If you want to blacklist the poster, use trueu or tpu.

metasmoke

fp- feedback received on [MS] CPQ - Disable Proration

cigien

@metasmoke Why is that FP? @tripleee

SmokeDetector

05:40

[ SmokeDetector | MS ] Link at beginning of answer (34): Can I interchange my "Home, End" keys with "PageUp, PageDown" keys on dell latitude laptop? ✏️ by max on superuser.com

[ SmokeDetector | MS ] Link at beginning of answer (34): Can I interchange my "Home, End" keys with "PageUp, PageDown" keys on dell latitude laptop? by ebabaj on superuser.com

tripleee

@Yatin one more and we can blacklist them

@cigien by bad, thanks for the ping

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of body (42): What kind of token does 'Addlogin' method take? by pswffox on stackoverflow.com

metasmoke

fp- feedback received

Yatin

@tripleee Oh my old classmates would love that news xD

cigien

sdc watch salesforceninjacom\.wordpress

SmokeDetector

05:43

[ SmokeDetector ] Blacklists reloaded at rev 47935d4 (SmokeDetector: Auto watch of salesforceninjacom\.wordpress by cigien) (running on teward/Osiris)

Makyen

@ArtOfCode Yep, stateless is substantially easier on MS. It doesn't increase the load too much on a standby instance, assuming the standby instance is on a machine which is otherwise always on. OTOH, it does change the requirement away from the standby instance being able to completely power down between pings to needing to be on and available to receive the WS 100% of the time. I guess wake-on-LAN sleep states would still be possible for a "standby" instance.

metasmoke

06:06

fp- feedback received on [MS] Can I interchange my "Home, End" keys with "PageUp, PageDown" keys on dell latitude laptop?

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, potentially bad keyword in body (194): daisy may cooper keto by OrphKoc on apple.SE

metasmoke

tpu- feedback received

fp- feedback received on [MS] Can I interchange my "Home, End" keys with "PageUp, PageDown" keys on dell latitude laptop?

SmokeDetector

[ SmokeDetector | MS ] Manually reported question (93): Can you find a song? by Андрій Тарасович Калінов on meta.SE

Yatin

@SmokeDetector that needs to be migrated

tripleee

@Yatin your comment is very brief, people who end up posting on meta often have no idea about the surrounding network etc

Yatin

06:11

@SmokeDetector fp- mod flagging for migration

@tripleee Oh

Which SE site was that? Where people asked for the song name?

metasmoke

Makyen/EC2-num02: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started at rev 63b113a (Makyen: This is the MS instance, so needs to post feedback) (running on Makyen/EC2-num02, Python 3.6.12)

cigien

@Yatin It's a Beta site, musicfans.

tripleee

@Yatin the ones where it would be topical I think would require a bit more background research though

Yatin

@cigien Yep that is the one, thanks :)

@tripleee meaning?

cigien

@Yatin I suspect triplee is referring to "Lacks research effort". That question might be downvoted for that, but it's definitely on-topic on musicfans.se

Yatin

06:18

Ohk

SmokeDetector

06:39

[ SmokeDetector | MS ] Url-only title, bad keyword in body, bad keyword in title, body starts with title and ends in url, link at beginning of body, +5 more (631): mfdoomcbdoil.wixsite.com/mf-doom-cbd-oil/ by Emiliaboncak018 on askubuntu.com

metasmoke

tpu- feedback received

ppwater

sdc bisect mfdoomcbdoil.wixsite.com

SmokeDetector

@ppwater Matched by wixsite\.com on line 195 of watched_keywords.txt

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer, username similar to website in answer (65): How much should I feed my puppy? by home petsusa on pets.SE

metasmoke

tpu- feedback received

tripleee

!!/watch homepetusa\.com

ppwater

06:42

sdc bisect homepetusa.com/

Cody Gray

!!/report stackoverflow.com/questions/65714363/…

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 0b9adf2 (SmokeDetector: Auto watch of homepetusa\.com by tripleee) (running on teward/Osiris)

@ppwater Matched by homepetusa\.com on line 26329 of watched_keywords.txt

ppwater

lol

SmokeDetector

[ SmokeDetector | MS ] Manually reported question (93): The best way to find fiverr keyword with low density and high order? please check my search 2021 by MW tech on stackoverflow.com

metasmoke

tpu- feedback received

tripleee

06:43

!!/watch (?-i:69fU72GxTuA)(?# youtube)

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 32c35e6 (SmokeDetector: Auto watch of (?-i:69fU72GxTuA)(?# youtube) by tripleee) (running on teward/Osiris)

Cody Gray

Ah, dang, ninja'd by @tripleee... was just looking up the right regex :-)

ppwater

@tripleee Is it okay to do a space after the #?

@CodyGray same :)

tripleee

@ppwater yeah, it's just a free-form comment

ppwater

Ah. thanks

SmokeDetector

06:45

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): TypeORM: Query Many-to-Many with Custom Properties by scott_long on stackoverflow.com

ppwater

And do I have to leave a comment when I am doing a youtube watch?

Yatin

We can watch that username too. I don't think they are up to any good: On MW tech channel you will find more interested and earning videos and able to earn yourself.

Cody Gray

Yeah, you wouldn't want to match the literal string "youtube", since they have other alternate URLs, like "youtu.be" or whatever.

metasmoke

fp- feedback received

Cody Gray

@Yatin The name of what user? :-p

tripleee

06:46

!!/watch mw[\W_]*+tech

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev e29833d (SmokeDetector: Auto watch of mw[\W_]*+tech by tripleee) (running on teward/Osiris)

Yatin

@CodyGray Heh

tripleee

the name that used to be where the smoking crater is now emitting radiation

Cody Gray

Do we see a lot of benefit from doing that, anecdotally?

If the spammer creates a new account with the same PII, it should already be caught by the system and suspended.

So they'd have to use different PII so as to have the system not connect it to the original account, but the same display name.

tripleee

everything in watched_keywords.txt which has been there for more than a few weeks is scattershot anyway; some of them surprisingly deliver value after a long time

Cody Gray

06:48

Fair.

!!/report stackoverflow.com/questions/65713861/…

SmokeDetector

[ SmokeDetector | MS ] Manually reported question (93): How can Agriculture crops can be prevent from lots of damage? by Ipl biological on stackoverflow.com

metasmoke

tp feedback received

Yatin

@CodyGray You don't use AF?

Cody Gray

No

Yatin

You can just select Spam in it and it will report it here for you :)

Cody Gray

06:53

I haven't even managed to get FIRE authorized on a site where I'm a mod.

tripleee

!!/watch international[\W_]*+panaacea

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 37002e7 (SmokeDetector: Auto watch of international[\W_]*+panaacea by tripleee) (running on teward/Osiris)

Yatin

@CodyGray Oh

Cody Gray

I don't know if AF works well for mods. Haven't tried it.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad ip for hostname in answer (2): Intellij settings set to CNY currency but I want $ instead by Aparna Dey on stackoverflow.com

Yatin

06:54

Oh, I didn't know that

Cody Gray

Since mod spam flags are binding and immediately delete the post, is the script aware of that? Does it delay for a sufficient amount of time for SD to scan it?

metasmoke

fp- feedback received

Yatin

@CodyGray Ah makes sense

cigien

sdc watch-force daisy[\W_]*+may[\W_]*+cooper[\W_]*+keto(?:[\W_]*+(?:buy|order|\d++|[\da-f]{5,}+)s?)*

Yatin

I don't know

SmokeDetector

06:57

@cigien That pattern looks like it's already caught by Bad keyword in body and Bad keyword in answer; append -force if you really want to do that.

[ SmokeDetector ] Blacklists reloaded at rev f2d0522 (SmokeDetector: Auto watch of daisy[\W_]*+may[\W_]*+cooper[\W_]*+keto(?:[\W_]*+(?:buy|order|\d++|[\da-f]{5,}+)s?)* by cigien) (running on teward/Osiris)

cigien

sdc watch-force mf[\W_]*+doom[\W_]*+cbd[\W_]*+oil(?:[\W_]*+(?:\d++|[\da-f]{5,}+)s?)*

SmokeDetector

@cigien That pattern looks like it's already caught by Bad keyword in body and Bad keyword in answer; append -force if you really want to do that.

[ SmokeDetector ] Blacklists reloaded at rev 6d09320 (SmokeDetector: Auto watch of mf[\W_]*+doom[\W_]*+cbd[\W_]*+oil(?:[\W_]*+(?:\d++|[\da-f]{5,}+)s?)* by cigien) (running on teward/Osiris)

Ryan M

@ppwater generally the point of the comments on these is so that we can tell the random identifier being watched from the various other sites that use random identifier. They're at least strongly encouraged.

Cody Gray

So, the same reason you write comments everywhere ;-)

Ryan M

Yup!

Anything that's not obvious from looking at it

Cody Gray

07:03

Good thing all of my assembly code is obvious!

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in answer, link at end of answer, pattern-matching website in answer, potentially bad ns for domain in answer (226): Does bcrypt have a maximum password length? by Putin on security.SE

ppwater

@RyanM Ah, thanks

metasmoke

tpu- feedback received

ppwater

sdc bisect cbdoilslist.com

SmokeDetector

@ppwater 'cbdoilslist.com' is not caught by a blacklist or watchlist item.

ppwater

07:09

sdc watch- cbdoilslist\.com

SmokeDetector

@ppwater That pattern looks like it's already caught by Bad keyword in answer and Bad keyword in body; append -force if you really want to do that.

ppwater

Huh

sdc bisect cbdoilslist.com

SmokeDetector

@ppwater 'cbdoilslist.com' is not caught by a blacklist or watchlist item.

ppwater

sdc test cbdoilslist.com

SmokeDetector

> Bad keyword in body, bad keyword in title, bad keyword in username, pattern-matching website in body, pattern-matching website in title, potentially bad ns for domain in body, potentially bad ns for domain in title
----------
Bad keyword in body - Position 0-6: cbdoil
Bad keyword in title - Position 0-6: cbdoil
Bad keyword in username - Position 0-6: cbdoil
Pattern-matching website in body - Position 0-15: cbdoilslist.com
Pattern-matching website in title - Position 0-15: cbdoilslist.com
Potentially bad ns for domain in body - cbdoilslist.com NS suspicious sam.ns.cloudflare.com.,elinore.n…

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Binance Future Quantity Number by S M on stackoverflow.com

metasmoke

07:10

fp- feedback received

Yatin

@SmokeDetector might be off-topic but idk

Ryan M

looks like general computing to me

or finance, or $pick_your_favorite_cryptocurrency

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, pattern-matching email in answer, potentially bad keyword in answer (270): Simple bank-atm system design OOP by Miss Jessica55 on codereview.SE

Yatin

> Binance is a cryptocurrency exchange website. This tag is for questions related to the Binance API and usage of Binance API wrappers. This tag is not specific to any programming language

Tag info^

metasmoke

tpu- feedback received

SmokeDetector

07:14

[ SmokeDetector | MS ] Potentially bad keyword in username (1): After power hit, wallet won't load by Antier Solutions on bitcoin.SE

Yatin

They haven't added any programming language so I think so too @RyanM

metasmoke

fp- feedback received

cigien

@ppwater It appears to be a check in findspam.py.

ppwater

@cigien Ah, thanks

cigien

np

SmokeDetector

07:18

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): NetBeans 12.0 LTS - Hibernate Plugin require Freemarker Integration implementation version 238 by Rasheek Mohamed on stackoverflow.com

metasmoke

fp- feedback received on [MS] can someone help me identify this type of camera?

[ userscripts ] continuous-integration/travis-ci/pr success on ba2ddfb: The Travis CI build passed

fp feedback received

SmokeDetector

[ SmokeDetector | MS ] Manually reported question (93): Vì sao bạn nên sử dụng hóa chất rửa xe thay vì xà bông thông thường by ruaxegiadinh689 on stackoverflow.com

[ SmokeDetector | MS ] Blacklisted website in body, potentially bad ip for hostname in body (100): Does anybody have any knowledge of a successful ERP school management system module? by priti on stackoverflow.com

metasmoke

tp feedback received on [MS] Vì sao bạn nên sử dụng hóa chất rửa xe thay vì xà bông thông thường

Yatin

sdc watch- dienmayhoanglien\.vn

metasmoke

PR#5659 ("Yatin: Watch dienmayhoanglien\.vn") opened by SmokeDetector

Cody Gray

07:29

!!/approve 5659

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev fcbf630 (SmokeDetector: Merge pull request #5659 from Charcoal-SE/auto-blacklist-1610609336) (running on teward/Osiris)

metasmoke

fp feedback received

Yatin

@CodyGray See this: metasmoke.erwaysoftware.com/domains/61026

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): AWS Lightsail 'Exception occurred processing WSGI script' by Kyle McReynolds on stackoverflow.com

metasmoke

fp- feedback received

tp feedback received on [MS] Does anybody have any knowledge of a successful ERP school management system module?

Cody Gray

07:34

@Yatin Yeah, someone pointed out in SOCVR that the poster had that link in their profile.

Otherwise, it looked like a legitimate, if off-topic, question.

Regardless of the fact that previous spam has been posted with that same link.

Yatin

Yep

Cody Gray

!!/report stackoverflow.com/questions/65714871/…

SmokeDetector

[ SmokeDetector | MS ] Manually reported question (93): How to translate the feeling into sound by coding? ✏️ by yegane on stackoverflow.com

metasmoke

tpu- feedback received

Cody Gray

!!/watch- (?-i:q5yxIzs5Wug)(?#youtube)

SmokeDetector

07:36

[ SmokeDetector ] Blacklists reloaded at rev 7cf445c (SmokeDetector: Auto watch of (?-i:q5yxIzs5Wug)(?#youtube) by Cody Gray) (running on teward/Osiris)

Yatin

Wait

cigien

@CodyGray Why are you watching a TedX talk?

Yatin

Why would someone post a TedX video

@cigien Yea

Cody Gray

Why does anyone watch TedX talks?

cigien

Good point :) Doesn't make it spam though.

Cody Gray

07:37

Looks like spam to me.

Yatin

Yea

Off-topic, not spam

Cody Gray

What would it need to have to make it spam?

cigien

@CodyGray Promoting some service or product.

Cody Gray

Be in a tin can?

Yatin

I mean.. TedX isn't gonna spam us

Cody Gray

07:38

Uh, it promotes a YouTube video.

@Yatin You say that, but then we have ongoing waves of spam from Microsoft. So....

Yatin

Um... I don't really think so... I feel like they just wanted to have a discussion on that video... The video was the reference material... Microsoft spam was different. It was on mass. This is one post

Again, off-topic for sure

But not spam

SmokeDetector

[ SmokeDetector | MS ] Blacklisted website in body (99): How to detect landing page is accessible or not by providing link with java? by arpana on stackoverflow.com

Cody Gray

We just did an identical example of someone promoting their YouTube video.

metasmoke

fp feedback received

Yatin

How do you know that that was their video?

cigien

07:40

@SmokeDetector fp- OP has linked to TedX talk about coding and music, and wants to know if coding will replace songwriting. Way off-topic on SO, but not spam.

Yatin

^

Cody Gray

This is materially identical to this previous case, where the person was promoting a YouTube video.

Or, maybe that person just wanted to start a discussion about the best way to do a search on Fiverr using keywords?

Maybe they were writing a Python program to do it and needing programming help?

It's fun to make up scenarios, I guess, but that doesn't make the unsolicited promotion of unwanted, blatantly off-topic content any less spam.

Yatin

The username matched there. The video was clearly spam. That channel was meant to earn money. TedX is a non-profit organisation that makes videos on YouTube. The people who speak there are normal people with stories to tell. TedX won't spam us. :/

Cody Gray

I'm fascinated that you know the motives of all spammers and can predict the future.

If you make a list of all the people who won't ever spam us, maybe we could make that into a whitelist.

Yatin

I can't but I like to give the benefit of the doubt

SmokeDetector

07:44

[ SmokeDetector | MS ] Offensive answer detected, potentially bad keyword in answer, toxic answer detected (159): What do you call someone who doesn't know how to swim? by user411432 on english.SE

metasmoke

tpu- feedback received

Yatin

Again, I agree that that question had to go. But I don't want OP to face any repercussions for being labelled as a spammer.

Cody Gray

Well, that ship has long sailed.

Yatin

Hm

Np

cigien

@CodyGray That video is about making money using tricks that the OP has come up with. It's also very similar to other spam. It's also promoting their own service. I agree that it's not always cut and dried, but these 2 cases are quite different beasts, and I'm comfortable with the FP feedback on the TedX post vs the TP feedback on this one.

Cody Gray

07:46

I think it's horribly wrong to try and assess the nature of the spam.

"Oh, this seems harmless, so it must not be spam."

It's just like what we get all the time: "Oh, I'm not spamming. You see, this project is open source!"

You legitimately think I need to watch the video in order to decide whether something is spam?

This is another one of those discussions we had before: do I need to go to the site and download the file to see if it contains malware?

SmokeDetector

[ SmokeDetector | MS ] Manually reported answer (94): No main manifest attribute, in tempCodeRunnerFile.jar by Ihte Sham on stackoverflow.com

metasmoke

fp- feedback received

Yatin

@SmokeDetector Ah sorry, mis click

Ah

Cody Gray

OK, I was wondering...

ppwater

@Yatin why do you report naa

Yatin

07:53

@SmokeDetector naa- Accidently reported by me while reaching out for NAA in AF

ppwater

Ah

cigien

@CodyGray I haven't been participating in this project long enough to feel comfortable making broad generalizations about what is or isn't spam. At the moment I'm learning how to do that by assessing individual posts (and using additional context where I can of course). As I said, in this case, one is undoubtedly TP and the other FP, for the reasons I stated.

It's not for me to tell you how much to dig into a post's contents; whether to watch the videos, or download potential malware, or whatever. I will point out that you have at least on one ocassion given TP feedback on a post linking to a completely innocent youtube channel that was relevant to the question being asked.

ppwater

@Yatin Could you delete the misclick comment? (in MS)

Yatin

In MS?

Cody Gray

@ppwater Why? It was a misclick.

ppwater

07:54

Yes

tripleee

would make sense to leave it actually

ppwater

But yatin left another comment

Yatin

Removed the first one :)

ppwater

Thanks :)

tripleee

!!/watch h[oó]a[\W_]*+ch[aấ]t[\W_]*+r[uử]a[\W_]*+xe

SmokeDetector

07:57

[ SmokeDetector ] Blacklists reloaded at rev 63694b3 (SmokeDetector: Auto watch of h[oó]a[\W_]*+ch[aấ]t[\W_]*+r[uử]a[\W_]*+xe by tripleee) (running on teward/Osiris)

tripleee

"car wash chemicals" in Vietnamese

somewhat to my surprise, the character classes there actually seem to work

>>> regex.findall(r'h[oó]a[\W_]*+ch[aấ]t[\W_]*+r[uử]a[\W_]*+xe', 'Vì sao bạn nên sử dụng hóa chất rửa xe thay vì xà bông thông thường dienmayhoanglien.vn/hoa-chat-rua-xe-chuyen-dung.html')
['hóa chất rửa xe', 'hoa-chat-rua-xe']

SmokeDetector

[ SmokeDetector | MS ] Bad keyword with email in body, potentially bad keyword in body (57): The best Taxi Services in Gloucestershire? by Sabscars on meta.SE

metasmoke

tpu- feedback received

SmokeDetector

[ SmokeDetector | MS ] Bad keyword with email in answer, potentially bad keyword in answer, username similar to website in answer, blacklisted user (220): The best Taxi Services in Gloucestershire? by Sabscars on meta.SE

metasmoke

tpu- feedback received

cigien

07:59

sdc watch-number +44 (0) 1452 933 689

tripleee

!!/watch sabscars\.co\.uk

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 7e860b4 (SmokeDetector: Auto watch of +44 (0) 1452 933 689 by cigien) (running on teward/Osiris)

tripleee

!!/watch sabscars(?!\.co\.uk)

Transcript for