I have a simple command-line script which organizes those results by domain name but it's pretty trivial
and a similar one for name server searches, which needs to be somewhat more complex because they can be in any order
within metasmoke, the why search is useful; the "why" reason will only list one of the IP addresses if something was reported, so you want to take care to search for all the relevant ones (commonly a Cloudflare-hosted server will have two or three, some other services often two, but commonly up to four and I think I have seen ones with a dozen)
I have a stale PR for creating chat commands to watch and blacklist name servers and IP addresses and have been putting off documenting my work flow until I get that done
IIRC there was something funky around the git backend logic when merging in a change, the chat logic as such was not very complex and should be easy enough to revive
the user interface might still need some thinking, watching a pair of Cloudflare name servers is common enough that it might deserve a special syntax but giving them a separate command seems excessive
[ SmokeDetector | MS ] Bad ip for hostname in body, bad ns for domain in body, blacklisted website in body, link at beginning of body, potentially bad keyword in username, +1 more (406): Benefits of Spacebar Counter game? by Nicholwhit on superuser.com
[ SmokeDetector | MS ] Bad keyword in link text in body, potentially bad ns for domain in body, potentially bad keyword in body, blacklisted user (143): What is Chat GPT? by Ali Hassan Dar on freelancing.SE
@Makyen Ah, right. For whatever reason, I usually think of "\W" in my head as being a word-separating character, rather than what it actually is, namely any non-alphanumeric character. So, yeah, that's definitely superfluous. But not harmful, I assume?
@Makyen I'm pretty sure that's what I was describing? I'm not sure what you're trying to clarify in your message.
Or maybe this is really just related to the more recent convo in SOCVR about the purview of SpamRam, and whether it is only dealing with IP addresses or whether it is in any way aware of accounts. That was clear to me.
@Ethan You generally won't use "-force" unless you try without it and SD tells you that you must force it. Forcing overrides built-in error checks, like failure to escape a period (which is not necessary wrong, but often indicative of a mistake) and using the unexpected format for watching "blogger" links. Forcing is also necessary if you want to add a watch that is redundant with another watch. You only "-force" in rare cases, where you really know what you're doing.
@CodyGray That pattern looks like it's already caught by Potentially bad keyword in body and Potentially bad keyword in answer Append -force to the command word(s) if you really want to add the pattern you provided.
STDERR: To https://github.com/Charcoal-SE/SmokeDetector.git ! [rejected] master -> master (fetch first) error: failed to push some refs to 'https://github.com/Charcoal-SE/SmokeDetector.git' hint: Updates were rejected because the remote contains work that you do hint: not have locally. This is usually caused by another repository pushing
the GitHub interface was weird too, it won't let me edit the file directly (probably because the file is too large for the web UI) but it gave me instructions which didn't quite work
@tripleee That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body Append -force to the command word(s) if you really want to add the pattern you provided.
@tripleee That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body Append -force to the command word(s) if you really want to add the pattern you provided.
@tripleee Added atlantisbpo\.com to watchlist However, the blacklists were not reloaded at this time. The most likely issue is another change was made on SD's master branch on GitHub and everything is waiting for CI to pass and MS to update the deploy branch. That could take a few to several minutes. If SD doesn't automatically reload the blacklists or automatically reboot after that time, then someone should investigate why that hasn't happened.
