« first day (3825 days earlier)      last day (11 days later) » 

Makyen/MS-Relay: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev ee0f84fecd (Makyen: Log as debug MS WebSocket messages) (running on Makyen/MS-Relay, Python 3.11.3)
 
11:20 AM
[ SmokeDetector | MS ] Bad keyword in title, potentially bad keyword in title (99): 10 Delicious FitsPresso Coffee Recipes for Weight Loss Success‭ by Charlesd oddsi‭ on scifi.SE
 
@tripleee yes I thaught so, but didn't want to send another regex, since I never saw that error coming up on my watch. So can I conclude that if a watch doesn't make it through the tests, something is wrong with the regex itself?
 
@Vickel hmmm, not sure if this is related, the leading optional context is just something we want to avoid for efficiency reasons
basically the regex engine will do its darndest to find a match, and so "maybe match or skip something" at the beginning tends to wreak havoc with its performance. It's much better to have a solid anchor point for the beginning of the match
 
... perhaps like this
!!/watch boats(?<=\.boats)
 
11:27 AM
@tripleee I used it to get the 2 leading asterixes, but then that is not necessary, obviously. Most like they wanted to make it bold and messed up using a space before the closing asterixes?
 
yeah, those are not counted as alphabetics, so the match will just grab onto the starting position just after
if you really wanted to match **poo** you could do poo(?<=\*\*poo) similarly to what I did above
also BTW those are asterisks (Asterix is a French comic, named obviously after the asterisk)
 
@tripleee sorry for my bad English :) and thanks for showing the examples!
 
no worries, it's a common mistake even by native speakers
 
[ SmokeDetector ] GitHub Actions: success on 286dfa3 by tripleee in the master branch
 
though many hackers prefer to call the character * "splat" (as in an insect which was smeared against your windshield in all directions). The typographical asterisk is often rendered as a superscript
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad ns for domain in body, potentially bad keyword in body, potentially bad keyword in username (4): Has anyone tried Animation Inc. for whiteboard animation?‭ by Jay Dunphy‭ on superuser.com
[ SmokeDetector | MS ] Link at end of answer, potentially bad asn for hostname in answer (63): How to fix the "Video is not the main content of the page" error for text contents‭ by Web finxis‭ on webmasters.SE
 
!!/watch floridareptiles\.us
 
11:54 AM
!!/watch abwms\.org
 
in Charcoal Test, 1 hour ago, by Halflife
halflife:2024-05-08 10:51:27,862:https://t.ly/340xe redirects to https://senzaproblemi.altervista.org/css-media-query-tutorial/
!!/blacklist-website animation-inc\.com
 
12:03 PM
in Charcoal Test, 22 mins ago, by Halflife
halflife:2024-05-08 11:40:47,217:https://rb.gy/4ol006 redirects to https://api.whatsapp.com/send/?phone=%2B917756049973&text&type=phone_number&app_absent=0
 
[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): Unlock Your Potential: Life Coach Louisville KY"‭ by Jony Snow‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Pattern-matching website in body, potentially bad keyword in body (96): How to Integrate Google Maps API into WordPress for Restaurant Location Mapping?‭ by ahmad ghaffar‭ on stackoverflow.com
 
!!/blacklist-username (?-i:^Jay Dunphy$)
 
12:05 PM
 
!!/watch nowisthetimellc\.com
 
!!/watch marcarianlaw\.com
 
12:06 PM
@JeffSchaller That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body Append -force to the command word(s) if you really want to add the pattern you provided.
 
!!/watch (?-i:^Zeeshan Ali$)
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Send AT Commands to Android Phone‭ by daniel devel‭ on stackoverflow.com
 
3 hours ago, by tripleee
@SmokeDetector still up (MS)
 
tpu- feedback received on [MS] Send AT Commands to Android Phone‭
 
@SmokeDetector includes discosure, but is purely promotional
 
12:09 PM
[ SmokeDetector | MS ] Blacklisted website in answer, link at beginning of answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer (133): Trying to have complete names of the educational institutions from the list of shortened names‭ by RUCHIKA GUPTA‭ on stackoverflow.com
 
!!/unwatch marcarian(?:[\W_]*+law[\W_]*+firm)?
 
12:11 PM
!!/blacklist-username (?-i:^Marcarian Law Firm$)
 
teward/Cerberus: Executing automatic scheduled reboot.
 
!!/watch marcarian(?:[\W_]*+law[\W_]*+firm)?(?<!(?-i:^Marcarian Law Firm$))
 
[ SmokeDetector | MS ] Blacklisted user (71): Samsung AT Commands‭ by daniel devel‭ on stackoverflow.com
 
12:14 PM
!!/watch github\.com/DanDevel/
 
@tripleee you beat me by a millisecond!
 
tpu- feedback received on [MS] Samsung AT Commands‭
 
@Nick hum, should have watched after the first one already
 
12:17 PM
[ SmokeDetector | MS ] Potentially bad ip for hostname in answer, potentially bad ns for domain in answer (2): Good looking drywall, without mud and tape?‭ by Jacob Stutzman‭ on diy.SE
 
[ SmokeDetector | MS ] Link at beginning of body, potentially bad keyword in body, potentially bad keyword in username (46): How are escalators maintained to ensure safety and functionality?‭ by Polaris Elevators‭ on stackoverflow.com
 
sdc report stackoverflow.com/q/78447638 "might be an honest but off-topic question, but I'm incredibly suspicious of 'how do create links to me website?' questions that link to the website together with text containing the keywords the want to match"
 
[ SmokeDetector | MS ] Manually reported question (92): how can i add backlinks‭ by sameh30185‭ on stackoverflow.com
 
12:26 PM
!!/watch- polariselevators\.com
 
@Nick That pattern looks like it's already caught by Potentially bad keyword in body and Potentially bad keyword in answer Append -force to the command word(s) if you really want to add the pattern you provided.
 
At what point do you label someone who has plugged their blog in at least 11 comments and answers a spammer?
or did I answer my own question?
 
tpu- feedback received on [MS] how can i add backlinks‭
 
!!/watch- torpedotraffic\.com
 
12:30 PM
@DavidW they also seem to be recommending a tool
!!/watch- almasaralsare3-ksa\.com
 
This is undisclosed affiliation: webapps.stackexchange.com/a/165914/197614
 
@Laurel can you not report?
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): solving a simple equation. ✏️‭ by Percival the caterpillar‭ on math.SE
[ SmokeDetector | MS ] Potentially bad asn for hostname in body, potentially bad keyword in body (2): How to care a patient on home like a nurse?‭ by Demowork Mail‭ on stackoverflow.com
 
@SmokeDetector tpu-
 
12:44 PM
!!/watch rpcsranchi\.in
 
[ SmokeDetector | MS ] Potentially bad keyword in body, blacklisted user (72): How do I talk to someone on Southwest Airline?‭ by Morgon Foster‭ on travel.SE
 
There's something hilarious about law-practitioners using ChatGPT... stackoverflow.com/beta/discussions/78356693/78448274
 
!!/blacklist-number +1-800-880-8132
 
@JeffSchaller A normalized version, {{'18008808132', '8008808132'}}, of that pattern is already on the number watchlist and the pattern you provided is not an exact match to an existing entry on the number watchlist. You can use !!/bisect-number 18008808132 to determine which entries on the number lists match that pattern, which would tell you: Matched by +1-800-880-8132 on line 4228 of watched_numbers.txt: 18008808132 found normalized
 
1:07 PM
@SmokeDetector naa-
 
[ SmokeDetector | MS ] Blacklisted website in answer (94): Can a program output a copy of itself‭ by kiran‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How do I create a checklist in a slack message?‭ by Guillermo‭ on webapps.SE
 
1:11 PM
38 mins ago, by Laurel
This is undisclosed affiliation: https://webapps.stackexchange.com/a/165914/197614
 
[ SmokeDetector ] GitHub Actions: success on f9c77e5 by tripleee in the master branch
 
@SmokeDetector the same two accounts are interacting in stackoverflow.com/questions/78447610/…; flagged for mod attention
 
CI on f9c77e5 succeeded.
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Can I use neural network to do this classification task?‭ by Erdong111‭ on stackoverflow.com
 
Ah, good. You found the socks.
 
1:16 PM
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad ns for domain in body, potentially bad keyword in body, blacklisted user (74): Why Integrated Automation is Robotics’ Next Big‭ by Leew broo‭ on meta.SE
 
@tripleee Post was just edited so it's just an image now... I think I have to retract?
 
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad ns for domain in body, potentially bad keyword in body, potentially bad keyword in title, blacklisted user (75): What are the benefits of using hardwood for exterior siding?‭ by Oliver Carter‭ on superuser.com
 
@GeneralGrievance can't say that convinces me any longer, but up to you
 
1:21 PM
Grr... I really don't want to... the poster's last comment is pure BS.
 
Welp. Too late, "OP" self-deleted.
 
[ SmokeDetector ] GitHub Actions: success on b81d918 by tripleee in the master branch
 
1:26 PM
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Raspi Camera not detected‭ by Gideon‭ on stackoverflow.com
CI on b81d918 succeeded.
CI on bbb0196 succeeded.
 
fp feedback received on [MS] solving a simple equation.‭
 
!!/watch- lasrslogin\.com
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Identify a story about the kid who waves at the train‭ by Srinidhi‭ on literature.SE
 
!!/test marcarianlaw.com
 
> Potentially bad asn for hostname in body, potentially bad asn for hostname in title, potentially bad ns for domain in body, potentially bad ns for domain in title, potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Potentially bad asn for hostname in body - marcarianlaw.com address 68.66.226.84 in ASN 55293
Potentially bad asn for hostname in title - marcarianlaw.com address 68.66.226.84 in ASN 55293
Potentially bad keyword in body - Position 0-16: marcarianlaw.com
 
@Fastnlight User is not blacklisted (20270147 on stackoverflow.com).
 
Oh... Those were two different accounts...
 
Or rather, sites. The user name itself was blacklisted by tripleee.
 
!!/watch lasrslogin\.com
 
@Fastnlight That pattern looks like it's already caught by Potentially bad keyword in body and Potentially bad keyword in answer Append -force to the command word(s) if you really want to add the pattern you provided.
 
@Vickel cc @tripleee The leading (?:[\W_]*+)? is what caused the CI failures, due to an interaction within the regex package with other entries on the watchlist, along with our use of the Unicode \b, causing catastrophic computational/time use. We have a few CI tests which are specifically intended to catch this issue which such leading non-word constructs typically cause (in addition to a couple of other causes, IIRC). Specifically, that entry on its own takes 0.00375 seconds to be processed on that test, but combined with other entries it takes about 7.5 seconds, which is well above the maximum processing time that CI test looks for in order to fail.
[Hmmm... this reminds me that I should add an additional CI test to catch another regex computational/time use issue that was recently seen.]
As to the entry itself, the (?:[\W_]*+)? is internally redundant (i.e., the [\W_]*+ is already optional, so enclosing it in an optional non-capturing group, (?:)?, just adds extra backtracking without added functionality). It's possible to have a situation where the rest of the regex makes that additional optional non-capturing group functional, but that's not the case here.
In addition, having the (?:[\W_]*+)? at the beginning isn't functionally required to match what you're looking for and doesn't appear to be matching any additional information which will be of benefit in the why data. So, as has been mentioned, it's better without it.
If there is a case where an entry like that which causes the CI tests for catastrophic regex processing to fail is really needed, it is possible to write a separate Rule with such a regex. We've done that in at least one other case.
Just FYI: I'm working on some changes to how the blacklist/watchlist entries are processed which currently look like they will include running such entries separately, so that issue may be generally alleviated in the relatively near future. However, that's not a goal of those changes, just a likely consequence, so may not end up being in the code that gets merged.
@Nick Well before 11.
 
1:51 PM
@Makyen thanks for the explanation!
 
np :)
 
@SmokeDetector v
Hey, @Makyen this user's kind of on a vandalism/deletion spree...
 
2:16 PM
@SmokeDetector tpu- Jewelry ad
!!/watch koniglicher-siegelring\.com
 
@GeneralGrievance You don't have blacklist manager privileges, but I've created PR#10984 for you.
 
PR#10984 ("General Grievance: Watch koniglicher-siegelring\.com") opened by SmokeDetector
 
@GeneralGrievance Thanks. Another moderator handled most of it.
 
2:23 PM
!!/watch koniglicher-siegelring\.com
 
Woops
!!/close 10984 "a good watch; I just didn't see it before watching it myself"
 
@JeffSchaller Closed pull request #10984.
 
@SmokeDetector User affiliated with site, though not credited on the calculator page: calculatoratoz.com/en/ankush-shivhare/…
 
2:33 PM
[ SmokeDetector | MS ] Manually reported answer (93): Owl carousel infinite loop‭ by Macey Sampson‭ on stackoverflow.com
 
tpu- feedback received on [MS] Owl carousel infinite loop‭
 
[ SmokeDetector | MS ] Manually reported answer (93): laravel with Mega cloud‭ by Tomislav Desic‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Bad keyword in answer (88): PineScript TradingView / Exit Signal /‭ by Alain Lacunza‭ on stackoverflow.com
 
!!/report stackoverflow.com/a/78449317/20153035 "undisclosed affiliation"
 
[ SmokeDetector | MS ] Manually reported answer (93): Package to find synonyms of english words for Dart‭ by Shirsh Shukla‭ on stackoverflow.com
 
2:42 PM
[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, pattern-matching product name in body, potentially bad keyword in title (384): infogram.com/nexalyn-male-enhancement-anmeldelser-blood-flow-support-formula-aerlig-mening-fra-ekte-brukere-1h9j6q7gk7gq54g?live‭ by Ap singh‭ on meta.SE
[ SmokeDetector | MS ] Potentially bad keyword in body (1): use Python to do Web Scraping for a specific job posting website‭ by kkk‭ on stackoverflow.com
[ SmokeDetector | MS ] Link at beginning of answer (37): difference between local and global dependencies in angular‭ by Simon‭ on stackoverflow.com
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, bad phone number in body, bad phone number in title, phone number detected in title (481): Amazon customer care number 8910148836‭ by Yakub Khan‭ on stackoverflow.com
 
3:03 PM
Makyen/EC2-linux: Executing automatic scheduled reboot.
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): How to disable PHP functions in Wordpress?‭ by a deleted user on wordpress.SE
[ SmokeDetector | MS ] Mostly punctuation marks in answer, repeating characters in answer (113): Why has the khopesh never been used since ancient Egypt?‭ by ELLAMAE ODELL‭ on history.SE
 
[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, potentially bad keyword in answer (174): How do I load my Solana wallet using my private key file?‭ by Ryan Stanley‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Exploring Hardware: Unlocking the Potential of Miscellaneous Components‭ by Henry John‭ on hardwarerecs.SE
 
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): How to display the chapters of the Bible from django-bible package?‭ by Xavier Anderson‭ on stackoverflow.com
 
!!/watch ctspoint\.com
 
!!/watch vachanonline\.com
 
3:19 PM
@JeffSchaller Git functions failed for unspecified reasons, details may be in error log.
 
!!/errorlog
 
### ErrorReturnCode_1 on teward/Cerberus at 2024-05-08T15:19:56Z:

RAN: /usr/bin/git push https://[REDACTED URL USERNAME AND PASSWORD]@github.com/Charcoal-SE/SmokeDetector.git master

STDOUT:


STDERR:
To https://github.com/Charcoal-SE/SmokeDetector.git
! [rejected] master -> master (fetch first)
error: failed to push some refs to 'https://github.com/Charcoal-SE/SmokeDetector.git'
hint: Updates were rejected because the remote contains work that you do
hint: not have locally. This is usually caused by another repository pushing
 
!!/pull
 
@JeffSchaller I hit an error while trying to run that command; run !!/errorlogs for details.
 
!!/errorlogs
 
3:21 PM
### ErrorReturnCode_128 on teward/Cerberus at 2024-05-08T15:21:01Z:

RAN: /usr/bin/git pull

STDOUT:


STDERR:
hint: You have divergent branches and need to specify how to reconcile them.
hint: You can do so by running one of the following commands sometime before
hint: your next pull:
hint:
hint: git config pull.rebase false # merge (the default strategy)
hint: git config pull.rebase true # rebase
hint: git config pull.ff only # fast-forward only
hint:
hint: You can replace "git config" with "git config --global" to set a default
 
Cow
@tripleee thanks, I will change it
 
fp feedback received on [MS] Movies Tracker apps development‭
[ SmokeDetector ] GitHub Actions: success on be280ea by tripleee in the master branch
 
CI on be280ea succeeded.
 
[ SmokeDetector ] GitHub Actions: success on 1c2f4c1 by tripleee in the master branch
 
CI on 1c2f4c1 failed.
 
3:26 PM
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Текущий день плюс дни‭ by Zerrg Slay‭ on ru.stackoverflow.com
 
@SmokeDetector another spurious CircleCI glitch
 
3:42 PM
!!/test-a vachanonline.com
 
> Potentially bad ns for domain in answer, potentially bad keyword in answer
----------
Potentially bad keyword in answer - Position 0-16: vachanonline.com
Potentially bad ns for domain in answer - vachanonline.com NS suspicious ns63.domaincontrol.com.,ns64.domaincontrol.com.
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Why Am I Not Able to Access state Through a Link Component?‭ by Aibar Otar‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Link at end of answer (62): Google Maps link validation using Regex‭ by Amr Elsayed‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in body, potentially bad keyword in body (2): How to get SEPOLIA TEST ETHER from TESTNET FAUCET without ETH balance in METAMASK account‭ by Udayarajan gauthaman‭ on ethereum.SE
 
@Makyen Considering we got a big uptick in such vandalisms, do we want to put in additional watches when we see a pattern to target this vandalism? It's not exactly one of the core goals of Charcoal, but I can live with either.
 
4:04 PM
 
@Fastnlight User is not blacklisted (1312693 on math.stackexchange.com).
 
4:07 PM
@SmokeDetector tpu-
 
!!/watch- statuschecksrd\.co\.za
 
PR#10985 ("Fastnlight: Watch statuschecksrd\.co\.za") opened by SmokeDetector
 
!!/approve 10985
 
@Mast I don't have a problem with having a watch which tries to detect those.
Assuming that it doesn't have a bunch of FP.
 
4:08 PM
[ SmokeDetector | MS ] Bad keyword in title, potentially bad keyword in body, potentially bad keyword in title (100): Dhan Referral Code 2024 - BYNYL70861 | Rs.500 Signup Bonus, Free Demat Account & Much More‭ by Veer Gold‭ on mathoverflow.net
 
!!/watch- bynyl70861
 
[ SmokeDetector ] Blacklists reloaded at rev 57a1161174 (SmokeDetector: Auto watch of bynyl70861 by Makyen) (running on teward/Cerberus)
 
!!/watch- statuschecksrd(?!\.co\.za)
 
[ SmokeDetector | MS ] Bad keyword in title, blacklisted user (169): Bitrue Referral Code WZGLWQL - Bitrue Welcome Bonus 2024‭ by Veer Gold‭ on mathoverflow.net
 
!!/watch- WZGLWQL
 
PR#10986 ("Fastnlight: Watch WZGLWQL") opened by SmokeDetector
 
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How do I match street addresses to UK postcodes?‭ by a deleted user on stackoverflow.com
 
@Fastnlight Is watching every code really needed? Just wondering
 
4:17 PM
@Gugu72 It helps to catch these posts if they reuse the same code but different wording. Plus, it's not very common for a legitimate post to use that phrase
 
[ SmokeDetector | MS ] Few unique characters in body, no whitespace in body (193): How can I access the react-admin store in the dataprovider? [React Admin 4.x] ✏️‭ by user7921367‭ on stackoverflow.com
 
[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): Explain the purpose of the "this" keyword in Java or C++‭ by Sara Sanam‭ on stackoverflow.com
 
!!/watch- digitalsohail\.com
 
4:18 PM
PR#10987 ("Fastnlight: Watch digitalsohail\.com") opened by SmokeDetector
 
@Fastnlight Yeah, but most likely if they use that code, they also use the words "referral" and whatever words triggered the filters here, so I don't think watching the code is really needed
 
However, the word referral could be used in a legitimate post, while the code itself won't, which means we can blacklist it later so smokey can eventually autoflag these posts
It's not a very big deal, but it can help
 
[ SmokeDetector | MS ] Manually reported question (92): How can I make voice calls on whatsapp?‭ by user24880090‭ on stackoverflow.com
 
4:32 PM
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Can't install Ubuntu 24.04 on VirtualBox‭ by Chandan Biswas‭ on askubuntu.com
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, obfuscated word in title (291): Tried different ways to [Contact EX0DUS WaIIet] SUPP0RT @talk to live agents 24x7‭ by jojo‭ on stackoverflow.com
 
4:39 PM
!!/watch github\.com/brewkon
 
[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer (173): Maui IOS place overlay on top of AVPlayerController when in Full Screen Mode‭ by Peace Stanley‭ on stackoverflow.com
 
@SmokeDetector tpu-
 
4:57 PM
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Missing balance‭ by David H‭ on monero.SE
 

« first day (3825 days earlier)      last day (11 days later) »