« first day (3911 days earlier)      last day (207 days later) » 

10:01
sdc watch- crackorg\.com
[ SmokeDetector ] Blacklists reloaded at rev f092fa2054 (SmokeDetector: Auto watch of crackorg\.com by VLAZ) (running on Makyen/EC2-linux)
@VLAZ User blacklisted (26610769 on stackoverflow.com).
@VLAZ with watch before it - from Discussion spam
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Possibility of Auto CAD drawing using ASP.Net Web API‭ by Maria‭ on stackoverflow.com
[ SmokeDetector | MS ] Bad ip for hostname in body, blacklisted username, blacklisted website in body (287): What are skills required to be good software developer?‭ by shawn davidson‭ on stackoverflow.com
sdc watch- infocareerindia\.com
@VLAZ with watch before it - from Discussion spam
@VLAZ User blacklisted (26613250 on stackoverflow.com).
> Bad ip for hostname in body, bad ns for domain in body, potentially bad asn for hostname in body, potentially problematic ns configuration in body
----------
Bad ip for hostname in body - makcrack.com suspicious IP address 185.235.129.102
Bad ns for domain in body - makcrack.com NS suspicious of2.pakihosting.com.,of1.pakihosting.com.
Potentially bad asn for hostname in body - makcrack.com address 185.235.129.102 in ASN 204601
Potentially problematic ns configuration in body - Suspicious nameservers: all IP addresses for makcrack.com are in set {'185.235.129.102'}
sdc watch- makcrack\.com
10:05
@VLAZ The regex contains an unescaped ".", which should be "\." in most cases. Append -force to the command word(s) if you really want to add the pattern you provided.
@VLAZ User blacklisted (26611392 on stackoverflow.com).
[ SmokeDetector ] Blacklists reloaded at rev 17171c54eb (SmokeDetector: Auto watch of makcrack\.com by VLAZ) (running on Makyen/EC2-linux)
@VLAZ with watch before it - from Discussion spam
> Bad ns for domain in body
----------
Bad ns for domain in body - wwwpchcomactnow.com NS suspicious ns1.inpro3.fcomet.com.,ns2.inpro3.fcomet.com.
sdc watch- wwwpchcomactnow\.com
10:11
[ SmokeDetector ] Blacklists reloaded at rev c983f5bf88 (SmokeDetector: Auto watch of wwwpchcomactnow\.com by VLAZ) (running on Makyen/EC2-linux)
@VLAZ User blacklisted (26611137 on stackoverflow.com).
@VLAZ with the watch before it - from Discussion spam
@SmokeDetector Spam seed - the profile shows clear affiliation with a programming assignment help service
10:12
@SmokeDetector tpu-
> Would not be caught as a question.
Cow
Cow
@SmokeDetector k
sdc watch- smartwatermanagement\.in
10:15
[2024-08-02T10:15:25 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 4779.7 seconds after connection; No heartbeats have been received on the current WebSocket.
@VLAZ User blacklisted (26611079 on stackoverflow.com).
[2024-08-02T10:15:32 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 7.1 seconds after connection; No heartbeats have been received on the current WebSocket.
@VLAZ with watch before it - from Discussion spam
[ SmokeDetector | MS ] Bad ns for domain in answer, bad keyword in answer, blacklisted website in answer, pattern-matching website in answer, potentially bad ip for hostname in answer (346): Run cron at 11 30 AM alternating days‭ by Abdullah‭ on stackoverflow.com
sdc watch- crackorg\.com
@VLAZ That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body Append -force to the command word(s) if you really want to add the pattern you provided.
Cow
Cow
10:17
@SmokeDetector autoflag failed?
@VLAZ User blacklisted (26613721 on stackoverflow.com).
[ SmokeDetector | MS ] Scam aimed at customers in answer (43): In app billing item not found error?‭ by Hayat Warraich‭ on stackoverflow.com
[2024-08-02T10:17:47 UTC]: Makyen/EC2-linux: main SE WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 4926.4 seconds after connection; 115.5 seconds after heartbeat.
10:20
I'm getting DNS errors for knox.metasmoke.erwaysoftware.com when I klick "flag as spam" in metasmoke @ThomasWard cc @Makyen
Cow
Cow
@tripleee see starred messages
[2024-08-02T10:21:18 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 345.2 seconds after connection; No heartbeats have been received on the current WebSocket.
oh sorry, can't see stars on mobile and searching only found an incident from May 2022
Cow
Cow
@tripleee one moment
@tripleee Makyen: There are DNS problems with metasmoke. If you want, you can use the line 135.148.96.213 metasmoke.erwaysoftware.com m.erwaysoftware.com in your system + Thomas Ward: update: my infra is still broken. ISP just finished replacing the ONT but it's still out. Because it's bene out for a few hours I'm also taking the time to migrate my stuff to Proxmox so i'm not forced to use VMWare forever
10:25
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Discover AppBuzz - Your No-Code App Builder!‭ by Atul Poharkar‭ on ux.SE
Cow
Cow
@VLAZ haha cracks me up every time
thanks
Cow
Cow
@tripleee <3 I miss you here :)
@Cow I'm pretty sure it's exactly 3, not less than.
:P
Cow
Cow
10:28
@VLAZ hahahahaha
recovering from COVID, hope to be back soonish
Cow
Cow
@tripleee Damn, I hope you get well quickly
@tripleee ♥
[2024-08-02T10:38:22 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 1024.1 seconds after connection; No heartbeats have been received on the current WebSocket.
Cow
Cow
10:39
@SmokeDetector f
why is windows so slow
sdc bisect if random.randint(0, 200) < self.epsilon:
move = random.randint(0, 2)
final_move[move] = 1
Cow
Cow
sdc bisect if random.randint(0, 200) < self.epsilon:
@Cow 'if random.randint(0, 200) < self.epsilon:' is not caught by a blacklist or watchlist item.
Cow
Cow
rofl
it's catching "epsilon" and then "move" on the next line
@SmokeDetector why?
10:41
@VLAZ Potentially bad keyword in body - Position 3955-3980: epsilon: move
Cow
Cow
yeah
I just realized
sdc bisect epsilon: move
@VLAZ Matched by epsilon[\W_]*(move?|transition)s? on line 42013 of watched_keywords.txt
Cow
Cow
about 2,5 months, then we hit 300K spam flags
10:51
[ SmokeDetector | MS ] Bad keyword in body, potentially bad asn for hostname in body, potentially bad keyword in body (96): Best locations in your next startup in uae‭ by Anu sree‭ on stackoverflow.com
Cow
Cow
sdc watch- arabianzone\.ae
sdc alive
@Cow plz send teh coffee
Cow
Cow
please add my watch :(
sigh
[2024-08-02T10:53:35 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 913.5 seconds after connection; No heartbeats have been received on the current WebSocket.
@VLAZ That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in bodyThe regex contains an unescaped ".", which should be "\." in most cases. Append -force to the command word(s) if you really want to add the pattern you provided.
@VLAZ User blacklisted (26613850 on stackoverflow.com).
Cow
Cow
sdc watch- arabianzone\.ae
10:55
@Cow It was actually added twice already. Seems it just doesn't report this in chat
Cow
Cow
totally ignored
oh
lol
sdc reject 12442 "duplicate request - abandoning in favour of 12441"
@VLAZ Closed pull request #12442.
Cow
Cow
@VLAZ also this one I think you forgot to edit that
sdc reject 12443 "duplicate request - abandoning in favour of 12441"
10:56
@VLAZ Closed pull request #12443.
@Cow meh, it's already watched
Cow
Cow
:D
I mean, yes, I should have posted it correctly. But no need to
Cow
Cow
crackhope
rofl
lots of crack-related spam. And they use different domains. Limited pool of domains. But I've given up checking them beforehand. Just watching and if it's already watched, then whatever.
10:58
[ SmokeDetector | MS ] Bad ns for domain in answer, blacklisted website in answer, potentially bad keyword in answer (180): Explain the difference between variable costing and absorption costing, highlighting their implications on financial reporting‭ by Wright Brandy‭ on ell.SE
[2024-08-02T10:59:49 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 374.1 seconds after connection; No heartbeats have been received on the current WebSocket.
[ SmokeDetector | MS ] Potentially bad keyword in body (1): best idea for Multi-lingual email‭ by mike_s‭ on ux.SE
[2024-08-02T11:07:00 UTC]: Makyen/EC2-linux: DeletionWatcher WebSocket: Recovered from websocket._exceptions.WebSocketTimeoutException: Connection timed out. 7879.3 seconds after connection; 1087.9 seconds after heartbeat.
[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): Difference between local nodeos instance and setting up a private eos network‭ by mtabz‭ on eosio.SE
[ SmokeDetector | MS ] Manually reported question (92): ¿Cómo llamar a Volaris desde Estados Unidos?{EE.UU}‭ by lisa‭ on opendata.SE
[2024-08-02T11:18:19 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 1110.1 seconds after connection; No heartbeats have been received on the current WebSocket.
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad keyword in answer (2): Can't visit many websites except a few(google, wikipedia, yahoo)‭ by Jaffar Khalid‭ on superuser.com
[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): {[ +1~866-805-0778}} How to Fix QuickBooks Error 1603‭ by Jordab Bander‭ on stackoverflow.com
sdc watch-number- +1~866-805-0778
sdc blacklist-number- +52 (5) 568263004
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad ns for domain in body (2): how to do cancellation and refund?‭ by Siddhi Soni‭ on superuser.com
11:37
[ SmokeDetector | MS ] Bad ns for domain in body, blacklisted website in body, potentially bad ip for hostname in body (194): STATA Strategies for Improving Student Homework Efficiency and Accuracy‭ by Alex Shrink‭ on ell.SE
[ SmokeDetector | MS ] Pattern-matching website in body, potentially bad asn for hostname in body, potentially bad keyword in body (97): How do our quality control measures ensure the highest standard for Pediatric PCD Pharma Franchise medications?‭ by SunwinHealthcarePCD‭ on superuser.com
[ SmokeDetector | MS ] Bad keyword in answer, blacklisted username, blacklisted website in answer, potentially bad asn for hostname in answer (274): Identifying the minimum number of required machines to schedule jobs‭ by infiapp solution‭ on or.SE
[ SmokeDetector | MS ] Link at beginning of body, potentially bad asn for hostname in body (46): IObit Uninstaller PRO Crack 13.6.0.5 + Key 2024 Download‭ by Raheel Mughal‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad keyword in body (1): What is a pouch packing machine?‭ by Creative industries‭ on stackoverflow.com
Cow
Cow
@SmokeDetector user added spam link 25 mins ago
[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): wp-login 404 page not redirecting to homepage‭ by Ahemad Sayed‭ on wordpress.SE
Cow
Cow
sdc blacklist-keyword- STATA[\W_]*+homework
sdc watch- corlubar\.com
sdc watch- creativeindustrie\.in
sdc watch- muabanlaptopcuhcm\.com
Cow
Cow
sdc watch- laptoptitan\.vn
from spammers profile: stackoverflow.com/users/12013606
[ SmokeDetector | MS ] Bad ns for domain in answer, blacklisted website in answer, potentially bad keyword in answer (180): Is writing essays for someone else a sin?‭ by Amelia Willson‭ on judaism.SE
Cow
Cow
@SmokeDetector k
@SmokeDetector tpu-
Cow
Cow
I autoflagged that one
someone do the last flag
yay
12:17
!!/approve 12448
!!/approve 12447
!!/approve 12446
Cow
Cow
12:19
@JeffSchaller you need to show me what the appropriate actions are before watching something, you said to write back in a few days and it's been a few days. For instance, how do I properly check if something has a lot of fp's etc. :)
!!/approve 12445
Cow
Cow
I'm totally brain dead when it comes to searching on MS or even worse on stackexchange
@Cow hej! Yes, thanks for the reminder! Unfortunate timing with MS being down less available at the moment. I can tell you about the SE side of things, though. It's what I'm doing right now as I look through the PR's
Cow
Cow
@JeffSchaller it doesn't have to be now, I gotta drive soon anyways, but it would really help me out if I knew where to go and what to search in order to minimize my errors
12:23
@Cow gotcha! Well, don't fight spam and drive at the same time, but I'll put some thoughts here and hopefully they're easy to find in the transcript later
Cow
Cow
it's been 8 months, bout time I learn :D
I'll leave in 10-15 mins
I never use my mobile while driving
I'd say you're off to a good start! There's just been a couple surprises where there were some surprising fp's
Cow
Cow
yeah you're absolutely right about that
I think the first step would be "is this pretty obviously spam?" If we're looking at a post that has a URL like this_is_joes_chimney_and_gutter_cleaning_service_in_Chicago.example.com, I'm not going to do any searches -- I'm just going to add that as a watch. Well, assuming the MS report shows the URL as 0/0/0, meaning something else caught the post (like suspicious NS or etc), and this is another way of catching it.
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad ns for domain in body (2): Top RC Car Models for Beginners and Advanced Hobbyists‭ by James‭ on meta.SE
12:30
!!/watch islandhobbynut\.com
like that :)
Cow
Cow
@JeffSchaller got it
[2024-08-02T12:30:44 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 4344.9 seconds after connection; No heartbeats have been received on the current WebSocket.
Where I would start doing SE & MS searches is for shorter URLs or text; socket.io comes to mind. With the explosion in software names, I'm never sure what's a prank or spam or a real project these days (nuget, chocolatey, mustache, etc), I personally have to research them a bit. A short name might be a "real" name, or even a suspicious name that's referred to by legit posts, so I'll throw the URL into stackexchange.com 's top search bar two ways: directly and with the URL: prefix
Cow
Cow
@JeffSchaller what do you mean with URL: prefix - like URL:socket.io ?
sorry if I ask stupid, I'm not really sure how it works
@Cow exactly! There's often some overlap in the two search results -- don't ask me the details of how SE's search works (or doesn't), but I try both ways, just in case.
Cow
Cow
roger that
There's a third search type that the PR's add in, for code:example.com, in case that URL shows up in a code segment. That's less common.
Cow
Cow
wow ok 7K results
@JeffSchaller ah that's smart!
had no idea
bbl, thanks @JeffSchaller will finish reading when I'm back
12:41
[2024-08-02T12:41:15 UTC]: Makyen/EC2-linux: DeletionWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 5655.0 seconds after connection; 382.8 seconds after heartbeat.
12:57
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Why did the Arabs oppose the original two-state solution?‭ by Hayden‭ on politics.SE
[2024-08-02T13:02:51 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 1927.0 seconds after connection; No heartbeats have been received on the current WebSocket.
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Correct SPI interface timing constraints‭ by Carlos‭ on stackoverflow.com
!!/approve 12441
@VLAZ I love how at the end was another question about "What language should I learn?" as a cherry on top
!!/approve 12440
13:11
!!/approve 12439
!!/close 12429 "Not sure where the TP went but there don't seem to be any for this keyword. If you figure out what went wrong, re-propose"
@Spevacus Closed pull request #12429.
!!/approve 12437
[2024-08-02T13:12:12 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 560.9 seconds after connection; No heartbeats have been received on the current WebSocket.
!!/test slope-unblocked.org/
13:13
> Potentially bad ns for domain in body, potentially bad ns for domain in title, potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Potentially bad keyword in body - Position 0-19: slope-unblocked.org
Potentially bad keyword in title - Position 0-19: slope-unblocked.org
Potentially bad keyword in username - Position 0-19: slope-unblocked.org
Potentially bad ns for domain in body - slope-unblocked.org NS suspicious dns2.namecheaphosting.com.,dns1.namecheaphosting.com.
!!/report magento.stackexchange.com/a/240807 "Undisclosed. See magento.stackexchange.com/a/240725, which shows they are affiliated."
[ SmokeDetector | MS ] Manually reported answer (93): How to customize Magento Invoice based on GST TAX‭ by Aman Srivastava‭ on magento.SE
[2024-08-02T13:23:02 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 650.0 seconds after connection; No heartbeats have been received on the current WebSocket.
Cow
Cow
@JeffSchaller Thank you so much, I really appreciate your help, I wish there was something I could do to make it up to you :)
@Cow happy to help! How do you say "thank you" in Danish? :)
@JeffSchaller "tak skal du have" (according to google translate)
13:46
You don't. You just give a Danish.
Cow
Cow
@JeffSchaller thank you: tak (thanks)
@Fastnlight true but we rarely say that
@Cow hej, tak!
Cow
Cow
in writing it's often more used
now I'm a caveman in python and in Danish! :)
Cow
Cow
13:48
"tak skal du have" is a polite and correct way of saying thank you in Danish
(I do not understand a word of Danish and completely rely on Google Translate)
Cow
Cow
@JeffSchaller haha
@Fastnlight many also say: tak for det
translation is weird I guess, thanks for it
that's languages for you
big difference in Danish speech vs writing
writing and spelling is very hard
English is A LOT easier in my opinion
I can speak arabic. I cannot understand a word of written arabic (might as well be hieroglyphics)
Cow
Cow
lol
that's kinda weird but hey :D
I'm kind of the same for Chinese.
Cow
Cow
13:53
damn
you guys are polyglots
Japanese, I can get by because of the kana, but if it's mostly kanji, forget about it.
Cow
Cow
playing an instrument and speaks multiple languages
that's a road to high intelligence!
at least that's what the books say
I used to play the trumpet, but I haven't played in a while, so my skills are pretty rusty
Cow
Cow
impressive
I heard the trumpet is very hard to play
Only really difficult if you play for a long time or are trying to hold really high notes
Cow
Cow
13:56
hmm ok
Not a winds person, but I heard French horn is the hardest?
Cow
Cow
I just looked that up
roflmao
Yes
My sister plays the french horn. She says it's really difficult
Cow
Cow
looks like you need octopus fingers to play
But also has a very nice timbre, so worth it if you can master it.
14:00
@Cow Thats the saxophone . The F horn only has 4 buttons (3 valves and a key)
Cow
Cow
oh ok
sax sounds so nice
I love it
I dont mind some jazz
[ SmokeDetector | MS ] Bad keyword with email in body (59): Furnace needs parts‭ by Piotr‭ on diy.SE
fp- feedback received on [MS] Furnace needs parts‭
Cow
Cow
@SmokeDetector nice pic btw 404: Not found
@Cow Me neither. Really, anything where there's skillfully played guitar.
14:07
[ SmokeDetector | MS ] Manually reported question (92): How To visit My Website Link In body sekilli yazi?‭ by memek jeslin‭ on stackoverflow.com
!!/watch- sekillinickim\.com
PR#12449 ("Fastnlight: Watch sekillinickim\.com") opened by SmokeDetector
[ SmokeDetector | MS ] Blacklisted website in body, potentially bad keyword in username (99): What is the monkey type?‭ by Avajos‭ on worldbuilding.SE
tpu- feedback received on [MS] What is the monkey type?‭
teward/Cerberus: Executing automatic scheduled reboot.
14:15
!!/approve 12449
[2024-08-02T14:16:04 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 3181.2 seconds after connection; No heartbeats have been received on the current WebSocket.
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Flutter Android SDK 34 - Namespace not specified‭ by Alberto Callegari‭ on stackoverflow.com
14:20
> Potentially bad ns for domain in body, potentially bad keyword in body
----------
Potentially bad keyword in body - Position 8-27: slope-unblocked.org
Potentially bad ns for domain in body - slope-unblocked.org NS suspicious dns2.namecheaphosting.com.,dns1.namecheaphosting.com.
@VLAZ User blacklisted (26615267 on stackoverflow.com).
Cow
Cow
14:21
wtf all this discussion spam today
It's the company not giving us an API, so smokey can't see it. I guess the spammers have learned that discussions is a blind spot
@Spevacus Also, check the tags: [tag:css] [tag:html] [tag:java] :P If you check the replies, basically all say "Start with HTML, then CSS, then JS + frameworks". Well one points out that "Java" should have been "JavaScript". But also it reads "It should be either "js" or "javascript"." and I don't know if the author believes there to be a difference between these two.
Warning: teward/Cerberus: Last 11 connection(s) to metasmoke failed. Setting metasmoke status to down.
Next in discussions: "What language is best to learn JavaScript?"
Cow
Cow
sdc location
@GeneralGrievance I think python
Cow
Cow
vbscript!
MS is up, but MS can't see Cerberus
!!/ms-status
@Fastnlight metasmoke is up. Current failure count: 0 (Makyen/EC2-linux)
Cow
Cow
man
I have a craving for McD
afk for a while
14:30
[2024-08-02T14:30:13 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 849.6 seconds after connection; No heartbeats have been received on the current WebSocket.
14:46
!!/pull
Oh, nvm, already up to date
[ SmokeDetector | MS ] Manually reported answer (93): How to create a windows service from java app‭ by NassimBtk‭ on stackoverflow.com
14:52
fp- feedback received on [MS] Can an insult be defamation per se?‭
Makyen/EC2-linux: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev 8eafd60cc2 (SmokeDetector: Merge pull request #12449 from Charcoal-SE/auto-blacklist-1722607656) (running on Makyen/EC2-linux, Python 3.11.3)
Restart: API quota is 92298.
[2024-08-02T14:59:58 UTC]: Makyen/EC2-linux: EditWatcher WebSocket: Recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost. 244.2 seconds after connection; No heartbeats have been received on the current WebSocket.

« first day (3911 days earlier)      last day (207 days later) »