« first day (3916 days earlier)      last day (199 days later) » 

14:00
but perhaps it is tolerable if we filter all the non-metasmoke actions, i.e. if it's an edit to a post which previously didn't have a link AND the link is to a Cloudflare-hosted site ... though also not sure how hard it would be to get a diff against the previous version of the post
@Starship A bit more accurately: It took months to get the authorization for 5 spam flags on the Support Number spam, which was/is thousands of posts, but that's not actually auto-nuking. It took days for authorization for the ones for which we actually had/have authorization for auto-nuking (some specific CSAM matches, and some very specific troll's posts).
so maybe ASN is Cloudflare AND NS is Cloudflare AND IP is not watched or blacklisted AND NS is not watched or blacklisted THEN (complex logic) if this is an edit which adds a new link
fixating on the Cloudflare link might be premature though
[ SmokeDetector | MS ] Offensive body detected (47): Unusual Web Traffic‭ by Darth Stump‭ on stackoverflow.com
fp feedback received on [MS] Unusual Web Traffic‭
@tripleee This particular spam campaign seems to only be on ELU/ELL for now, fortunately
@Starship When it was 6 red flags to delete, we did, in fact, vary the number of autoflags based on the probability that the post was TP, with substantially higher probability posts receiving 4 autoflags. However, after SE's move to 4 flags to delete on all sites, I removed that code when it was found to be the cause of dramatic delay between when posts were reported and when the autoflags were raised (e.g., 70+ seconds). If the number of flags to delete is returned to 6, then we will probably look at having something similar, but the code will need to be looked at in more detail and changed such that it doesn't take nearly that long (i.e., it should be a couple/few seconds).
@Laurel or unfortunately, as that reduces the priority for our limited developer resources
@tripleee But maybe it could enable you to do a hack? It would be too much to report all low rep Cloudflare ASN posts across the network, but there's a lot fewer on ELU/ELL, and even fewer in just answers (questions are less of an issue, they get closed and deleted, if not properly flagged)
reducing the exposure of the rule to fewer sites is easy, but the amount of development work for a limited use case is the same
@SmokeDetector self-deleted by OP
14:32
[ SmokeDetector | MS ] Manually reported answer (93): Multiple apps install script‭ by chinzo‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Как отсортировать id из ссылки‭ by Микррчел‭ on ru.stackoverflow.com
!!/watch boykisser\.army
@EJoshuaS-StandwithUkraine You don't have blacklist manager privileges, but I've created PR#12552 for you.
PR#12552 ("EJoshuaS - Stand with Ukraine: Watch boykisser\.army") opened by SmokeDetector
!!/watch ahmedmode\.com
@EJoshuaS-StandwithUkraine You don't have blacklist manager privileges, but I've created PR#12553 for you.
14:36
PR#12553 ("EJoshuaS - Stand with Ukraine: Watch ahmedmode\.com") opened by SmokeDetector
tpu- feedback received on [MS] Multiple apps install script‭
[ SmokeDetector | MS ] Mostly punctuation marks in body, repeating characters in body (81): Convert docker script from windows to MAC‭ by Mohit Mishra‭ on stackoverflow.com
!!/approve 12553
!!/approve 12552
14:57
!!/blacklist-website kingfishertechtips\.in
@GeneralGrievance I was wrong five months ago about metasmoke.erwaysoftware.com/domains/119317; would you mind re-reviewing your feedback on the one NAA there? Thank you!
[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): Why is my lobster bisque white?‭ by Vicki Croan‭ on cooking.SE
Makyen/EC2-linux: Executing automatic scheduled reboot.
!!/watch- ithbat(?!\.om)
15:07
[ SmokeDetector ] Blacklists reloaded at rev 075babf358 (SmokeDetector: Auto watch of ithbat(?!\.om) by Makyen) (running on teward/Cerberus)
!!/watch- 222tg
[ SmokeDetector ] Blacklists reloaded at rev 3c3793e007 (SmokeDetector: Auto watch of 222tg by Makyen) (running on teward/Cerberus)
[ SmokeDetector | MS ] Link at beginning of answer (38): Drawing perfect square in QGIS‭ by smilewis‭ on gis.SE
Makyen/MS-Relay: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev ee0f84fecd (Makyen: Log as debug MS WebSocket messages) (running on Makyen/MS-Relay, Python 3.11.3)
naa feedback received on [MS] Drawing perfect square in QGIS‭
15:37
[should be resolved: 2024-08-17] FYI: Chrome's removal of support of DOM mutation events will be causing issues on at least some pages of MS. The work-around is to not use Chrome. Yes, we will look at other solutions, but not using Chrome is what's currently available.
6
Cow
Cow
good thing I've used Firefox since it was released
Think it was 2004
not sure
@Makyen thats annoying...
[ metasmoke-deploy ] deploy started by Makyen
@JeffSchaller Re-reviewed.
Cow
Cow
damn
did I miss that 19xx weight one
@tripleee I owe you coffee
Cow
Cow
1964 that's just insane
> Potentially bad ns for domain in body, potentially bad ns for domain in title
----------
Potentially bad ns for domain in body - generationit.nl NS suspicious ns1.siteground.net.,ns2.siteground.net.
Potentially bad ns for domain in title - generationit.nl NS suspicious ns1.siteground.net.,ns2.siteground.net.
!!/watch generationit\.nl
15:51
@GeneralGrievance You don't have blacklist manager privileges, but I've created PR#12554 for you.
PR#12554 ("General Grievance: Watch generationit\.nl") opened by SmokeDetector
!!/approve 12554
Cow
Cow
@Vickel ah nice thanks
Cow
Cow
@SmokeDetector edited by mod
!!/watch salihuk\.vercel\.app
Cow
Cow
15:57
covid sucks
[ SmokeDetector | MS ] Manually reported answer (93): How to hide audio file inside image‭ by madhanmaaz‭ on stackoverflow.com
!!/report stackoverflow.com/a/78844580 "Undisclosed affiliation, mod flagging"
@Spevacus Post 1: Already recently reported [ MS ]
15:58
Whoop
Cow
Cow
@Spevacus ninjaed by the General
@GeneralGrievance Post 1: Already recently reported [ MS ]
Cow
Cow
rofl
There, now we're even.
Cow
Cow
15:59
@GeneralGrievance ninjaed by the Jeff
hahaha
what is going on :D
finds popcorn
Doing LQA reviews.
Cow
Cow
@GeneralGrievance but you already have a trillion
@Cow Yes. That implies that I should say: I hope you and/or yours feel better soon.
Cow
Cow
@Makyen thanks, it's not too bad this time, more an annoyance
16:03
Which reminds me.
@tripleee I was glad to hear that you are feeling better.
Cow
Cow
@SmokeDetector article written by user
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Bootstrap icon usage in Angular not working‭ by deus919‭ on stackoverflow.com
@Cow before Covid, in Portugal was the saying flu in summer you cure at the beach: Get better soon !
Cow
Cow
16:08
@Vickel Johnny Walker has the same effect on me :D
@Vickel and thank you sir :)
^ that's more a Nordic/winter approach, I'd say :)
Cow
Cow
haha
you're probably right
!!/watch (?-i:STAKECLICKBOT)(?#t.me)
!!/watch (?-i:STAKEclick)(?#t.me)
!!/watch (?-i:stakesalebot)(?#t.me)
"The future" they all said... years ago.
Cow
Cow
@GeneralGrievance smh
16:43
[ SmokeDetector | MS ] Url in title, potentially bad ip for hostname in body, potentially bad ip for hostname in title (96): Este site é confiavél? enciclopedia.cursos-courses-online.edu.pl/pages/bactrim‭ by FUMADO‭ on portuguese.SE
API quota rolled over with 88110 requests remaining. Current quota: 99999.
stackoverflow: 4328
math: 1147
physics: 374
ru.stackoverflow: 310
superuser: 294
electronics: 249
askubuntu: 245
mathoverflow.net: 203
tex: 188
stats: 179
diy: 175
unix: 174
blender: 141
gis: 131
worldbuilding: 129
es.stackoverflow: 117
ell: 116
philosophy: 104
dba: 101
salesforce: 96
serverfault: 87
english: 85
mathematica: 83
hermeneutics: 79
scifi: 72
pt.stackoverflow: 64
codereview: 61
law: 59
cs: 57
wordpress: 56
judaism: 56
apple: 55
aviation: 54
webapps: 53
ethereum: 52
academia: 51
puzzling: 48
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer (1): Is Revelation 3:14 saying that Christ was created by God? ✏️‭ by Steve‭ on hermeneutics.SE
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer (1): Is Revelation 3:14 saying that Christ was created by God? ✏️‭ by PeterM‭ on hermeneutics.SE
sd 2ignore
[:66083644] Post ignored; alerts about it will no longer be posted.
[:66083643] Post ignored; alerts about it will no longer be posted.
17:10
[ SmokeDetector | MS ] Link at beginning of body (46): OWL limitation: repeating variables ✏️‭ by Boris‭ on stackoverflow.com
17:28
[ SmokeDetector | MS ] Mostly punctuation marks in body, repeating characters in body (81): Convert docker script from windows to MAC‭ by mohit‭ on chess.SE
Cow
Cow
sdc watch- cursos-courses-online\.edu\.pl
PR#12555 ("Cow: Watch cursos-courses-online\.edu\.pl") opened by SmokeDetector
@Makyen thanks, good to be back (-:
!!/approve 12555
17:51
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer (3): javascript form validation‭ by mohit sharma‭ on stackoverflow.com
teward/Cerberus: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev 7184667bbf (SmokeDetector: Merge pull request #12555 from Charcoal-SE/auto-blacklist-1723052257) (running on teward/Cerberus, Python 3.10.12)
Restart: API quota is 99363.
Cow
Cow
@SmokeDetector this user has posted this 3 times now
2 was naa and this one is also naa, but I think it might be spam?
naa- feedback received on [MS] javascript form validation‭
18:21
[ SmokeDetector | MS ] Bad keyword in answer (88): Closest match for job titles‭ by ideoversity 11‭ on stackoverflow.com
tpu- feedback received on [MS] Closest match for job titles‭
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer (1): How to make edits on a webpage that change display on another webpage‭ by askkavitachoudhary‭ on stackoverflow.com
Cow
Cow
sdc watch- digitalkavita\.in
PR#12556 ("Cow: Watch digitalkavita\.in") opened by SmokeDetector
18:25
!!/approve 12556
[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): Stripe Connect Issue‭ by Greyson Hedrick‭ on stackoverflow.com
fp- feedback received on [MS] Stripe Connect Issue‭
[ SmokeDetector | MS ] Potentially bad asn for hostname in body, potentially bad ip for hostname in body (2): Pieces not visible when using chessboard.js‭ by ryxnseamxn‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): variables globales wordpress‭ by Ignacio Labra Garcia‭ on es.stackoverflow.com
19:33
@Makyen check your messages.
FYI: Metasmoke is getting a kick because of high memory use, and is being rebooted. It'll be back shortly.
fp feedback received on [MS] Yarn does not see workspaces‭
fp feedback received on [MS] Global CSS - Next.js (_app.js)‭
fp feedback received on [MS] ansi art を htmlに表示したい‭
19:55
[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): Drizzle orm self referening table and relation names‭ by Fikaroo‭ on stackoverflow.com
[ SmokeDetector | MS ] Bad keyword in body (94): Analysing DCE with mixed logit in R‭ by Christy‭ on stackoverflow.com
fp feedback received on [MS] oracle sqldeveloper generated column‭
fp feedback received on [MS] Subquery with update/set is failing‭
fp feedback received on [MS] Média, Máximo e Minimo SQL‭
fp feedback received on [MS] Linq Group By clause‭
fp feedback received on [MS] Analysing DCE with mixed logit in R‭
!!/watch whatcountyamiin\.org
[ SmokeDetector | MS ] Potentially bad keyword in username (1): Can anyone identify this game?‭ by John Dave‭ on boardgames.SE
@SmokeDetector Another AS-13335 cloudflare domain post that wasn't caught, this time on SO cc @tripleee
20:54
[ SmokeDetector | MS ] Link following arrow in title, potentially bad keyword in body, potentially bad keyword in title (100): Are you in need of an online payment platform? click here to get solution www.paymaxima.com/‭ by Fatima Tahir‭ on stackoverflow.com
!!/watch- paymaxima\.com
!!/watch-number +420773899488
Makyen/EC2-linux: Executing automatic scheduled reboot.
fp feedback received on [MS] Web is not accessible in Safari‭
Makyen/MS-Relay: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev ee0f84fecd (Makyen: Log as debug MS WebSocket messages) (running on Makyen/MS-Relay, Python 3.11.3)
[ metasmoke-deploy ] deploy started by Makyen
21:56
!!/report magento.stackexchange.com/a/374592 "Spammy profile + name. Post written by ChatGPT."
!!/watch content-baer\.de
> Potentially bad ns for domain in body, potentially bad ns for domain in title
----------
Potentially bad ns for domain in body - content-baer.de NS suspicious ns.checkdomain.de.,ns2.checkdomain.de.
Potentially bad ns for domain in title - content-baer.de NS suspicious ns.checkdomain.de.,ns2.checkdomain.de.
@GeneralGrievance You don't have blacklist manager privileges, but I've created PR#12557 for you.
PR#12557 ("General Grievance: Watch content-baer\.de") opened by SmokeDetector
22:01
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): LC filter for ignition noise‭ by Drona‭ on electronics.SE
@GeneralGrievance I think that user is using ChatGPT. Their answer on Magento is definitely ChatGPT (it includes the "copy code" button as well as the language name thats on ChatGPT's rendered code box). I'm not too sure about this answer, but it's definitely suspicious
Yeah. I've flagged the SO post.
Actually, it seems to be edited AIGC, as I see the locations where there was code, but they removed it
22:31
[ SmokeDetector | MS ] Potentially bad keyword in body (1): How can an AI agent make a purchase?‭ by Angelica‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): How can an AI agent make a purchase?‭ by boze‭ on stackoverflow.com
[ SmokeDetector | MS ] Manually reported question (92): Create a Crypto-Host‭ by James CARTER‭ on meta.SE
23:17
[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): What are the main features and benefits of the 8171 Ehsaas Program?‭ by Rao Ammar‭ on diy.SE
!!/watch- 8171ehsaas-program\.pk
PR#12558 ("Vickel: Watch 8171ehsaas-program\.pk") opened by SmokeDetector
!!/approve 12558
23:52
teward/Cerberus: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev 1b5bd66c05 (SmokeDetector: Merge pull request #12558 from Charcoal-SE/auto-blacklist-1723072747) (running on teward/Cerberus, Python 3.10.12)
Restart: API quota is 96496.

« first day (3916 days earlier)      last day (199 days later) »