« first day (906 days earlier)      last day (2920 days later) » 

7:02 AM
[ SmokeDetector ] Link following arrow in body, pattern-matching website in body: A bloody taste in mouth is one such problem that by Pudel1935 on webmasters.stackexchange.com
[ SmokeDetector ] Bad keyword in body, bad keyword in title, link at end of body, link following arrow in body, pattern-matching website in body: Obtain The Skin That Is Ideal With Beauty Treatments by corypevansers on superuser.com
 
sd 2k
!!/pull
 
[ SmokeDetector ] SmokeDetector started at rev c46ae81 (Normal Human: pub4sure, pattern tweaks) (running on hichris/Pi)
Restart: API quota is 9462.
[ SmokeDetector ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body: Lash Serum And Reviews blog that was created to by estfall on askubuntu.com
 
@SmokeDetector k
 
[ SmokeDetector ] Blacklisted username, few unique characters in answer: Customized rails routes for grape gem by wingding on stackoverflow.com
 
@SmokeDetector k
@SmokeDetector k
 
7:12 AM
errrrrrrr
gntjnjtnjtbjt
 
@SmokeDetector k
@SmokeDetector k
@SmokeDetector k
 
why k?
 
[ SmokeDetector ] Manually reported answer: t-shirt seller website database design by irsunglasses on stackoverflow.com
 
@Edity sd k or a reply with k to one of smokey's reports is like sd tpu- which means true positive (confirmed spam / abusive) user blacklisted (adds user to blacklist) - (means smokey wont respond to this command)
@SmokeDetector k
 
[ SmokeDetector ] Bad keyword in body, pattern-matching website in body: But in fact, Green coffee zt by Green coffee zt on arduino.stackexchange.com
[ SmokeDetector ] Non-English link in answer: 1'or'1'='1 help by cilekhavuz on security.stackexchange.com
 
7:28 AM
@SmokeDetector k
@SmokeDetector k (Translates into spam => translate.google.de/?hl=de#auto/en/…)
 
o
 
[ SmokeDetector ] Bad keyword in title, pattern-matching website in body: It could be attained with even more cost effective supplements.? by Antwanewagner on stackoverflow.com
 
@SmokeDetector k
 
[ SmokeDetector ] Blacklisted website in answer, blacklisted user: Edit video file while retaining the original format by D.SHALLY on softwarerecs.stackexchange.com
 
7:48 AM
@SmokeDetector k
@SmokeDetector f
 
7:58 AM
[ SmokeDetector ] Blacklisted username: What is a "Natural" NP-Complete prob? by wingding on stackoverflow.com
 
@SmokeDetector k
 
8:10 AM
[ SmokeDetector ] URL in title, pattern-matching website in body, pattern-matching website in title: http://menhealthreviews.org/metabo-matrix/ by sultankhabi on mathoverflow.net
 
@SmokeDetector k
 
Morning
 
Morning
 
8:25 AM
@SmokeDetector k
 
> Url in title, bad keyword in body, bad keyword in title, bad keyword in username, pattern-matching website in body, pattern-matching website in title
----------
Title - Position 12-21: lumagenex
Username - Position 12-21: lumagenex
Body - Position 12-21: lumagenex
Title - Position 12-26: lumagenexuk.co
Body - Position 12-26: lumagenexuk.co
Title - Position 1-29: http://www.lumagenexuk.co.uk
 
Probably reported before the Q was announced in the real time feed
 
[ SmokeDetector ] Blacklisted username, few unique characters in answer: How to handle UTF-8 charset with Oracle using FlywayDB by wingding on stackoverflow.com
 
@SmokeDetector k
 
8:56 AM
[ SmokeDetector ] Bad keyword in body, blacklisted username, link at end of body, pattern-matching website in body: healthier skin? There are several ways you can go about achieving by therly juriya on superuser.com
[ SmokeDetector ] Bad keyword in title, bad keyword with email in body, blacklisted website in body: HADOOP Online Training by virender12 on stackoverflow.com
 
@SmokeDetector k
@SmokeDetector k
 
[ SmokeDetector ] Offensive answer detected: Understanding Boolean Based SQL Injection by doesitwork on security.stackexchange.com
[ SmokeDetector ] Bad keyword in answer, pattern-matching website in answer: Tony Stark's heart problems by user65965 on scifi.stackexchange.com
 
sd 2k
 
[ SmokeDetector ] Bad keyword in body, link at end of body, pattern-matching website in body: Most of the enlargement tips techniques by Divonmozz on superuser.com
[ SmokeDetector ] Bad keyword in body, pattern-matching website in body: why it is tremendously recommended by JeteItid on apple.stackexchange.com
[ SmokeDetector ] Blacklisted username, few unique characters in answer, mostly non-Latin answer: Custom Number formating by wingding on stackoverflow.com
 
sd 3k
 
9:09 AM
[ SmokeDetector ] Bad keyword in body, link at end of body, pattern-matching website in body: unpleasurable so keep constructive by Silviatzoro on drupal.stackexchange.com
 
@SmokeDetector k
 
[ SmokeDetector ] Link at end of answer: Can I search the RapidShare-like servers for certain files? by a deleted user on superuser.com
 
Hello
sd n
 
[ SmokeDetector ] URL in title, bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in title: http://www.supplements4us.com/is-optimum-garcinia-plus-safe/ by SondraIkner on security.stackexchange.com
[ SmokeDetector ] Few unique characters in answer, repeating characters in answer: Converting image into data:image/png;base64 for web page disaplay by user6319446 on stackoverflow.com
 
9:21 AM
[ SmokeDetector ] Manually reported answer: Apple Push Notifications to specific Users by Push Alive on stackoverflow.com
 
[ SmokeDetector ] Bad keyword in body, bad keyword in title, link at end of body, link following arrow in body, pattern-matching website in body: Howto Remove Harmful Toxins From Your Own Body? by Odessa Bateman on superuser.com
 
[ SmokeDetector ] Manually reported answer: Java regex replace String in file by user6188388 on stackoverflow.com
 
9:31 AM
[ SmokeDetector ] Blacklisted username, few unique characters in answer: Hive:Use ateral view explode add identity column by wingding on stackoverflow.com
 
[ SmokeDetector ] Blacklisted user: Java regex replace String in file by user6188388 on stackoverflow.com
 
[ SmokeDetector ] Blacklisted username, few unique characters in answer: Hive RegexSerDe by wingding on stackoverflow.com
 
@SmokeDetector k
 
9:37 AM
@SmokeDetector k
Hiya @Magisch
 
@AshishAhujaツ o/
 
[ SmokeDetector ] Blacklisted username: Creating rolling text effect in Android Studio? by wingding on stackoverflow.com
 
[ SmokeDetector ] Link at end of answer, pattern-matching website in answer: grepping a fixed string at the beginning of a line by Sonja Kearney on unix.stackexchange.com
 
@SmokeDetector k
 
9:52 AM
Hiya @WaiHaLee
 
[ SmokeDetector ] Few unique characters in answer, repeating characters in answer: Posting raw image data as multipart/form-data in curl by sadadsa on stackoverflow.com
 
[ SmokeDetector ] Bad keyword in body, link at end of body, pattern-matching website in body: If It Is Considered Not Really by Hanymuzse on drupal.stackexchange.com
 
10:09 AM
[ SmokeDetector ] Email in answer: Arms are too long to snatch? Advice, please! by Muhammad Adrees on fitness.stackexchange.com
[ SmokeDetector ] Repeating characters in answer: Disabling of textbox(based on some condition) is not working in asp.net by N K on stackoverflow.com
[ SmokeDetector ] Link at end of body, pattern-matching website in body: Very vacano By Q What Accomplish by johnimeena on drupal.stackexchange.com
 
@SmokeDetector k
@SmokeDetector why
 
@AshishAhujaツ Title - Position 7-26: watch videos online
 
@SmokeDetector f
@SmokeDetector k
@SmokeDetector k
 
At our current rate, we'll hit 30k posts caught before the month is out.
 
10:31 AM
[ SmokeDetector ] Bad keyword in body, link at end of body, link following arrow in body, pattern-matching website in body: Beauty undoubtedly is significantly more than skindeep by marikdominies on superuser.com
 
@ArtOfCode People wont stop spamming
 
10:53 AM
[ SmokeDetector ] Bad keyword in answer: Is there an official Marvel Cinematic Universe viewing order? by blackcat721 on scifi.stackexchange.com
[ SmokeDetector ] Bad keyword in body, bad keyword in title, bad keyword with email in body, blacklisted website in body: BEST ONLINE OBIEE TRAINING by gopi121212 on stackoverflow.com
[ SmokeDetector ] Blacklisted website in body: Make Your Skin Glowing With Nexacell Cream by nairija watson on 3dprinting.stackexchange.com
 
@SmokeDetector k
@SmokeDetector f
@AshishAhujaツ hi
 
@SmokeDetector k
 
11:08 AM
[ SmokeDetector ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body: Alpha Levo IQ Reviews by sarahqepierre on drupal.stackexchange.com
 
@SmokeDetector k
 
[ SmokeDetector ] Bad keyword in body, bad keyword in title, pattern-matching website in body: The Secret Behind The Diet Pills by LouGreene on workplace.stackexchange.com
 
sd k
 
Restart: API quota is 7604.
 
@hichris123 can you do a ping metasmoke.erwaysoftware.com from your Pi? Feedback isn't turning up on Metasmoke for quite some while after it's posted.
Likewise deletion timings
 
@SmokeDetector f
 
@ArtOfCode Doesn't look like metasmoke responds to pings. :P
 
@hichris123 that's... odd.
What happens if you ping stage.artofcode.co.uk? Does that respond?
 
nope.
 
@Undo can you do a redaction on this metasmoke post? The guy posted real creds. Edited them out in the grace period, but we're stuck with them on metasmoke.
@hichris123 okay, so it's a rails thing
 
11:32 AM
Good, it's not just my internet connection being completely weird. :P
 
We're still not getting feedback showing up that quick, though - wonder why?
In fact, mine from 15 minutes ago still hasn't turned up.
 
For some reason, either my internet connection or the Pi likes to drop some information from time to time (I think it's the Pi, maybe I should use it as a wired device). Anyway, probably just try again.
 
That would explain it... I can boot it on EC2 in a couple hours, if that helps?
 
Eh, I think it's fine; not sure why it decided to not send that feedback, as everything else seems to be working.
 
[ SmokeDetector ] Bad keyword in body, bad keyword in title: Weight Loss Tips for Teenage Girls by Charles Beasley on drupal.stackexchange.com
 
11:39 AM
@ArtOfCode Someone needs to mail these people and tell them to switch their passwords
now.
 
Change these credentials now. You successfully edited them out in the grace period. However, the community spam protection system, SmokeDetector, has stored a record of the post before you did this, so your credentials are still public. You need to change them to avoid compromise. — ArtOfCode 9 mins ago
 
My quick dirty research suggests thats a large telco provider
When I see stuff like this I always wonder
How do people who use user credentials so flippantly get jobs where they get access to them.
 
[ SmokeDetector ] Black magic in body, black magic in title, phone number detected in title: black magic Specialist 9928749449 by alidarziindia on askubuntu.com
 
sd k
 
[ SmokeDetector ] Link at end of body, pattern-matching website in body: Right when this condition by Apprands on gaming.stackexchange.com
[ SmokeDetector ] Email in answer: Free database or API of all North American businesses by Piyush Dodiya on opendata.stackexchange.com
 
11:45 AM
@ArtOfCode I wonder what the superiors of the guy will think when they find out he just leaked exchange server global admin credentials to the public
<_<
 
@SmokeDetector k
 
[ SmokeDetector ] Phone number detected in title: 18774344575 is a toll free number? by Robert Smith on askubuntu.com
 
@WaiHaLee very much looks like it
 
[ SmokeDetector ] Bad keyword in body, link at end of body, pattern-matching website in body: pampering the skin as it does now? by Vickiebandi on askubuntu.com
 
11:50 AM
sd k
 
[ SmokeDetector ] Link at end of body, link following arrow in body, pattern-matching website in body: Poor oral hygiene, trauma to the teeth while brushing by DonnaJDyer on drupal.stackexchange.com
 
@SmokeDetector k
 
[ SmokeDetector ] Link at end of body, pattern-matching website in body: These two predominant does aid hold the more by fzadekmax on askubuntu.com
 
@SmokeDetector k
 
@Magisch I don't think they'll be overjoyed with him.
 
12:00 PM
@ArtOfCode Im actually debating internally to mail this company anonymously
If I was a sysadmin there I would want to know absolutely
 
I would have done it already if I knew the company
 
thats a medium sized company and these credentials easily make for a full system compromise vector
 
go right ahead, feel free to link them to the metasmoke post
 
[ SmokeDetector ] URL in title, bad keyword in body, link at end of body, pattern-matching website in body, pattern-matching website in title: http://megacleanseradvice.com/nucific-bio-x4-reviews/ by staceyams on drupal.stackexchange.com
 
Also feel free to give them my email if it'd be useful for them to talk to an MS admin, though there's not a whole lot I can do in terms of redaction.
Maybe I should build an admin tool.
 
12:05 PM
@ArtOfCode Your email?
 
@Magisch address. hello@artofcode.co.uk
 
@SmokeDetector k
 
Also tell them that we are taking steps to ensure they're redacted, just so they don't go crazy and do something stupid like trying to sue us. Somehow.
 
@ArtOfCode Its a german company, and, as luck has it, with a live chat feature
 
[ SmokeDetector ] Pattern-matching website in answer: Are there any sites dedicated to developing expansions for the GPIO port? by nikitech0103 on raspberrypi.stackexchange.com
 
12:14 PM
sd k
 
[ SmokeDetector ] Mostly non-Latin answer: x86 DMA address 64bit map by nano on stackoverflow.com
 
@ArtOfCode I informed their live chat greeter person and got a sysadmin on the line almost instantly
 
I'm hazarding a guess the Op is the founder two above
 
Some indian contractor is most likely getting fired
 
@SmokeDetector n
 
@SmokeDetector n
 
@ArtOfCode should I make a comment on the post to this effect? (that I contacted the company)
 
@ArtOfCode Maybe it's just me but I'm not sure I'd bother for such an edge case. Google often caches SE questions very quickly I've noticed when dupe searching and MS has a robots.txt to disallow indexing so you're looking at a handful of people that may see it on MS, just like a few probably saw it on SO so the only real answer is for the OP to change the credentials.
 
Its always better for the OP to change the credentials, the passwords are already exposed and distributed under the creative commons licence by him
 
12:33 PM
@Magisch up to you :)
@PeterJ well aye, but I'd rather we weren't storing credentials if we can avoid it.
 
@ArtOfCode At least their sysadmins know
so I would bet that they already changed the creds
I left a link to your metasmoke
 
Probably within seconds of you telling them :)
 
The guy I had on the webchat sounded completly mortified
 
Either that or asking on SO / SF or some other random site how to change them...
 
I'm not surprised, I would be too if people were posting my creds :)
 
12:37 PM
I would first thing change them and second thing go on an indian contractor firing spree
@Magisch , that was a dummy one no worries , tks for the caring. — Yasila Pichai 46 secs ago
Lets hope thats true
 
It would be better if we could change the body of the metasmoke post to remove them url let Undo remove the credentials, but this messes up the reproducibility of the check that caught this post
 
[ SmokeDetector ] Link at end of body, pattern-matching website in body: Green coffee zt applied to the following product by bprint69 on drupal.stackexchange.com
 
Because he said the credentials are fake, lets believe him and keep them in metasmoke
 
sd k
 
@Ferrybig that's what I was debating making a tool for.
 
12:40 PM
@Ferrybig I'll find out as soon as the company emails me back
Hopefully it was really just a dev dummy account
 
The only downside of allowing admins to edit posts is that history can change without leaving any records
 
@Ferrybig yeah, we'd have to add a note that it was redacted.
 
1:19 PM
@ArtOfCode Done
 
[ SmokeDetector ] Few unique characters in body: edited edited edited edited edited edited by Mr Spark on stackoverflow.com
 
@Undo For what its worth, I contacted the company via their webchat, and told them of what happened. The sysadmin told me he will resolve this asap and get back to me.
 
@ArtOfCode meh
I question whether it's needed, given how easy it is for me to go gsub stuff on the server
@ArtOfCode heh, good look with that
I suppose they'd have to sue me, but they'd need to prove damages
Also, they're a German outfit which would make things harder
 
@Undo could they? Aren't you a platform provider of sorts under the DMCA (e.g. they'd have to file a takedown request)?
Well the sysadmin in the webchat was very thankful for me bringing this to their attention
 
@Magisch It'd probably be "distribution of trade secrets" or something, rather than copyright.
No one copyrights credentials
 
1:27 PM
I also made a point to say that w/o metasmoke we would have never caught it and it would still be lingering in caches everywhere, ready for scraping
 
Yeah, I'm not exactly worried about it
 
So I think the possibility of anything but thankfulness is very remote
 
AFAIK a trade secret only applies until someone makes it public, which he did by posting it anyway. I'll donate you a new RPi @Undo if it's confiscated by the DHS / FBI / NSA as evidence lol.
 
heh
 
Well
I dont think they will do anything
 
1:31 PM
Are we trying to scare @Undo?
 
metasmoke is on EC2, so that's Amazon's problem
 
FREAK OUT! THE FEDS ARE COMING!
 
@Andy Somewhat unsuccessfully.
 
That's a good thing
Speaking of freaking out...I'm going to go upset my manager. Should be fun.
 
I've seen enough people threatening... interesting things... in mod message replies that I'm kinda immune.
@Andy Two weeks?
 
1:32 PM
@Undo I wish :(
 
:(
 
@Undo Like what?
 
[ SmokeDetector ] Few unique characters in answer: Open another Python script from another Python process by Andy on stackoverflow.com
 
When that happened here in SD, I told our sysadmin (my superior) about this, and he laughed his behind off for a minute before mumbling something about trusting indian contractors
 
 
2 hours later…
3:06 PM
!!/test lumagenexuk.co.uk
@SmokeDetector del ok
 
@sandwich I beleive I tested those today too...
7 hours ago, by Ferrybig
!!/test http://www.lumagenexuk.co.uk/truvaderm/
 
So it was reported manually because someone saw it sooner.
 
That's what I assumed
 
[ SmokeDetector ] Bad keyword in body, link at end of body, pattern-matching website in body: Regardless, today it is truly difficult to trust by sherriecheeri on money.stackexchange.com
 
3:15 PM
hi
@SmokeDetector k
 
@SmokeDetector f
I think getbootstrap is the most common source of false positives for that check.
 
3:37 PM
!!/pull
 
[ SmokeDetector ] SmokeDetector started at rev 6e4489c (Normal Human: freeprnow, keyword-email update) (running on hichris/Pi)
Restart: API quota is 5542.
 
4:23 PM
!!/alive
 
@Ferrybig Of course
 
The corp I reported to earlier
Sent me an Email answer roughly translating to: "Hello <my Name>, Thank you for your quick incident report and response in regards to this breach of our security. We have dealt with the problem"
that sounds ice cold
 
probably sent by their PR people rather than the sysadmin you talked to
PR people who don't understand what a public password actually means
 
No I mean the "We have dealt with the problem" in the german phrasing they used sounds like something the terminator would say
 
heh
 
4:30 PM
someone somewhere got fired for that
o_O
 
seems fairly likely
 
On a positive note, I got a beta invite for wow legion
\o/
 
@SmokeDetector n
 
4:34 PM
Systems Administrator at reddit.inc
posts stuff like this
uwhotm8
 
[ SmokeDetector ] Manually reported answer: Are databases stored in SSD or in RAM , by RediMart on stackoverflow.com
 
5:09 PM
[ SmokeDetector ] Few unique characters in answer, repeating characters in answer: Creating objects via txt file into an array in Java by okay on stackoverflow.com
 
5:32 PM
[ SmokeDetector ] Blacklisted user: Weird volume behaviour in Android 6.0.1 by RediMart on android.stackexchange.com
 
@SmokeDetector k
 
@Ferrybig I think thats more NAA
 
I find it more a troll
Based his other 2 posts
 
[ SmokeDetector ] All-caps answer: Why did Allah make bad people? by hasseina on islam.stackexchange.com
 
@SmokeDetector n
 
5:39 PM
[ SmokeDetector ] Offensive answer detected: How to count each word in a string Without .split()? by Alex Solomons on stackoverflow.com
 
^seem's naa in my view
 
@SmokeDetector n it is
 
6:06 PM
[ SmokeDetector ] Link at end of answer: What is art meaning? by Kuşadam Portre Sanat on stackoverflow.com
 
@SmokeDetector n
 
[ SmokeDetector ] Few unique characters in answer: C# WPF Control an other Application and Login into Websites by Felix ccad on stackoverflow.com
 
 
2 hours later…
8:16 PM
[ SmokeDetector ] Bad keyword in body: PHP-Need help filling in epg time slots by snowman on stackoverflow.com
 
@SmokeDetector why
 
@Yvette Body - Position 2070-2080: Anti-aging
 
^second code block
 
@SmokeDetector f
didn't think to look in the code block
@SmokeDetector why
 
@Yvette Post - Contains 4 unique characters
 
8:21 PM
@SmokeDetector f
@SmokeDetector Edited out reference to anti aging product and added a comment to OP
Do you have any idea what it's like being in here alone?
Downright creepy. All the echoes of debauchery.. I have shivers
 
Don't worry, there are always other people around.
 
omg I'm in the wrong chat room!!
 
:OOO
 
I need someone to delete that!!
 
@Yvette @hichris123 can do that, he's a mod
 
8:32 PM
I guess it's creepy if alone... with a bot spewing spam post periodically in real life
 
But cant a room owner do that too?
 
No, only move to another room.
 
@hichris123 can you please trash can/delete that, I was in the wrong chat room..
that's the thing I like about this room, is it's quietness. The other rooms I go to if I have energy.
@sandwich thanks and sorry about that
 
@SmokeDetector cv-pls q
 
@Yvette I mean if you really want but I think the message already got out. ;)
 
8:37 PM
@SmokeDetector f
@hichris123 it's embarrassing, this is the room I have my professional, sense of decorum hat on at all times.
Except when I made an avatar for SD which was rejected. Even then it was a clean joke.
 
We don't hate humor in here. :P (although I do like that we're not the CVR with that level of jokes, etc.)
 
@Yvette User removed from blacklist (5796091 on stackoverflow.com).
 
Relax... I don't find it offensive or anything, and there's a grain of truth
refer to Taverns on spam hour
 
true that, spam oh clock is worse than anything posted in chat.
 
8:42 PM
[ SmokeDetector ] Offensive answer detected: After being neuralized, why is Newton holding a shovel? by user65996 on scifi.stackexchange.com
 
@SmokeDetector k
 
any reason why this meta smoke has 2 "x"s on it by the same person? metasmoke.erwaysoftware.com/post/27976
 
@SmokeDetector f edited
 
@gunr2171 it has been posted from multiple rooms, probably from the Charcoal HQ and the SOcvr
 
@sandwich maybe the script should detect whether the score is already very low, scifi.stackexchange.com/questions/114500/is-captain-america-gay was flagged.
 
8:45 PM
@Ferrybig what, there are other rooms besides SOCVR?!?!?
thanks
forgot about that
 
There is also the meta tavern btw
 
@hichris123 There is a check for creation date, the post must be recent. And that one isn't, so I'm confused...
 
@hichris123 I like the comment about overthinking things :)
 
@sandwich Hmm. Did yours flag it as well? (maybe I sleep flagged?)
 
@hichris123 It did. :(
 
8:51 PM
Hmm.
 

« first day (906 days earlier)      last day (2920 days later) »