« first day (1137 days earlier)      last day (1249 days later) » 

2:00 AM
@KazWolfe flag limit. Though 100 per site is still a lot.
per day
 
@JanDvorak yeah, there's a limit, but it doesn't change the fact that spammers have access to a privileged account and can sell things through smokey.
a lot of work and annoyance for mods, plus the damage control from that event would just be insane.
 
Plus lost trust - the CM team wouldn't be happy to let Smokey flag anytime soon again.
 
I think there's more of a chance that it's an ACE that we don't review via a pull request, but we're pretty good at reviewing things
or one we don't catch
 
well, smokey would have god knows how many spam flags against it, it'd get itself blacklisted, TOTM/SE probably would hate bots even more than they already do...
is there a point where a flagged account is just banned entirely?
 
Yep
 
2:04 AM
Even flag-banning the Charcoal team for a week would be a win for the spammers
 
so ACE is pretty deadly here. :/
 
Yep.
 
However, we aren't going to start autoflagging until we enforce more review requirements on our GH repo, so once we do that we should be fairly safe
 
unless there happens to be a zero-day in Python
Which would cause pain to way more people than just SE
 
well, good thing spammers aren't too smart.
 
2:12 AM
@JanDvorak fortunately, Smokey's system, Aurora, is on a daily security updates schedule
 
Nice
 
so as soon as a fix for a major 0day is out it's there
since Aurora's an Ubuntu box, and I have a Landscape license for up to 30 systems, it's centrally managed
so it can automatically push updates :P
 
Plus, it's a relatively unknown system, so there won't be many people looking for Aurora vulnerabilities
 
I also have a "Kill Smokey" script up there, kills all active screen, python, and bash script processes
and forcibly 'downs' the network, then calls on my mail server to email me a notification about the trigger
 
That presumes you know you should kill Smokey.
 
2:14 AM
I keep an eye here :)
but yes, if it needs to die, it's killable
 
What if Smokey doesn't report here?
 
with extreme prejudice
@JanDvorak I kill it every couple days out of paranoia xD
paranoia that it's not clean
if it dies it dies
 
So, you first kill the network, then you send an email?
 
and i'm sure SOMEONE will ping here :P
 
do you have a macro to kill smokey too?
 
2:15 AM
@JanDvorak the Landscape script has its own post-execution script that relies on Landscape pinging me
 
or a big red button on your desk?
 
oh, nice
 
@KazWolfe You mean the "DON'T PRESS OR THE NUKES GO OFF" button?
 
@ThomasWard yes.
the one that launches @angussidney at the servers.
 
we don't talk about that button.
 
2:16 AM
 
i actually have one of those to kill my server room power.
 
@angussidney Might be sane to implement some kind of sanity check, but I'm less worried about it
Remember, most of these spammers don't care that much
I believe there are ways to attack their profit at the source, but it's low enough yield and requires employee time.
 
@Undo (nor are they too smart)
 
That too
 
@ThomasWard If I'm installing ubuntu on a separate hard drive rather than on the same one as windows, do I still need a bootloader?
 
2:23 AM
Yes.
 
@angussidney do you want to be able to select between the OSes to boot to?
 
Hesitant yes from me, but I don't claim to understand all of that
 
@angussidney I would say yes, normally.
 
@angussidney Come join us!
 
@angussidney ^ Kaz here has a point :)
 
2:24 AM
Thats probably a better idea than spamming this room with unrelated stuff
 
we do kinda use this place as an offtopicish haven :)
 
yes. AUGR is used to the spam.
 
and I don't really mind either way
 
i think we're having a discussion of fat pigeons vs chickens over there now.
 
@KazWolfe It's quite an interesting discussion though xD
 
2:28 AM
[ SmokeDetector | MS ] Shortened URL in answer: How to disable screen lock on Huawei P8 lite? by Solly Wolly on android.stackexchange.com
naa- by KazWolfe
 
 
2 hours later…
4:03 AM
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, pattern-matching website in body, pattern-matching website in title: click here: nuvieskincareserum.com/ultraflex-relief/ by nicson on superuser.com
 
4:14 AM
[ SmokeDetector | MS ] URL in title, bad keyword in body, link at end of body: anradrol.com/jack-hammer-xl/ by user71029 on drupal.stackexchange.com
[ SmokeDetector | MS ] Bad keyword in body, pattern-matching website in body: The Skills For Males To Get Up Their Skin by user217143 on apple.stackexchange.com
[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: supplementlab.org/follinique/ by deborahflagg011 on graphicdesign.stackexchange.com
tpu- by Yvette
[ SmokeDetector | MS ] Non-English link in answer: Hoàn Vũ Solutions by user347577 on meta.stackexchange.com
tpu- by Yvette
[ SmokeDetector | MS ] URL-only title, link at end of body, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: healthpluscogni.com/dominant-testo/ by user635618 on askubuntu.com (@ThomasWard)
 
4:29 AM
sd k
 
[ SmokeDetector | MS ] URL in title, blacklisted website in body, blacklisted website in title, pattern-matching website in body, pattern-matching website in title: yoursbetterhealthsolutions.com/biocilium/ by user217146 on apple.stackexchange.com
 
[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, link following arrow in body, pattern-matching website in body, pattern-matching website in title: supplementlab.org/follinique/ by user217147 on apple.stackexchange.com
tpu- by Yvette
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body: Is Penis Pills Enlargement Really Suitable? by karidmaz on askubuntu.com (@ThomasWard)
[ SmokeDetector | MS ] Bad keyword in body, pattern-matching website in body: Max IS THE EASY AND EFFICIENT WAY by Kstoorikant on apple.stackexchange.com
 
[ SmokeDetector | MS ] Manually reported question: Gmail technical Services Number by Randy Orton on stackapps.com
[ SmokeDetector | MS ] Bad keyword with email in body: Can a person spoof the TO address as a forwarding email which they don't own the domain name? by User92305 on stackoverflow.com (@dorukayhan)
 
[ SmokeDetector | MS ] Bad keyword in body, pattern-matching website in body: SAW PALMETTO: Saw palmetto extract by user217150 on apple.stackexchange.com
 
sd k - k
 
[ SmokeDetector | MS ] URL in title, bad keyword in body, pattern-matching website in body, pattern-matching website in title: brainfireadvice.com/active-plus-youth-cream/ by Rose ton on apple.stackexchange.com
 
4:58 AM
sd k
 
[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: supplementlab.org/follinique/ by user635628 on askubuntu.com (@ThomasWard)
[ SmokeDetector | MS ] Repeating characters in title: iMac disk partion FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF by Shkgma on apple.stackexchange.com
 
5:15 AM
@SmokeDetector fp-
 
[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: supplementlab.org/follinique/ by olappilsaas on graphicdesign.stackexchange.com
[ SmokeDetector | MS ] Repeating characters in answer: Insert , Update , Delete -> Normalization & Code Igniter by user7348361 on stackoverflow.com (@dorukayhan)
[ SmokeDetector | MS ] Bad keyword in body, link at end of body, link following arrow in body, pattern-matching website in body: The average man's experience of the program? by jacobstyu on askubuntu.com (@ThomasWard)
tpu- by KazWolfe
[ SmokeDetector | MS ] Pattern-matching website in body, repeated URL at end of long post: This emulsion connected to your face by user217158 on apple.stackexchange.com
[ SmokeDetector | MS ] Bad keyword in title, link at end of body, pattern-matching website in body: Five Techniques Keep Your Hair Stay Healthy by user679428 on superuser.com
tpu- by tripleee
[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: supplementlab.org/follinique/ by user62151 on workplace.stackexchange.com
tpu- by Yvette
[ SmokeDetector | MS ] Bad keyword in title, bad keyword with email in body, blacklisted website in body: SAP HR ONLINE TRAINING COURSE by user7348413 on stackoverflow.com (@dorukayhan)
tpu- by tripleee
 
5:48 AM
@SmokeDetector if this wasn't autoflagged, what is!?
would adding the phone number to the blacklist help trip it over the threshold? metasmoke.erwaysoftware.com/…
 
We do have a specific phone number reason
 
for that particular phone number? it didn't trigger
 
And it wasn't auto flagged because it only had a weight of 260, which is less than the 280 required
@tripleee reflexes might need changing
 
so would adding 9676277094 to the blacklisted keywords bring the missing 20?
how are the weights calculated?
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body: Fixings Used in perfect youth serum by user62152 on workplace.stackexchange.com
 
5:54 AM
@angussidney you mean we should make new rules to pile on weight for posts which are already detected properly but don't get enough weight?
 
tpu- by Yvette
[ SmokeDetector | MS ] Link at end of answer: Problemas no netbeans com conexão com Postgres by danilo on pt.stackoverflow.com
naa- by tripleee
 
google translation: "Could you solve the problem, buddy? Because I am also tempted and only of this error, please send me an email if you could solve this problem"
(I guess "tempted" ~ "affected")
 
[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body, repeated URL at end of long post, blacklisted user: How to apply the condition? by user62152 on workplace.stackexchange.com
tpu- by Undo
[ SmokeDetector | MS ] Bad keyword in title, link at end of body, pattern-matching website in body: Important Information On Creams Carried Out Correctly Rid Of Dry Skin by yorelmorss on superuser.com
[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body: Two grams of devils claw possibly by user679439 on superuser.com
tpu- by Undo
[ SmokeDetector | MS ] URL in title, bad keyword in body, link at end of body: wellnessfeeds.com/biocilium/ by KennetLee on gaming.stackexchange.com
tpu- by Undo
[ SmokeDetector | MS ] Link at end of answer: Magento2 admin after login redirect back to admin login? by Zahirul hasan on magento.stackexchange.com
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, repeated URL at end of long post: Particularly, given that the by liewskijuri on stackoverflow.com (@dorukayhan)
 
6:27 AM
@tripleee sorry, stupid ipad autocorrect. I meant that the regexes for the phone number reason might need changing to catch that form of phone number
2 days ago, by Undo
@Andy Weights are, simply, 100 * num TPs / total
Also, that is a good idea about posts which are detected and arent autoflagged
Maybe each TP could add a certain amount to the total (e.g. +30 weight)
@undo how does that sound? ^
 
On the fence about that, let me sleep on it
On one hand, it makes sense. On the other hand, we're already flagging 20%+ of our corpus with 99.x% accuracy
Need to run queries on it
At first, this should probably augment our flagging. In the future, we can try to squeeze more out of it.
 
[ SmokeDetector | MS ] Pattern-matching website in body, repeated URL at end of long post: Following my first application by neuroxr on bricks.stackexchange.com
 
Yeah, need to get numbers on it. After sleep.
sd k
Night :)
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, link following arrow in body, pattern-matching website in body, repeated URL at end of long post: Testabolan CYP Your daily diet by KevinStric on drupal.stackexchange.com
 
6:43 AM
@Undo Its just that I've noticed that a few very spammy posts fall a bit short
 
[ SmokeDetector | MS ] Shortened URL in answer: Is LCHF diet the best and easy way to loose fat? by Shyam Shukla on fitness.stackexchange.com
[ SmokeDetector | MS ] Shortened URL in answer: Can one be on a ketogenic diet and not go to the gym? by Shyam Shukla on fitness.stackexchange.com
[ SmokeDetector | MS ] Link at end of body, link following arrow in body, pattern-matching website in body: Iron Bull Edge Smart Pills by user679447 on superuser.com
tpu- by tripleee
[ SmokeDetector | MS ] URL-only title, bad keyword in body, blacklisted website in body, blacklisted website in title: fornatgaex.com/active-plus-youth-cream/ by erinweco on askubuntu.com (@ThomasWard)
tpu- by tripleee
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body: It's because of the bad diet? by lorewe nelly on drupal.stackexchange.com
[ SmokeDetector | MS ] URL in title, repeated URL at end of long post: anradrol.com/jack-hammer-xl/ by user217167 on apple.stackexchange.com
tpu- by tripleee
 
!!/blacklist-website anradrol\.com
 
@tripleee You don't have code privileges, but I've created a pull request for you.
[ SmokeDetector | MS ] Pattern-matching website in body: Keep Your Hair From Hair Loss by RamonWalto on apple.stackexchange.com
tpu- by tripleee
 
!!/blacklist-website trexmusclesite\.com
many many more hits
 
@tripleee You don't have code privileges, but I've created a pull request for you.
[ SmokeDetector | MS ] Link at end of body: purelifegreencoffeebeanadvice.com/abella-mayfair-canada by user134587 on security.stackexchange.com
[ SmokeDetector | MS ] Blacklisted website in body: With the Livana Lift by skiny fresh on stackoverflow.com (@dorukayhan)
[ SmokeDetector | MS ] Pattern-matching website in answer: How to Load Json in Endless Recycler Veiw with Retrofit by majid.sh on stackoverflow.com (@dorukayhan)
tpu- by tripleee
 
7:03 AM
!!/blacklist-keyword abella\Wmayfair
 
@tripleee You don't have code privileges, but I've created a pull request for you.
 
this one also has a phone number which wasn't detected: metasmoke.erwaysoftware.com/post/49481
either way, I'm thinking maybe there should be "has a phone number" (any phone number) and a separate blacklist of specific phone numbers
 
[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, pattern-matching website in body, pattern-matching website in title: supplementlab.org/follinique/ by deborahflagg011 on apple.stackexchange.com
tpu- by tripleee
 
the hits for supplementlab\.org get a high enough score generally, though one I looked at was pretty close (286)
s/score/weight
 
7:15 AM
!!/blacklist-website wellnessfeeds\.com
 
@tripleee You don't have code privileges, but I've created a pull request for you.
 
!!/blacklist-keyword biocilium
 
@tripleee You don't have code privileges, but I've created a pull request for you.
 
any chance the Metasmoke search form could allow us to search for weight, and/or display it in the results? [ms-fr]
 
[ SmokeDetector | MS ] Blacklisted website in body, link at end of body, pattern-matching website in body: Intelleral: Characteristic Focus Supplement For Clearing Brain Fog! by user71037 on drupal.stackexchange.com
[ SmokeDetector | MS ] Bad keyword in link text in answer, blacklisted website in answer: How to recover a deleted file on Mac OS X? by annalee899 on apple.stackexchange.com
 
7:34 AM
@SmokeDetector k
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching website in body, repeated URL at end of long post: Testabolan Cyp Reviews- Enhance Stamina And Energy Level, Experts Recommended by testabolancyp1 on stackoverflow.com (@dorukayhan)
[ SmokeDetector | MS ] Chinese character in title: Mysql join 索引不命中 by daniel.luo on stackoverflow.com (@dorukayhan)
 
@SmokeDetector f
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body, repeated URL at end of long post: Follinique Skin beauty by olappilsaas on superuser.com
[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body, repeated URL at end of long post: attractively with no duplicity. Quickly you have a savage weapon by user62153 on workplace.stackexchange.com
tpu- by unarist on Follinique Skin beauty [MS]
Restart: API quota is 8214.
 
@SmokeDetector k
 
7:53 AM
[ SmokeDetector | MS ] Link at end of body, pattern-matching website in body, repeated URL at end of long post: Coconut oil, on the other hand by neuroxr on workplace.stackexchange.com
tpu- by Glorfindel
[ SmokeDetector | MS ] Manually reported question: what is Avg Phone Number? by user346273 on meta.stackexchange.com
 
^ no link / phone number detected, but I'm sure it will follow. Unless we get there first.
 
tpu- by tripleee
[ SmokeDetector | MS ] Bad keyword in body, bad keyword with email in body: продажа фальшивых денежных средств by user232402 on ru.stackoverflow.com
tpu- by Glorfindel
 
google translate: "In supplying counterfeit money for the terminals, ATMs Banknotes have all the decals and glow in ultraviolet! A simple eye does not distinguish! Ideal to replenish the "left" card, followed by withdrawal from ATMs Quality - Receive our products have a high level of quality that allows you to bypass the known terminals QiWi, I-Box, PSCB, ATM, Cash-Point, RTM Garant welcome. For: xxxxxx@mail.ru"
 
They're pretty recognizable, even with my level of Russian.
 
after seeing the translation I suppose I should have recognized денежных but we probably have many people here who do not read cyrillics at all
 
8:10 AM
[ SmokeDetector | MS ] Blacklisted user: what is Avg Phone Number? by AVG 1855-779-6663 phone number on meta.stackexchange.com
tpu- by Glorfindel
 
Ah, there it is.
 
8:23 AM
[ SmokeDetector | MS ] Few unique characters in answer: Why do many parkour practitioners wear oversized pants? by boi man on fitness.stackexchange.com
[ SmokeDetector | MS ] Shortened URL in answer, blacklisted user: I tried a new diet and I think my blood sugar is too low, do I need more carbs? by Shyam Shukla on fitness.stackexchange.com
tpu- by tripleee
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title: Aloe Vera Juice Weight Loss? by allenwang on cooking.stackexchange.com
tpu- by tripleee
tpu- by Glorfindel
 
8:41 AM
^ the URL points to drivethelife.com, a known spam target, and is an answer for Windows 10 instead of Windows 8.x.
 
Maybe useful for reviewing if we can attach comment like this ^^ to own feedback on MS?
 
[ SmokeDetector | MS ] Mostly non-Latin body, pattern-matching website in body, blacklisted user: How to use the camera by camera on askubuntu.com (@ThomasWard)
tpu- by Glorfindel
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body: Best Ingredients For Smooth Skin by charlesmaddien on askubuntu.com (@ThomasWard)
tpu- by Glorfindel
[ SmokeDetector | MS ] Link at end of answer: document.getElementById doesn't retrieve an element that actually exists by Jannifer Lisa on stackoverflow.com (@dorukayhan)
tpu- by Glorfindel
 
[ SmokeDetector | MS ] Manually reported question: But the reason for adding this by jamadribur on apple.stackexchange.com
tpu- by Glorfindel
 
!!/blacklist-website mindextra\.com
 
@Glorfindel You don't have code privileges, but I've created a pull request for you.
[ SmokeDetector | MS ] Bad keyword in answer: What is the most sustainable way to dispose of shoes? by CC-Haus on sustainability.stackexchange.com
fp- by Glorfindel
[ SmokeDetector | MS ] URL in title, blacklisted website in body, blacklisted website in title, link at end of body, blacklisted user: offersreviews.org/tl900-headlamp/ by user62151 on workplace.stackexchange.com
 
@unarist IMHO, we can keep the comments here, but it would be useful to have a link from an MS entry to the corresponding Smokey report here.
 
tpu- by Glorfindel
naa- by Glorfindel
[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, link at end of body, link following arrow in body, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: no2factoronline.com/jack-hammer-xl-reviews/ by aunixafuu on askubuntu.com (@ThomasWard)
tpu- by Glorfindel
[ SmokeDetector | MS ] Link at end of body, pattern-matching website in body, repeated URL at end of long post: What are the components used in XYZ Smart Collagen Cream? by xyzcollagencream on superuser.com
 
9:24 AM
^^ that spammer is trying to get a high score in Automated Flagging
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, link following arrow in body, pattern-matching website in body: The Best Treatment For Body Acne by user635695 on askubuntu.com (@ThomasWard)
tpu- by Glorfindel
 
@unarist hmm, that sounds like a smart idea. Then we could have some sort of notes section which registered users can edit, or a command to send notes
 
hi folks, I've noticed a repeating spam for some "filepuma" site at Programmers. Today's occurrence is this and I found in my flag history one that happened about 10 days ago - this (10K link). Wonder if they attacked other sites too
 
[ SmokeDetector | MS ] Manually reported question: How to effectively promote the website? by File Puma on softwareengineering.stackexchange.com
tpu- by tripleee
 
@gnat I'll have a look if we have any hits in MS
 
9:29 AM
@gnat 10 days ago, was that the same site? Then we can blacklist it.
 
stackexchange.com/search?q=filepuma.com contains a lot of false positives, the search is not exact
 
I meant to blacklist something like filepuma.com/download/glary_utilities, not the entire website.
 
stackexchange.com/search?q=filepuma.com better but no additional hits (I guess the Superuser TP is the one you are referring to from 10 days ago)
 
I checked using per-site searchers, and there doesn't appear to be m=any FPs
I'm going to blacklist it
 
CI on 460202f succeeded. Message contains 'autopull', pulling...
[ SmokeDetector ] SmokeDetector started at rev 460202f (angussidney: +filepuma.com --autopull) (running on teward/Aurora)
Restart: API quota is 7601.
 
9:38 AM
@angussidney there's a bunch of pending PRs, could you do those, too please?
 
[ SmokeDetector | MS ] Few unique characters in body: I am one word but Who am I???? 8 by Hemansh Patel on puzzling.stackexchange.com
 
@tripleee I just had to turn off my computer, but I'll see if I can do them from mobile
 
@Glorfindel yes 10 days ago it was at the same site. @angussidney thanks!
 
fp- by Glorfindel
 
@gnat No problem, thanks for pointing it out!
 
9:44 AM
@angussidney a few are listed as having conflicts in blacklisted_websites.txt which will probably be a bit pesky to solve
 
[ SmokeDetector | MS ] URL in title, bad keyword in body, link at end of body, repeated URL at end of long post: anradrol.com/jack-hammer-xl/ by user134594 on security.stackexchange.com
tpu- by Glorfindel
[ SmokeDetector | MS ] Bad keyword in body, pattern-matching website in body, repeated URL at end of long post: Thus, unmistakably as the year advances away by Offeir1977 on apple.stackexchange.com
[ SmokeDetector | MS ] Blacklisted website in body, link at end of body, repeated URL at end of long post: turnover to even out discoloration? by stinashelly on drupal.stackexchange.com
tpu- by tripleee
[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: www.ketonesbodyprotry.com/biocilium/ by user635699 on askubuntu.com (@ThomasWard)
tpu- by tripleee
 
@SmokeDetector k
 
CI on 5b78743 succeeded.
 
@tripleee yeah, I'll probably fix it up in the morning if someone else doesn't beat me to it
Like art is now
 
Ugh conflicts :P
 
9:55 AM
CI on 14ae58f succeeded.
[ SmokeDetector | MS ] Blacklisted website in body, pattern-matching website in body: How Does the Intelleral Supplement Work? by user83012 on graphicdesign.stackexchange.com
tpu- by Glorfindel
 
!!/pull
 
!!/blacklist-keyword Intelleral
 
@Glorfindel You don't have code privileges, but I've created a pull request for you.
Restart: API quota is 7477.
[ SmokeDetector | MS ] Bad keyword in answer, pattern-matching website in answer: How can I make a mobile app that is basically a mobile browser to access my live Drupal site? by Yatin Singh on drupal.stackexchange.com
tpu- by Glorfindel
[ SmokeDetector | MS ] Manually reported question: For preventing hair loss, caused by dandruff by WilliamMack on graphicdesign.stackexchange.com
tpu- by Glorfindel
 
!!/blacklist-website ketonesbodyprotry\.com
 
10:00 AM
@Glorfindel You don't have code privileges, but I've created a pull request for you.
 
could metasmoke include rule hits on manually reported questions so we can easily see if it would have been caught if it hadn't been manually reported?
 
10:20 AM
[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body, repeated URL at end of long post: which are troublesome for our skin to hold by Sooks1966 on workplace.stackexchange.com
tpu- by Glorfindel
[ SmokeDetector | MS ] Bad keyword in title, bad keyword with email in body, blacklisted website in body, repeated URL at end of long post: SAP BPC Online Training by user7349338 on stackoverflow.com (@dorukayhan)
tpu- by tripleee
 
@SmokeDetector k
 
[ SmokeDetector | MS ] URL-only title, bad keyword in body, blacklisted website in body, blacklisted website in title, link at end of body, repeated URL at end of long post: offersreviews.org/tl900-headlamp/ by user635708 on askubuntu.com (@ThomasWard)
tpu- by Glorfindel
 
0
Q: Are questions about cashbasha a spamming scheme, or just a coincidence?

MureinikSince yesterday, I encountered two different questions (here and here) from two different users asking how to make a site like cashbasha, with the site's name linked to cashbasha.com (I did not follow the links, so no idea what's going on there). As noted, these questions were from two different...

 
10:40 AM
[ SmokeDetector | MS ] Offensive answer detected: Running JAR on iPad/iPhone by Alex on stackoverflow.com (@dorukayhan)
naa- by Glorfindel
 
@tripleee that would have to be a smokey-side thing
metasmoke doesn't know what the conditions for the rules are, only that they exist, possibly maybe
 
CI on 1c642f4 succeeded.
CI on 5060b6a succeeded.
CI on d213d8f succeeded.
CI on ea91c75 succeeded.
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, pattern-matching website in body, repeated URL at end of long post: On the off chance that you begin to muscle by daliarita154 on stackoverflow.com (@dorukayhan)
 
@SmokeDetector k
 
@ArtOfCode um okay, so could Smokey run the rules on a post when it is reported?
 
In theory, yeah
 
10:55 AM
CI on 9a4f512 succeeded.
CI on 18fd89a succeeded.
[ SmokeDetector | MS ] URL in title, blacklisted website in body, blacklisted website in title: offersreviews.org/tl900-headlamp/ by qasimmukhtarkassis on apple.stackexchange.com
tpu- by Glorfindel
 
!!/pull
 
Restart: API quota is 7037.
[ SmokeDetector | MS ] Blacklisted website in body, link at end of body, link following arrow in body, repeated URL at end of long post: Sun Labs offers other sunless tanning by SatthewBrady on askubuntu.com (@ThomasWard)
tpu- by Glorfindel
[ SmokeDetector | MS ] Blacklisted website in body, link at end of body, repeated URL at end of long post: Livana Lift Reviews - Pure Product by tesbovilan01 on superuser.com
tpu- by Glorfindel
[ SmokeDetector | MS ] Few unique characters in body, no whitespace in body, repeating characters in body: Search for specific value from Array by Mr X on stackoverflow.com (@dorukayhan)
 
11:12 AM
@SmokeDetector vandalism
 
!!/blacklist-keyword livana\Wlift
 
@tripleee You don't have code privileges, but I've created a pull request for you.
[ SmokeDetector | MS ] Pattern-matching website in body: Finally, maintain your marketing to a minimum. by blygonsmith on security.stackexchange.com
tpu- by Glorfindel
[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body: Independently, I didn't touch base all through its ominous impact till now. by Mincen1929 on superuser.com
tpu- by Glorfindel
CI on 9819b51 succeeded.
 
!!/blacklist-website healthyclubpro\.com
 
@tripleee You don't have code privileges, but I've created a pull request for you.
 
11:25 AM
@tripleee any reason for using \W instead of \s? The latter will be interpreted correctly by MS in searching for TPs/FPs.
 
@Glorfindel huh? they match different things
I don't think handing \s but no other Perl escapes was a particularly useful hack, but I guess that's beside the point here
 
What's the difference between them? Does it depend on the regex flavour?
 
PCRE is what Smokey uses but I don't think I've seen any where they had different semantics
in Emacs \s has a quite different meaning, of course
\W matches a non-word character whereas \s only matches whitespace
 
ah, OK. I thought W = whitespace.
 
tpu- by tripleee
 
11:34 AM
\w is "word character", i.e. equivalent to [a-zA-Z0-9'"] and probably a bunch of other punctuation
\s is whitespace, \S is not-whitespace.
 
no, \w is a word character, and \W is its complementary set; similarly, \S is the opposite of \s
 
so it is
 
[ SmokeDetector | MS ] Pattern-matching website in body: Feel the Most Excellent Shifting Agencies Solution for Seamless Goods Shipping by kanika on drupal.stackexchange.com
tpu- by tripleee
[ SmokeDetector | MS ] Link at end of answer: What Year Is the Ford Anglia? by Tim Kaye on scifi.stackexchange.com
tpu- by tripleee
 
!!/blacklist-keyword movers\Wand\Wpackers|packers\Wand\Wmovers
 
@tripleee You don't have code privileges, but I've created a pull request for you.
 
11:46 AM
@tripleee missed the brackets, and I'm pretty sure we already have a pattern for that
 
what brackets?
 
| conditions need to have their operands surrounded by brackets
as in (X|Y) rather than X|Y
 
shouldn't the code fix that? but okay, is there any way for me to update the PR?
 
@tripleee push another commit to the same branch, in theory, but I believe we already have a pattern to catch that, which makes blacklisting it redundant
 
looks like the pattern looks for "in" after the phrase
just by looking at the other matches
correction, it looks for "packers.*movers" but not "movers.*packers"
and some rather weird context requirements
 
11:56 AM
[ SmokeDetector | MS ] Pattern-matching website in body, repeated URL at end of long post: Niacin Max Reviews: 100% New Energy Doses Supplements by user217209 on apple.stackexchange.com
tpu- by tripleee
[ SmokeDetector | MS ] Bad keyword in title: AVAST helpline phone number by Uttam Negi on meta.stackexchange.com
tpu- by Glorfindel
[ SmokeDetector | MS ] Bad keyword in body, link at end of body, pattern-matching website in body, repeated URL at end of long post: As we likely am attentive, standard impacts "skin safe" by dlfatoekds on workplace.stackexchange.com
tpu- by Glorfindel
 

« first day (1137 days earlier)      last day (1249 days later) »