« first day (1417 days earlier)      last day (2404 days later) » 

7:00 AM
!!/whois code-admin
 
@ByteCommander That is not a user level I can check. I know about code_admin, admin
[ SmokeDetector | MS ] Blacklisted user: run external .exe via c++ by schwing on stackoverflow.com
 
!!/whois code_admin
 
code admin != git privs
 
no? oops then.
 
7:00 AM
@SmokeDetector why
 
!!/location
...no?
!!/location
!!/rev
 
[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, blacklisted website in body, +4 more: nitroshredadvice.com/force-fit-xl/ by olazjkhaizer on graphicdesign.SE
 
7:01 AM
!!/wut
 
Smokey gone Skynet
 
dammit metasmoke
@Undo guess what
 
!!/blame
 
It's responding in the Tavern
 
7:05 AM
quick reboot it
 
@ArtOfCode Hmm. metasmoke.erwaysoftware.com is timing out (no ping response)
 
yep
 
I can't do anything in the Tavern, it's crashing my phone with too many pictures
 
@DavidPostill again, and still -- it's been doing that since before Undo went to bed but he is not able to help us now
 
Restart: API quota is 10952.
 
7:07 AM
@tripleee Ah. Just woken up myself.
Now getting:
>This website is under heavy load (queue full)

We're sorry, too many people are accessing this website at the same time. We're working on this problem. Please try again later.
 
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body, +1 more: Safeguard to take! Keep it in a cool and dry place. by Toopece51 on superuser.com
 
@SmokeDetector k
 
Metasmoke instability continues, harming Smoke Detector (incl autoflagging), userscripts, and etc. We are unable to take any quick action, but are considering our options. If you have clever ideas, please add them as a comment on issue #257
 
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, pattern-matching website in body, repeated URL at end of long post: I have touchy skin! So would i be able to utilize it? by liftlifti on graphicdesign.SE
 
7:10 AM
@SmokeDetector k
 
@SmokeDetector k
 
@DavidPostill I guess spammers found that site and started a ddos
 
So, I am now a mod on Aviation.SE. The thing is that I volunteered my account to the Charcoal system. I remember something about not doing it if you're a mod. Is it still the case? How do I revoke access to my account in such a case?
 
@Federico You're good. We automatically don't flag posts on sites where you're a mod.
 
@Federico congratulations!
7
 
7:16 AM
@Federico IIRC you don't need to do anything.
 
@ArtOfCode perfect! thanks! :)
@Glorfindel thank you! :)
 
@Federico congrats
 
@SagarV thanks :)
 
[ SmokeDetector | MS ] Bad keyword in body, bad pattern in URL body, blacklisted username, blacklisted website in body, pattern-matching product name in body, +1 more: It will help you to boost your stamina by diritjuriya on astronomy.SE
 
7:18 AM
@Wrzlprmft I didn't come up with the dates :)
 
[ SmokeDetector | MS ] Repeating characters in title: Surveyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy by karl on wordpress.SE
 
@Federico Congratulations for your new diamond! Be more careful when viewing flag & review queues :)
 
@SmokeDetector f
 
@TetsuyaYamamoto thanks, I'll try not to click "delete all" :P :D
 
7:20 AM
@SmokeDetector f
 
[ SmokeDetector | MS ] Blacklisted user: run external .exe via c++ by schwing on stackoverflow.com
 
@SmokeDetector fpu
 
@ByteCommander Registered question as false positive and whitelisted user.
 
@SmokeDetector why
 
7:21 AM
incorrect feedback on a NAA answer
 
> Charcoal HQ, where diamonds are made
Congrats!
 
I want one too.... pouts
 
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body: Beauty is the most prize duty concerning woman by Mandetlae on workplace.SE
 
@SmokeDetector k
 
7:23 AM
IIRC SE denies adding that diamond to the username
 
@ByteCommander that would seem to make sense, yes (-:
 
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body: Colorado Physicians' Marijuana Vaporizers by Paulraymonds on drupal.SE
 
[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, email in answer, pattern-matching email in answer: How to calculate money needed for bills, by day by scott larry on money.SE
[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +6 more: supplementlab.org/alpha-muscle-complex/ by siniorarajae on askubuntu.com
 
7:30 AM
@SmokeDetector k
@SmokeDetector k
 
@suraj what does k means?
 
[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, email in answer, pattern-matching email in answer, blacklisted user: How to calculate money needed for bills, by day by scott larry on money.SE
 
@SagarV It's spam/offensive (i.e. promotion post)
sd k
 
@TetsuyaYamamoto if I replied with, will it cast my flag?
 
7:32 AM
 
or do I have to go to the link and cast manually? (that's what I'm doing now)
 
@SagarV no. it will record in metasmoke. You will have to flag separately
 
@SagarV I think if MS is up, you can cast an autoflag, otherwise you need to cast manually by opening the link.
 
@TetsuyaYamamoto how to cast an autoflag from chat thread?
 
FWIW I fixed a stupid bug in my Deepsmoke demo, it has now classified 7 out of 129 messages it scanned as spam
@SagarV you can't, the "auto" means it's done by Metasmoke (when it works)
maybe Tetsuya means something else than autoflag?
 
7:36 AM
ah
 
I guess he means you cast a manual flag when autoflagging isn't happening, but when MS does the autoflagging, it's not like you can influence whether it will cast one on your behalf much
it selects the flaggers randomly from a rather large pool of users
 
@SagarV By replying "@SmokeDetector" or issue "sd" command, it depends on MS availability to cast spam/NAA flags :)
 
@TetsuyaYamamoto no, you can submit feedback to Metasmoke with "sd f" or "sd k" (or tpu- etc etc) but this does not flag anything
 
@tripleee So you want to tell it's MS job to cast autoflag than SD itself? Yes it does, when MS is down no autoflags will cast & we need to open offending post links manually then flag them.
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, link following arrow in body, +2 more: Avoid getting an excessive dose of Shred FX by Reents 19 on drupal.SE
 
7:42 AM
@SmokeDetector k
@TetsuyaYamamoto quite so
 
that's why a lot of spam is staying up longer now
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, link following arrow in body, +2 more: Helps to boost your sexual interest and Shred FX drive by Reents 19 on workplace.SE
 
@SmokeDetector k
@SmokeDetector k
in Deepsmoke (a Charcoal subsidiary), 1 min ago, by tripleee
false positives so far: 1 2 3 4 5 6 7 8
 
7:49 AM
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +1 more: as the best hostile to maturing uneeq serum by Be couly on drupal.SE
 
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, link at end of body: the use of milk products or normal water. In some cases, by limptump on superuser.com
 
@SmokeDetector k
 
8:03 AM
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body: If the sebaceous glands are Le Allure by Dawn Pratt on workplace.SE
 
sd k
 
[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +3 more: x4up.org/alpha-muscle-complex/ by kwqs on astronomy.SE
 
@SmokeDetector k
 
tpu by Glorfindel
[ SmokeDetector | MS ] URL in title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +3 more: x4up.org/alpha-muscle-complex/ by user258281 on apple.SE (@CalvT븃)
tpu by Glorfindel on updating the testosterone [MS]
tpu by Glorfindel on Android studio,, AVD emulator [MS]
tpu by Glorfindel on Tool vs. Application vs. Software [MS]
 
Is MS back up?
 
8:11 AM
fp by Glorfindel on run external .exe via c++ [MS]
tpu- by ByteCommander
 
@SmokeDetector f
@ByteCommander no
if it is, it's prolly intermittently only
yesterday, it started behaving just before Undo woke up
 
Because FIRE etc works and Smokey reports feedback...
 
The /review page is working, but very slowly.
 
I better not DDoS visit it now....
 
8:13 AM
mm, yeah, I think we saw the same thing yesterday, the human-readable web site was harder to reach than some of the API endpoints
 
[ SmokeDetector | MS ] Bad NS for domain in body, blacklisted website in body, link at end of body, pattern-matching website in body: It promises heightened climax by Sucausuae on workplace.SE
[ SmokeDetector | MS ] Bad NS for domain in body, blacklisted website in body, link at end of body, pattern-matching website in body: This force fit xl is so much impacting by Haned1953 on askubuntu.com
 
@SmokeDetector k
@SmokeDetector k
 
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body: Youthful Balance Serum by TeamNZ 4 on meta.SE
 
@SmokeDetector k
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, bad pattern in URL body, blacklisted username, blacklisted website in body, +3 more: It will help you to deliver you the firmer and harder erection by dirit juriya on workplace.SE
 
8:20 AM
@SmokeDetector k
 
[ SmokeDetector | MS ] Bad NS for domain in body, blacklisted website in body, pattern-matching website in body, repeated URL at end of long post: It is exhibited that this settling helps in the advance by Litild19 on graphicdesign.SE
 
@SmokeDetector k
 
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, +2 more: Beautiful a breast enhancement tablet by vorafilase on graphicdesign.SE
 
@SmokeDetector k
 
[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +4 more: x4up.org/alpha-muscle-complex/ by ayqs on askubuntu.com
 
8:27 AM
@SmokeDetector k
 
ArtOfCode/EC2 received failover signal.
 
!!/location
 
@Henders ArtOfCode/EC2
@Henders teward/Solar Flare
 
!!/standby ArtOfCo
 
[ SmokeDetector | MS ] Potentially bad keyword in body: How can I delete form field data in django after submit by spin on stackoverflow.com
 
8:38 AM
@SmokeDetector f
 
@SmokeDetector why
 
Body - Position 1114-1313: hacky way:</strong></p>

<pre><code>old_form = CodeForm(request.POST)
form = CodeForm()
if old_form.is_valid():
# ...
else:
form._errors = old_form._errors

# pass form into the rendering context
 
hack(er)?.*(text|call|contact) is being watched, but it's causing a lot of fps.
Should probably have a word boundary before the last part, at the very least.
 
@Glorfindel yeah, I was a bit skeptical of that wildcard but I never got around to commenting on it
 
[ SmokeDetector | MS ] Bad keyword in body, bad pattern in URL body, blacklisted username, blacklisted website in body, link at end of body, +2 more: Women are confined to use this supplement by aithon juri on workplace.SE
[ SmokeDetector | MS ] Bad NS for domain in body, blacklisted website in body, link at end of body, pattern-matching website in body, repeated URL at end of long post: Not just this it in like course helps in giving by Litild19 on superuser.com
 
8:42 AM
@SmokeDetector k
 
sd 2k
 
sd 2k
ninja'd
 
maybe put in something like {0,50} instead of the all-in wildcard * too?
 
[ SmokeDetector | MS ] Bad NS for domain in body: 440V Regulated Variable DC Output by JtAS on electronics.SE
 
8:50 AM
@SmokeDetector f
 
sd f
@tripleee done.
 
@SmokeDetector why
 
@AjayBrahmakshatriya Post - daenotes.com NS suspicious dns2.namecheaphosting.com.,dns1.namecheaphosting.com.
 
Is dns2.namecheaphosting.com really bad?
 
@AjayBrahmakshatriya that's what the "bad NS" rule does, it checks for domains being hosted by Namecheap
I'm thinking about adding Domaincontrol too but I have not had the time to look into that
pretty good performance so far
the other rules (title and ... user name?) are not that stellar but also not all bad
they are a major provider so there will be FPs from time to time
but last time I checked this was in the top 20 among the active rules (almost top 10, and definitely top 10 among the ones with many recent hits)
"hosted by" is not entirely accurate, it triggers if the NS record contains namecheap, so they could have their name server on Namecheap and still their web site in completely different IP space
which perhaps we should actually check if FPs start to become a problem
Halflife has statistics going back but the logs are not in a convenient form; I should fix that but it's still an experiment for when I have nothing else to do
 
9:00 AM
If the fps are less as compared to tps, then I guess it makes sense. I was just surprised why a simple looking NS is in the blacklist
 
[ SmokeDetector | MS ] Mostly dots in body: How to Bind Json Data in Expandale List view? by Sash reek on stackoverflow.com
 
@SmokeDetector f
 
sd f
 
@AjayBrahmakshatriya it was a recurring thing in Halflife's results so I made a rule for it
 
IMO IPs vs NS wont really make a difference, if spammers ARE using namecheap to host, most probably they will also purchase the domain from them
 
9:02 AM
hard to tell from those results alone because it only sees the messages which were already flagged; it's possible that there are a lot of dormant FPs but it has worked better than I expected so far
@AjayBrahmakshatriya exactly, but the FPs could be different
soon everyone will be behind Cloudflare and then this won't work any longer
 
Then we watch the cloudflare IPs :p
 
@AjayBrahmakshatriya do you think that would work? I'm guessing they can rotate them pretty easily
but it's worth investigating!
 
I think domain-name(already in place)/owner-information would work better
@tripleee It would work but we would have so many fps
 
NobodyNada/Raspberry Pi received failover signal.
ArtOfCode/EC2 received failover signal.
 
cloudflare.com/ips this list is pretty small, so rotation might not be a problem.
 
9:08 AM
Restart: API quota is 19774.
Restart: API quota is 19761.
 
let's revisit this a few weeks from now and check if it seems to be reasonably static
 
[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +3 more: realcoloncleansingworks.com/testofen/ by user743801 on askubuntu.com
[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +3 more: realcoloncleansingworks.com/testofen/ by user743801 on askubuntu.com
[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +3 more: realcoloncleansingworks.com/testofen/ by user743801 on askubuntu.com
 
!!/location
 
@Glorfindel ArtOfCode/EC2
@Glorfindel teward/Solar Flare
@Glorfindel NobodyNada/Raspberry Pi
 
figures ...
!!/standby NobodyNada
!!/standby ArtOfCode
 
9:11 AM
sd k
 
@tripleee [:40347132] That message is not a report.
 
oh sheesh
 
sd 3- 3k
 
1. [:40347139] <skipped>
2. [:40347138] <skipped>
3. [:40347132] <skipped>
4. [:40347131] That message is not a report.
5. [:40347130] That message is not a report.
6. [:40347128] <processed without return value>
 
oh wait, those were three messages :x
 
9:12 AM
@tripleee What is the reason for this list? As I understand the IPs are shared right?
 
Restart: API quota is 19719.
 
@AjayBrahmakshatriya probably yes, but if we can see that they remain reasonably static we can probably build a list of similar confidence as the current "bad NS" even if there is theoretically a large number of possible FPs
 
[ SmokeDetector | MS ] Pattern-matching website in body: Wahoo Android Bluetooth Connection by jammss on stackoverflow.com
[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body, +4 more: acaiultralean-france.com/ultative-garcinia-france/ by Paulatfuler on drupal.SE
 
there are many sites which would trigger but do they post links on SE?
 
[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body, +4 more: acaiultralean-france.com/ultative-garcinia-france/ by Paulatfuler on drupal.SE
 
9:13 AM
@SmokeDetector f
 
@SmokeDetector k
 
@SmokeDetector tpu-
 
!!/rev
 
!!/location
 
9:14 AM
@Glorfindel teward/Solar Flare
@Glorfindel NobodyNada/Raspberry Pi
 
!!/standby Art
oh
!!/standby NobodyNada/raspberry
 
@SmokeDetector why
 
@tripleee Body - Position 463-476: cyberforum.ru, Position 545-558: cyberforum.ru
[ SmokeDetector | MS ] Bad keyword with a link in answer: Moving an Image while Scrolling (Javascript) by Moritz Vogt on stackoverflow.com
 
@SmokeDetector f (but off-topic: no MCVE)
 
9:17 AM
@SmokeDetector f
 
@SmokeDetector n
 
@SmokeDetector naa
 
@suraj Recorded answer as an NAA in metasmoke.
[ SmokeDetector | MS ] URL in title, bad keyword in body, bad keyword in title, blacklisted website in title, pattern-matching website in title: bettercoloncleansingguide.com/apex-vitality-booty-pop/ by heidiwlcox on meta.SE
 
@SmokeDetector k
 
@tripleee I am not sure I understand completely. This list is recent 300 hits on the "bad NS" rule from the cloudflare IPs, right? If they remain constant what does that imply?
 
9:20 AM
[ SmokeDetector | MS ] Mostly dots in body: IVR flow automation by karthika ethiraj on stackoverflow.com
 
@SmokeDetector f
 
[ SmokeDetector | MS ] Link at end of answer: How to flag views pages by T. Adamas on drupal.SE
 
@SmokeDetector k
 
@SmokeDetector tpu-
 
@SmokeDetector k
 
9:23 AM
tpu by Glorfindel on Youthful Balance Serum [MS]
[ SmokeDetector | MS ] Link at end of body, pattern-matching website in body, pattern-matching website in title, repeated URL at end of long post: facts4fitness.com/simple-comfort-cbd/ by Simple Comfort CBD on askubuntu.com
 
sd k
 
deepsmoke TP!
 
@SmokeDetector k
Nice!
 
9:26 AM
\o/
 
the FP rate is still rather disconcerting (17/18 in the current run, something like 50/600 in the previous I think) but it's finally adding value
 
[ SmokeDetector | MS ] Blacklisted website in body, pattern-matching website in body: request that you begin the day with this in Force Fit XL by lisajoniiz4 on astronomy.SE
 
@SmokeDetector k
 
@SmokeDetector why
 
9:33 AM
@suraj Body - Position 244-255: weight loss
 
@SmokeDetector f
 
:40347464 Body - Position 244-255: weight loss
 
@SmokeDetector f
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, bad keyword in username, blacklisted website in body, link at end of body, +1 more: Geneticore Boost: how can it work? by Geneticore Boost on askubuntu.com
 
@SmokeDetector k
 
9:38 AM
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +2 more: VTL Male Enhancement there's really a non-surgical by nataliemtrout214 on meta.SE
 
@SmokeDetector k
 
teward/Lunar Eclipse received failover signal.
 
... prepare for double/triple Smokey ...
 
!!/location
 
@Henders teward/Solar Flare
Restart: API quota is 19999.
[ SmokeDetector | MS ] Few unique characters in answer, no whitespace in answer, repeating characters in answer: How can I upload a new file on click of image button by user8719244 on stackoverflow.com
 
9:46 AM
@SmokeDetector k
 
[ SmokeDetector | MS ] Few unique characters in answer, no whitespace in answer, repeating characters in answer: How can I upload a new file on click of image button by user8719244 on stackoverflow.com
 
... told ya ...
 
!!/location
 
@Henders teward/Lunar Eclipse
@Henders teward/Solar Flare
 
9:47 AM
!!/standby teward/Lunar
 
sigh
 
!!/alive
 
@suraj You doubt me?
 
well today...yes
 
9:48 AM
!!/tea
 
@TetsuyaYamamoto brews a cup of lemon tea for @TetsuyaYamamoto
 
!!.
oops
!!/tea suraj
 
@Henders brews a cup of earl grey tea for @Henders
 
Hmm, I thought you could specify the tea's recipient
 
@Henders I need that for coffee too.
 
9:50 AM
Feature request!
 
!!/coffee Tetsuya
 
@tripleee brews coffee for @tripleee
 
well, it's the thought that matters
@SmokeDetector naa
 
@tripleee Recorded answer as an NAA in metasmoke.
[ SmokeDetector | MS ] Bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, blacklisted website in body, +3 more: getmenshealth.com/alpha-muscle-complex/ by fhqsrty on askubuntu.com
 
@SmokeDetector k
 
9:53 AM
sd k
 
[ SmokeDetector | MS ] Bad keyword with a link in answer: update values incrementally in mysql by e4nar on stackoverflow.com
 
@SmokeDetector n
 
naa- by Tetsuya Yamamoto
 
@SmokeDetector naa-
 
[ SmokeDetector | MS ] Bad keyword in title, blacklisted website in body, link at end of body, pattern-matching website in body, potentially bad keyword in body, +1 more: Pyramid And Reverse Pyramid Workout For Strength And Muscle Building by janetrown on askubuntu.com
[ SmokeDetector | MS ] Bad NS for domain in body, blacklisted website in body, link at end of body, pattern-matching website in body, repeated URL at end of long post: the genuine pack. The trial pack by Hi said on drupal.SE
 
9:58 AM
sd 2k
 

« first day (1417 days earlier)      last day (2404 days later) »