« first day (1533 days earlier)      last day (2272 days later) » 

12:01 AM
@ThomasWard definitely is, look at the profile tab - their GH account is linked
 
indeed
 
well that's... useful? to know
shrug
 
12:51 AM
Definitely looks like a student told to contribute to the community or something
 
what grade do you reckon you get for managing to get yourself banned from your chosen community
 
@ArtOfCode I'd give a 110
 
If it's a "leave three comments on issues" thing, probably pretty good
 
@ArtOfCode an astonishing 11/10
 
@Undo bah
 
12:54 AM
@Undo surely noone would go back to where they were banned from trolling contributing and do it again for any legitimate reason
 
No useful information in git logs for his repos
Was hoping to find an .edu address to complain to
 
looks like a co-student doing a group project together
 
Btw @ArtOfCode regarding the sticker survey thing: I have a few things to think about regarding that, when's the latest that I should submit my response?
 
holy mackerel
 
12:59 AM
@Undo my eyes
 
Definitely looks like a school project, based on those branch names
 
@angussidney undefined
soon as possible, but it'll be up for a few more days at least
response numbers so far are... not promising
 
Btw you forgot one of the most important things: what country you are in
That will help with working out shipping rates
 
@ArtOfCode Looks like the same person, using their personal email address?
 
@angussidney nah, this is just a preliminary - we'll get those when we collect addresses
 
@Undo dunno, not at a PC so it's not easy to look at details
 
These are definitely assignment codes of some kind, but I can't find them on Google
No ownership comments on the source files
(kinda surprising)
 
@Catija 14 responses so far, from both here and SOBotics
 
I haven't responded yet. :P
 
5 Charcoal, 5 both, 4 SOBotics
 
1:05 AM
Is the pinned chat messages the only "advertisement"?
 
would like stickers from: 4 Charcoal, 6 both, 4 SOBotics
 
There's a bunch of molecular biology (?) files on the desktop in the screenshots on github.com/zixuan75/java_project
 
@Undo avatar too
 
yup
 
@Catija yep, one here, one in SOBotics
likewise avatar on SE account
 
1:07 AM
Their name is very common. Don't really know how to track it down
Several PhD folks with that name in molecular bio, but this doesn't seem like the work of a rogue PhD holder
 
I think the near-weekend timing isn't helping, so I'm guessing you'll get some more response early in the week.
 
@Undo there's a hotmail address in the logs if you look more carefully
 
yep, I saw it
Doesn't seem very useful, though
 
I'd say the best bet is the train station in the wallpaper
maybe it's local
 
There's also a reference to I-485
interstate in North Carolina
 
1:12 AM
definitely not that
 
I bet the wallpaper is off one of those pretty wallpaper sites. I have some of those on my machine
 
half a mo
oh wait
that has 206 stars
maybe not
 
wouldn't surprise me if they gave them a school-owned repo to fork
 
very unlikely
this looks like some sort of nmap
 
bah
 
1:15 AM
... what are you doing?
 
attempting to find out where our troll goes to college so we can yell at the professors
@Undo SE profile does say they're US
 
Or at least politely inform them that their assignments are not accomplishing the desired purpose.
@ArtOfCode Gonna stay away from that because mod powers
 
@ArtOfCode That's almost certainly a VPN
assuming you did a checkuser
 
@quartata ...free-form user-input text, not anything more fancy
 
@ArtOfCode oh
you mean what they actually put on their profile
 
1:17 AM
like the field in your profile that lets you enter location
yeah
public stuff
 
well I doubt that a little since all of the people starring their stuff have China on their GH
 
well aware they could be lying; also aware they probably don't have a reason to
 
Got a link to the profile? Might be able to xref code they've pasted there?
 
earned a network suspension somehow
 
yeah Thomas said he knows but can't say here
probably should move to TL
 
1:19 AM
no.
 
mod powers
 
we aren't going to use mod powers to unravel this
 
not good to mix with non-mod stuff
anyway, we're playing this game on hard mode :P
 
'cause it's not a mod issue. It's a "would be nice to let their profs know this isn't working" issue
 
1:20 AM
@quartata Funny
Ha Ha
 
and kinda a challenge
 
@quartata wat
 
wonder if spiderfoot could get anything
too much effort tho
> Done: In Progress
this is surreal
really makes you think
what if we're all done inside
or maybe we're all in progress
 
@quartata like fully cooked?
 
medium well
 
1:27 AM
one of these git objects is huge
been waiting 2 years to clone this
must be that zip file or maybe the photos
 
java_project?
 
yeah
 
I didn't notice anything abnormally large
 
cor look at the third column on the project
"detector"
is that us?
all of his comments were on MS though
"they merging"
 
1:28 AM
we merging zero things
 
guys what if this is an ARG
also there are 51 PRs
 
@Undo but... but... we could have the same code TWICE, clearly that's twice as good
 
twice as fast. more parallel
 
@quartata a what
 
so I'm just going to do a recursive grep with that big ass email regex rather than switching to each branch
easy mode
oh wait I forgot about git log --reflog
hrm
there are few commits
but many many branches
like
half of those PRs are just pointing to the same ref lol
anyways nothing there
 
1:47 AM
@ArtOfCode usually used for games, but occasionally books and movies/shows, to build hype about a new product or update
Often involves lots of monitoring of changed files, solving codes, putting clues together etc
Actually that's a really bad way to describe it
Have a look at the Portal 2 ARG as an example: half-life.wikia.com/wiki/Portal_ARG
 
2:06 AM
not all ARGs are promotional
 
2:21 AM
@ArtOfCode for ~2 years haha
has there ever been a user "permanently suspended" (network wide, or just a community)
 
not as such
in general "go away" suspensions are for 10 years
 
2:44 AM
@ArtOfCode How can I get the autoflag weight from /posts?
 
[ SmokeDetector | MS ] Pattern-matching website in body: converse pl 76 shoes cheapest prices online by micaen289 on drupal.SE
tpu- by John Dvorak
 
oh hey, I haven't seen these in a while
 
tpu- by DraconicPenguin
 
!!/blacklist-website beautifullife\.info
 
@bwDraco Blacklisted beautifullife\.info
CI on b447691 succeeded. Message contains 'autopull', pulling...
Restart: API quota is 16772.
 
!!/blacklist-username Brook Davis
 
@bwDraco Blacklisted Brook Davis
 
3:39 AM
Going to be a bit aggressive here, but don't see any legitimate users by that name.
 
CI on 80e72c3 succeeded. Message contains 'autopull', pulling...
Restart: API quota is 16761.
 
The spam is cross-site, though, despite being associated accounts.
 
Those usernames are never reused
No point
 
It would be nice to have an AI that could spot patterns in spammers' usernames
(other than user\d+, I mean)
 
They're all normal people names
What on earth
@ArtOfCode ImageMagick?
What on Earth is this dude doing
 
3:59 AM
spamming us to get programming help?
I believe he's been banned today?
 
I don't know if we even can stop him
Yep, we can.
that'll work
 
lol
WTF.
 
It feels kinda cruel... but he's wasting our time. Either he's intentionally malicious or the language barrier is so strong that we can't overcome it.
Hanlon's razor would say language barrier combined with technical inexperience, which makes sense
 
I don't think it is. The same user name has been banned on other networks
It's a troll. I'm still crawling down the rabbit hole though
 
yup. read through that
 
ugh, SO queue creeping back up to 1500. We should handle those once in a while :P
 
sigh I do. Then I refresh and see Magisch woke up and added more than I handled.
shakes fist
 
lol
I still think there's opportunity for a better flag UI. Just don't know how to do it
 
!!/test-u zixuan75
 
4:19 AM
> Would not be caught as a username.
 
Should we preemptively blacklist this username?
 
eh
 
can't hurt
 
indifferent. Probably wouldn't hurt.
 
Any numerical suffixes other than 75?
 
 
They've also been given a 1 year network suspension on SE
 
!!/blacklist-user zixuan[0-9][0-9]
 
@bwDraco No such command 'blacklist-user'.
 
@Undo There is. I really need to no through an annotate a few pages with ideas. The problem is lack of motivation. I know it won't get done in a timely manner and there isn't an API route to get a lot of this information either.
 
!!/blacklist-username zixuan[0-9][0-9]
 
4:23 AM
@bwDraco Blacklisted zixuan[0-9][0-9]
 
@Andy Userscripts can scrape a lot of content pretty easily
They're just a general pain to develop
 
I found records of them causing problems on Mozilla's developer pages and WikiZero too
Yeah, and the whole "Javascript isn't one of my skill sets"
 
We could at least start some kind of collaboration on design.
 
CI on ef29837 succeeded. Message contains 'autopull', pulling...
[ SmokeDetector ] SmokeDetector started at [rev ef29837 (SmokeDetector: Auto blacklist of zixuan[0-9][0-9] by bwDraco --autopull)](//github.com/Charcoal-SE/SmokeDetector/commit/ef29837) (running on bwDraco/Linode)
Restart: API quota is 16554.
 
We have to be careful here; "Zixuan" is a fairly common Chinese name.
Hence the narrowly tailored regex.
 
4:25 AM
@Undo I have a few wishlist items.
 
I'd love to see some way to bring up multiple linked posts side-by-side with one-click common actions
Like for duplicate answers - "comment on oldest; delete rest"
 
 
> This user account has been locked across all Wikimedia projects.
 
Or rollback wars - show me the revisions inline with the flag. Easy way to eliminate two flags
@bwDraco wow
Seems like most rollback war flags are OPs playing with the rollback button. Like stackoverflow.com/posts/48458895/revisions
 
4:27 AM
Whoa. That's equivalent to a network-wide suspension here. Only a Wikimedia steward (an elected, cross-site community mod of sorts) can do that
 
I'd like comment deletion pages to 1.) Keep the buttons in the same location so that when I delete a bunch, the removal of a div doesn't move the buttons just slightly so I have to constantly move the mouse and 2.) Allow me to select multiple comments at once and perform the same action on all of them. Either dismiss a batch or delete a batch all in one go
 
@Andy I started a comment flag review queue a while back. It was almost useful.
 
Yeah, I tried it for a while. It didn't survive the FF57 or FF58 update (whichever broke everything) and I didn't try to reinstall it
 
Still works in Safari
 
I don't suppose you've tried the new version of the Flag filter?
 
4:29 AM
new version?
 
@bwDraco Way more extreme than that. Stewards are akin to CMs.
A ban is closer to a network wide suspension
 
Ya.
 
It's not the same thing but it's fun.
It also plays nice with SEMTI, which was updated.
 
broken for me, somehow
 
What other scripts do you have?
 
4:34 AM
It shows up, but everything shows as a resolved flag
Might be PR time
 
@bwDraco It looks like this lock thing is relatively new (it wasn't around when I was on wikipedia). It's still on an account basis so actually it's not as extreme as a ban
 
Works fine for me... There was a mod script that didn't play nice with it, though...
But Shog fixed Art's script and animuson fixed his... so I know those two work just fine.
 
@quartata No, Wikimedia-wide blocks have been around for a while.
 
block log says he made a bunch of nonsense articles and AfC basically
 
They're there to stop users who are acting maliciously across WMF projects.
 
4:37 AM
Comment flags work
 
Yes but it's still fundamentally a block not a ban. It's associated with an account and not a person
 
Oh, it didn't work with This one, I think: github.com/mattlunn/so-mod/blob/master/moderator.user.js But I haven't used all of the ones on Bhargav's list.
 
[ SmokeDetector | MS ] URL in title, blacklisted website in body, blacklisted website in title, pattern-matching website in body, pattern-matching website in title, +1 more: healthboosterclub.com/vera-slim/ by emilie larsen on astronomy.SE
tpu- by Undo
[ SmokeDetector | MS ] URL in title, bad keyword in body, blacklisted website in body, blacklisted website in title, pattern-matching website in body, +2 more: healthboosterclub.com/vera-slim/ by emilie larsen on webapps.SE
tpu- by Catija
 
> 15:24, 22 January 2018 Ad Orientem (talk | contribs) changed block settings for Zixuan75 (talk | contribs) with an expiration time of indefinite (account creation blocked, email disabled, cannot edit own talk page) (Clearly not here to contribute to the encyclopedia)
 
[ SmokeDetector | MS ] URL in title, bad keyword in body, blacklisted website in body, blacklisted website in title, pattern-matching website in body, +2 more: healthboosterclub.com/vera-slim/ by emilie larsen on joomla.SE
tpu- by DraconicPenguin
[ SmokeDetector | MS ] URL in title, blacklisted website in body, blacklisted website in title, pattern-matching website in body, pattern-matching website in title, +1 more: healthboosterclub.com/vera-slim/ by emilie larsen on graphicdesign.SE
 
4:44 AM
Not what that means
 
[ SmokeDetector | MS ] URL in title, bad keyword in body, blacklisted website in body, blacklisted website in title, pattern-matching website in body, +2 more: healthboosterclub.com/vera-slim/ by emilie larsen on dsp.SE
tpu- by DraconicPenguin on http://healthboosterclub.com/vera-slim/ [MS]
 
It means they can't send emails to users
 
tpu- by DraconicPenguin
 
Hmm...
 
Only notable one is "cannot edit talk page" which is usually only done after the first block if they're doing troll unblock requests. Everything else is standard
 
4:45 AM
[ SmokeDetector | MS ] URL in title, bad keyword in body, blacklisted website in title, pattern-matching website in title: healthboosterclub.com/vera-slim/ by emilie larsen on drupal.SE
tpu- by DraconicPenguin
[ SmokeDetector | MS ] URL in title, bad keyword in body, blacklisted website in body, blacklisted website in title, pattern-matching website in body, +2 more: healthboosterclub.com/vera-slim/ by emilie larsen on apple.SE
tpu- by DraconicPenguin
 
also the notice on the user page is uncommon for non-sockpuppeteers or long term abuse. maybe he had some garbage there
 
@quartata Took the initiative to blank and redirect the user's talk page to the user page.
True vandals and trolls (as distinguished from users who dabble in minor vandalism) usually suffer from chronic alienation and real or perceived powerlessness and seek recognition and infamy by interrupting and frustrating the Wikipedia project and community. Such users experience exceptional attention as empowerment, reward, and encouragement. This is particularly true for those prolific vandals who have been immortalized on Wikipedia pages, meticulously catalogued by category pages, targeted by dedicated templates, and thereby become a notable part of wiki culture. == Encouragement == T...
Saw folks do this many years ago. Standard procedure for persistent trolls.
 
[ SmokeDetector | MS ] URL in title, bad keyword in body, blacklisted website in body, blacklisted website in title, pattern-matching website in body, +2 more: healthboosterclub.com/vera-slim/ by emilielarsen on physics.SE
tpu- by DraconicPenguin
 
Yes
 
@quartata You've seen this before?
 
4:48 AM
[ SmokeDetector | MS ] URL-only title, bad keyword in body, blacklisted website in body, blacklisted website in title, link at end of body, +3 more: healthboosterclub.com/vera-slim/ by emilielarsen on askubuntu.com
 
I don't usually deal with this stuff on Wikipedia any more, but I've dealt with problem users in the past. We can't block them as mere mortals, but we can issue warnings and report them to admins.
 
tpu- by DraconicPenguin
[ SmokeDetector | MS ] URL in title, blacklisted website in body, blacklisted website in title, pattern-matching website in body, pattern-matching website in title, +1 more: healthboosterclub.com/vera-slim/ by emilielarsen on stackapps.com
tpu- by DraconicPenguin
 
!!/blacklist-username emilie larsen
 
@bwDraco Blacklisted emilie larsen
 
!!/blacklist-username emilie\W?larsen
headdesk
 
4:50 AM
@bwDraco Blacklisted emilie\W?larsen
 
Can someone revert the first one?
I totally missed it :\
 
CI on 9a83d80 succeeded. Message contains 'autopull', pulling...
Restart: API quota is 16406.
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title: testo ultra It is ideal to maximize the manufacture by user274085 on apple.SE
tpu- by DraconicPenguin
 
5:16 AM
[ SmokeDetector | MS ] Offensive answer detected: Bitcoin Source Code genesisOutputScript by c137 hexar on bitcoin.SE
tpu- by A J
 
Hmm. Looks like that troll made a sockpuppet that they haven't investigated yet
not sure if mediawiki has a network SPI nowadays but if it has a Wikipedia account we could take it to WP:SPI
(hint hint @bwDraco since I don't remember my decade old password and don't want to mount a hard drive to get it)
 
Bleh. I'm not in a mood to hunt down socks right now.
 
it's zixuan56
already bragged about it on the mediawiki talk page, no CU needed
 
I have not opened an SPI in ages.
(yes, I've done SPIs before, but it's been years)
 
I'm kinda curious where else this person has accounts.
What they say borders on surreal humor
 
5:32 AM
[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +5 more: www.nutritionfit.org/trembolex-ultra/ by Topas1954 on askubuntu.com
tpu- by DraconicPenguin
[ SmokeDetector | MS ] Bad keyword in body, bad pattern in URL body, blacklisted website in body, link at end of body, repeated URL at end of long post: Women face skin could be very by arie nall85 on workplace.SE
tpu- by DraconicPenguin
 
Private, but avatar matches.
 
@AJ Long Path Tool is known spam, and generally does not use a link (to evade detection).
 
tpu- by DraconicPenguin
 
A J
@bwDraco Oh!
There are two posts now.
 
[ SmokeDetector | MS ] URL-only title, bad keyword in body, bad keyword in title, link at end of body: www.espanaaptitud.es/votofel-force/ by user788316 on askubuntu.com
tpu- by John Dvorak
[ SmokeDetector | MS ] Offensive answer detected: Can I get a shiny charm in Pokémon ORAS? by Billiam on gaming.SE
tpu- by A J
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body: Thus, it helps a human to pump mistaken their blood sweat and tear mass. by Forling19 00 on superuser.com (@iBug)
tpu- by A J
@SonictheAnonymousHedgehog: It seems this is your first time sending feedback to SmokeDetector. Make sure you've read the guidance on your privileges, the available commands, and what feedback to use in different situations.
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body, +1 more: which ones we appreciate the best by Feck boy on drupal.SE
tpu by Jamal
tpu- by John Dvorak
[ SmokeDetector | MS ] Blacklisted website in body, link at end of body, pattern-matching website in body, repeated URL at end of long post: Lumoderm After the end, flush off the bits by yixofu on askubuntu.com
 
6:56 AM
ArtOfCode/EC2 received failover signal.
Restart: API quota is 15894.
Restart: API quota is 19999.
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, pattern-matching website in body, repeated URL at end of long post: NO shelter extent from the manufacturer by Forling19 00 on graphicdesign.SE
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, blacklisted website in body, pattern-matching website in body, repeated URL at end of long post: NO shelter extent from the manufacturer by Forling19 00 on graphicdesign.SE
[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +6 more: luxmuscle.com/trembolex-ultra/ by Buse1938 on askubuntu.com
[ SmokeDetector | MS ] URL-only title, bad NS for domain in body, bad NS for domain in title, bad keyword in body, bad keyword in title, +6 more: luxmuscle.com/trembolex-ultra/ by Buse1938 on askubuntu.com
tpu by PeterJ
tpu by PeterJ
tpu by PeterJ
tpu by PeterJ
tpu by PeterJ
tpu by PeterJ
 
Mmm, review on MS isn't removing them just duplicating things
Are there two instances running at once or something?
!!/alive
 
@PeterJ You doubt me?
@PeterJ You doubt me?
 
!!/location
 
@Andy bwDraco/Linode
@Andy ArtOfCode/EC2
tpu by Jamal
tpu by Jamal
Conflicting feedback across revisions: current, #1
Conflicting feedback across revisions: current, #1
Conflicting feedback across revisions: current, #1
Conflicting feedback across revisions: current, #1
 
7:12 AM
!!/standby bwdr
 
bwDraco/Linode is switching to standby
 
7:22 AM
[ SmokeDetector | MS ] Link at end of answer: error message "qemu-system-i386.exe has stopped working" by Swapnil Bhagat on stackoverflow.com (@micsthepick)
fp by Jamal
 
7:45 AM
tpu- by John Dvorak
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +1 more: Velaire Bluesupplement skin care cream.? by David J. Deming on askubuntu.com
[ SmokeDetector | MS ] Bad NS for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +1 more: love Viagra, this capacity is doubtless by Swas boy on drupal.SE
tpu- by John Dvorak
 
@SmokeDetector Didn't ping me. It doesn't recognize that my username is different on chat.MSE than on Chat.SE
 

« first day (1533 days earlier)      last day (2272 days later) »