« first day (1748 days earlier)      last day (2071 days later) » 

6:00 AM
what's worse, we're matching them even when the rule is not designed for title/body/username, what quartata said
 
another odd domain #notspam-provisional #drugs-dubious metasmoke.erwaysoftware.com/domains/25063
 
@tripleee notspam? sounds strange
@tripleee iirc, we were "trusting that the regex module does well on caching".
 
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body: trevulandsvdereewgweg by Gere Fre on meta.SE
tpu- by Glorfindel
 
how to watch stuff with spaces in the middle?
seen a bunch of "Living Foodz" spam on cooking
 
6:06 AM
[ SmokeDetector | MS ] Manually reported answer: Can I use only urad dal to make dosa? by naresh patel on cooking.SE
[ SmokeDetector | MS ] Bad keyword in body, body starts with title and ends in url, link at end of body: Green Coffee Grano Price in india by jassaz on meta.SE
tpu- by Glorfindel
 
@Federico Usuall just \W*
!!/watch Living\W*Foodz
 
@iBug Added Living\W*Foodz to watchlist
 
@iBug That is silly, as tripleee said. Is there some reason not to compile them once per read of the file and reuse them? I must admit that I had assumed that the listing of detections in findspam.py was building a list of descriptors, which was then iterated over for each post.
 
k, thanks :)
 
@Makyen meh, no one touched that. I assume it was memory concerns?
 
6:08 AM
CI on fd35a8a succeeded. Message contains 'autopull', pulling...
[ SmokeDetector ] SmokeDetector started at rev fd35a8a (SmokeDetector: Auto watch of Living\W*Foodz by iBug --autopull) (running on teward/Solar Flare)
Restart: API quota is 11502.
tp by Nisse Engström on trevulandsvdereewgweg [MS]
 
@Federico If what you're wanting to match is an actual space, then just put the actual space in the regex as a space (i.e. a ` `). If you are wanting to match other things, in addition to a space, then you can use one of the character classes, etc.
 
I suck at regexes, that's why I was asking :D
 
tp by Nisse Engström
 
@Federico always feel free to ask :)
 
[ SmokeDetector ] SmokeDetector started at rev c0c5a4b (iBug: Merge branch iBug:smart-match --autopull) (running on teward/Solar Flare)
Restart: API quota is 11465.
[ SmokeDetector | MS ] Mostly non-latin answer: Reliable Push Notifications with Android by Tony on stackoverflow.com
 
6:16 AM
expecting slightly but probably unnoticeable lower CPU usage
@SmokeDetector n
 
!!/test living foodz
 
> Potentially bad keyword in body, potentially bad keyword in title, potentially bad keyword in username
----------
Title - Position 1-12: living foodz
Body - Position 1-12: living foodz
Username - Position 1-12: living foodz
 
@Magisch got more living foodz? Just report 'em here
 
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, bad pattern in url body, blacklisted website in body, body starts with title and ends in url, +2 more: Enduraflex reviews by user401005 on meta.SE
 
nah sonic was just trying to watch it again and I wanted to see if it was already watched
 
6:19 AM
tpu- by paper1111
 
@iBug If it was compiling all the regexes for each post, then changing to only doing compiling them once should be a significant improvement.
 
I may want to take a peek at memory usage first
 
[ SmokeDetector | MS ] Link at end of answer: Swift Open Facebook Profile by FacebookUID by Michal on stackoverflow.com
 
currectly it's, wait, 120 MB for ws.py
And an extra 100 MB for nocrash.py
 
What do you need to keep it under?
 
6:26 AM
@Makyen I'm unsure, but I recall it was some kind of issue.
 
[ SmokeDetector | MS ] Bad keyword in body, pattern-matching website in body, potentially bad ns for domain in body, potentially bad keyword in body: The power and strength exercises by motzapdw on drupal.SE
tpu- by Shree
 
Sounds like there is a significant amount of overhead for just a Python process which pulls in the libraries that are being used.
 
but, if running environment permits, eating a bit more RAM is OK
we were finding a balance between memory and CPU
ah, there was another issue that's currently unsure: Python's stock re module had a bug where reusing compiled objects for matching was very slow, so we were compiling it every time
we're on a 3rd-party regex PyPI package now, not sure if there's the same bug
 
@iBug same way huffingtonpost.com or facebook.com are not spam domains per se
we might still blacklist it if it's predominantly used by a spammer or troll but the domain is not one which was registered by a spammer to further their interests
the "-provisional" tries to say "not sure about this one"
 
6:35 AM
"drugs dubious" but not "drugs provisional"?
 
I have no information on the specific implementations for Python, but normally the point of "compiling" the regex is to do some of the heavy processing in advance of when you want to use it. This is normally intended to allow you to reuse a compiled regex at significantly less computing cost vs. compiling the regex each time.
 
@Makyen cc @tripleee Wanna give it a try to compile all regexes only once?
 
@iBug I believe this was always on regex (for as long back as I've been here at least) ... I vaguely recall somebody attempted to investigate whether it has the same bug but I'm unsure of the outcome
@iBug yeah, the tags are definitely not consistent
@iBug that's been on my todo list for a long time, so yeah, please do if you have the time
 
One dirty way is to check if rule['regex'] is a string, if yes then compile and overwrite that key with the compiled object. The CPU overhead for an if statement should be too small to notice.
 
6:41 AM
I'm going to add a watch for huffingtonpost, if we don't get a lot of FPs it should be blacklisted until this particular spammer gives up on it
!!/watch huffingtonpost\.com
 
@tripleee Added huffingtonpost\.com to watchlist
 
@tripleee I'll try running on my own server for some time and watch CPU and RAM usage.
 
Does this look scammy? stackoverflow.com/a/52109800
 
That could work, OTOH, it shouldn't be that hard to just compile all of them prior to moving on to using them.
 
6:42 AM
[ SmokeDetector | MS ] Manually reported answer: List of Computer Science words by Aahna Jain on stackoverflow.com
 
@paper1111 imho, yes
 
Restart: API quota is 11275.
tpu- by Shree
[ SmokeDetector | MS ] Manually reported answer: Send request to Google input tools in python by Md. Karim on stackoverflow.com
 
@tripleee 1,143 result on SE for huffingtonpost.com in URLs, with an additional 31 not in URLs.
 
@Makyen later when "reload blacklist without reload" is implemented, compiling everything beforehand could be a pain for code consistency
 
6:44 AM
@Makyen that's what I would do
 
tpu- by Makyen
tp by Federico
 
@iBug I'm not really seeing that. You have to rebuild those anyway.
 
@Makyen first 150 almost excludively on Skeptics, we could perhaps use that as a guidance if we want to go ahead
I'm thinking this will be a temporary thing anyway
!!/watch itronixsolutions\.com
 
@tripleee Added itronixsolutions\.com to watchlist
Restart: API quota is 11236.
CI on 2c486c9 succeeded. Message contains 'autopull', pulling...
[ SmokeDetector ] SmokeDetector started at rev 2c486c9 (tripleee: Singular intronixsolution\.com too --autopull) (running on teward/Solar Flare)
Restart: API quota is 11222.
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, pattern-matching website in body, potentially bad ns for domain in body, potentially bad keyword in body: Healthy dietweight-reduction plan by eqdw on rpg.SE
tpu- by paper1111
[ SmokeDetector | MS ] Bad keyword in body, pattern-matching website in body, potentially bad ns for domain in body, potentially bad keyword in body: wounded wound is much more by Cronic84 on rpg.SE
 
@SmokeDetector tpu-
 
6:58 AM
tpu- by tripleee
 
!!/blacklist-keyword huffingtonpost.com/\S+/healthy-school-lunches
 
@tripleee Blacklisted huffingtonpost.com/\S+/healthy-school-lunches
 
!!/blacklist-website healthykidssmartkids\.com
 
@tripleee Blacklisted healthykidssmartkids\.com
CI on 83965f0 succeeded. Message contains 'autopull', pulling...
 
@tripleee smart pattern. What about an extra \S+ at the end?
 
7:00 AM
Restart: API quota is 11142.
 
@iBug more like maybe \w* to guard against an unexpected word boundary ... but no samples to indicate that this would be necessary
 
oh, no need, the next character is almost always one of -?#, so word boundary catches it
 
@tripleee For this watch, how about huffingtonpost\.com/[a-z]\w* instead? That will catch all of the TP we've seen and reduce the FP from existing SE posts by ~50%.
 
tpu- by Makyen
 
@Makyen I think with this blacklist we might just unwatch but I'll leave it in for a while still
since this particular spammer has a history of mutating their messages periodically
 
7:16 AM
[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +1 more: supplementsreview.ca/gleam-and-glow-cream/ by Gleamandglow3 on meta.SE
tpu- by Shree
[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted username, blacklisted website in body, +6 more: Trevulan : fitnesstalkzone.com/trevulan/ by micherdsan on security.SE
tpu- by Glorfindel
[ SmokeDetector | MS ] Chinese character in title, bad keyword in body, bad keyword in title, messaging number in body, messaging number in title, +2 more: 办理美国文凭,圣迭戈加利福尼亚大学毕业证成绩单(QQ¥微信956290760)UCSD毕业证学历认证使馆认证University of California, San Diego by fsdafsadd03 on travel.SE
tpu- by Glorfindel
API quota rolled over with 10898 requests remaining. Current quota: 19999.
stackoverflow: 47
math: 29
superuser: 16
askubuntu: 11
physics: 10
english: 8
serverfault: 6
islam: 5
security: 5
drupal: 4
apple: 4
puzzling: 4
dba: 4
unix: 4
sharepoint: 3
gaming: 3
graphicdesign: 3
skeptics: 3
electronics: 3
salesforce: 3
gis: 3
ethereum: 2
bitcoin: 2
wordpress: 2
dsp: 2
android: 2
ell: 2
travel: 2
arduino: 2
mathematica: 2
ru.stackoverflow: 2
meta: 2
crypto: 2
academia: 2
codegolf: 2
joomla: 1
datascience: 1
diy: 1
hardwarerecs: 1
codereview: 1
raspberrypi: 1
buddhism: 1
chemistry: 1
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, body starts with title and ends in url, link following arrow in body, pattern-matching product name in body, +2 more: Keto Primal Pills Confronting the nauseating issue of weight isn't just by clyburn on graphicdesign.SE
tpu- by Glorfindel
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, body starts with title and ends in url, link at end of body, pattern-matching website in body: Individuals as it could not have by plaginjabea on askubuntu.com
tpu- by Glorfindel
[ SmokeDetector | MS ] Bad keyword in body: Blast fat and stop fat plan by papparkararay on bricks.SE
tpu- by Glorfindel
 
7:40 AM
!!/blacklist-website ketorapidtone\.com
 
@tripleee Blacklisted ketorapidtone\.com
[ SmokeDetector | MS ] Link at end of body: low price Accessories For Products by momu243 on askubuntu.com
tpu- by Glorfindel
 
!!/watch chinawpcdeckingfloor\.com
 
@Glorfindel Added chinawpcdeckingfloor\.com to watchlist
Restart: API quota is 19900.
Restart: API quota is 19888.
[ SmokeDetector | MS ] Url in title, bad keyword in body, potentially bad keyword in body: www.selfgrowth.com/articles/healthy_school_lunches_yes_we_can by user48089 on rpg.SE
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, pattern-matching website in body, potentially bad ns for domain in body, potentially bad keyword in body: injuries to the skin mucous membranes by metnic89 on rpg.SE
 
@SmokeDetector k
 
!!/blacklist-keyword selfgrowth\.com/\S+/healthy_school_lunches
 
7:45 AM
@tripleee Blacklisted selfgrowth\.com/\S+/healthy_school_lunches
CI on 374da22 succeeded. Message contains 'autopull', pulling...
Restart: API quota is 19853.
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching website in body, potentially bad keyword in body: Praltrix South Africa Review by jonnirayy on askubuntu.com
tpu- by tripleee
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, potentially bad ns for domain in body, repeated url at end of long post: The Dirty Truth on best health by valariemoore on astronomy.SE
tpu- by Glorfindel
[ SmokeDetector | MS ] Few unique characters in body, mostly punctuation marks in title, title has only one unique char: ------------------------------------------------------------------ ✏️ by bleepgloop on academia.SE
 
@SmokeDetector v
 
8:02 AM
naa- by Tetsuya Yamamoto
[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +3 more: Today Offer:-hbmbzone.com/praltrix-espana/ by hotyfony on drupal.SE
tpu- by Tetsuya Yamamoto
fp- by Tetsuya Yamamoto
[ SmokeDetector | MS ] Bad keyword with email in answer, potentially bad keyword in answer: Confirm the Illuminati by Mason Jacob on codegolf.SE
tpu- by Glorfindel
 
8:20 AM
!!/watch [a-z_]*(?:1_)?617[\W_]*663[\W_]*8926[a-z_]
 
@Makyen Added [a-z_]*(?:1_*)?617[\W_]*663[\W_]*8926[a-z_]* to watchlist
Restart: API quota is 19534.
[ SmokeDetector | MS ] Link at end of body: Where i will get the best laptop in bangalore? by Kisan on superuser.com
 
@SmokeDetector Still Alive [MS]
 
tpu- by Shree
 
some great damn shit, the boot partition exploded out of nothing!
 
!!/watch supercomputerslaptops\.com
 
8:23 AM
@Makyen Added supercomputerslaptops\.com to watchlist
CI on af6253d succeeded. Message contains 'autopull', pulling...
Restart: API quota is 19512.
 
@tripleee I think teward self-hosts solar flare and his other servers
 
[ SmokeDetector | MS ] Url-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +3 more: multihealthtips.com/folexin-hair-loss by HuldaMcGowan on webmasters.SE
tpu- by Glorfindel
 
@angussidney oh, then what happened?
 
I may be wrong about that, but I'm pretty sure that it isn't on EC2
As for the error itself.... I don't know
 
8:29 AM
[ SmokeDetector | MS ] Pattern-matching website in body: Redirection from example.com/ to www.example.com/ for all inner pages too by Abhinav on stackoverflow.com
fp- by Glorfindel
[ SmokeDetector | MS ] Few unique characters in body, mostly dots in body, mostly dots in title: ...............................................................................‌​............../////////////////// ✏️ by J.Doe on stackoverflow.com
tp- by suraj
 
Hullo, looks like my instance died or lost connection when MS went down
 
@angussidney not the only one, all died
 
[ SmokeDetector | MS ] Potentially bad keyword in body: How do I report spam/scam attempts in Hangouts? ✏️ by Anne Connell on webapps.SE
 
P.S. I started a backup Smokey that helped through the metaspocalypse
 
fp- by Glorfindel
 
8:38 AM
Nice
Do you have actual creds yet?
If not, we should probably give you some
 
@angussidney Undo and Art approved a few hours after the catastrophe was resolved
 
Awesome
 
AWS is quite stable, and I'm really looking forward to buying a reserved t3.micro
 
I love AWS, it just does everything I want. Have your tried the lambda and API gateway stuff? It's fab.
 
[ SmokeDetector | MS ] Chinese character in title, bad keyword in body, bad keyword in title, messaging number in body, messaging number in title, +2 more: 办国外文凭毕业证文凭样本Q/学历证书『微、信308057815』制作国外大学毕业证文凭样本Q/ by kpu123 on travel.SE
tpu- by Glorfindel
 
8:46 AM
@SmokeDetector k
 
Only reason I use digital ocean for mine is because I got a voucher equivalent to 10 months free, and I've already run out my AWS free tier
 
@Henders nope, dunno what I can do with those
@angussidney reserved t3 instances very worth it
 
[ SmokeDetector | MS ] Pattern-matching website in answer, potentially bad ns for domain in answer: DRAM compatibility between two early 2011 MacBook Pro by Gvucyon on apple.SE
tpu- by Tetsuya Yamamoto
 
!!/watch-force escortglasgow\.info
 
@iBug That pattern looks like it's already caught by Pattern-matching website in body and Pattern-matching website in answer; append -force if you really want to do that.
@iBug Added escortglasgow\.info to watchlist
Restart: API quota is 19253.
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body: Are You Looking For Magento Development? by user71545 on magento.SE
tpu- by Glorfindel
[ SmokeDetector | MS ] Pattern-matching website in body: Why is printing taking too long on my Xerox printer? by Printer Help Number on superuser.com
 
9:02 AM
@SmokeDetector f
 
fp- by Tetsuya Yamamoto
 
!!/watch printerhelpnumbers\.co\.uk
 
@Makyen Added printerhelpnumbers\.co\.uk to watchlist
Restart: API quota is 19111.
 
!!/watch printer\W?help(?:\W?number)?
 
@tripleee Added printer\W?help(?:\W?number)? to watchlist
Restart: API quota is 19081.
[ SmokeDetector ] SmokeDetector started at [rev d4eaa08 (iBug: number[s] autopull)](//github.com/Charcoal-SE/SmokeDetector/commit/d4eaa08) (running on teward/Solar Flare)
Restart: API quota is 19037.
[ SmokeDetector | MS ] Potentially bad keyword in answer: How do I run an already existing asp.net mvc application om my local server by arvind on stackoverflow.com
tpu- by tripleee
[ SmokeDetector | MS ] Bad keyword in link text in answer: Generate playing cards in browser by monika bisht on stackoverflow.com
 
9:15 AM
!!/watch spycardssort\.com
 
tpu- by Tetsuya Yamamoto
 
@tripleee AFAIK that's a reputable blog.
 
@TetsuyaYamamoto Added spycardssort\.com to watchlist
 
@Glorfindel yeah, I guess, and the user looks legit
 
that, too
 
9:15 AM
CI on 3fbd711 succeeded. Message contains 'autopull', pulling...
Restart: API quota is 19008.
[ SmokeDetector | MS ] Blacklisted website in body, potentially bad keyword in body, potentially bad keyword in title: Why You Choose GS-JJ Custom Patches by patches on mathoverflow.net (@FrenzyLi)
tpu- by Tetsuya Yamamoto
 
!!/blacklist-keyword custom\W?made\W?patch(?:es)?
 
@tripleee Blacklisted custom\W?made\W?patch(?:es)?
CI on b7aacc8 succeeded. Message contains 'autopull', pulling...
Restart: API quota is 18934.
[ SmokeDetector | MS ] Bad ns for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +2 more: Nutragenics Forskolin chrissy metz weight loss by delorisalawhon on askubuntu.com
tpu- by Tetsuya Yamamoto
[ SmokeDetector | MS ] Url in title, bad ns for domain in body, bad ns for domain in title, bad keyword in body, bad keyword in title, +4 more: supplementsbucket.com/total-tone/ by Brenda Raines on workplace.SE
tpu- by Tetsuya Yamamoto
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, body starts with title and ends in url, pattern-matching product name in body, pattern-matching website in body, +2 more: Perfect Keto Max Additionally, by Goldar London on graphicdesign.SE
tpu- by Tetsuya Yamamoto
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, pattern-matching website in body, potentially bad ns for domain in body, potentially bad keyword in body: Moment in which the lactic acid generated by morknsdw on drupal.SE
tpu- by Glorfindel
[ SmokeDetector | MS ] Bad keyword in body, body starts with title and ends in url, link following arrow in body, pattern-matching product name in body, pattern-matching website in body, +2 more: Rapid Slim The supplement is made out of Beta hydroxybutyrate and exogenous by falkaeem on graphicdesign.SE
tpu- by Tetsuya Yamamoto
[ SmokeDetector | MS ] Link at end of body, potentially bad keyword in body: Which is the Smart clinic for teleConsultation in india..? by user126977 on superuser.com
tpu- by Tetsuya Yamamoto
 
9:46 AM
!!/watch artemhealth\.com
 
@TetsuyaYamamoto That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.
 
they are at 2/2 now, previous spam 7 days ago, with this low weight I'd be tempted to blacklist already
 
[ SmokeDetector | MS ] Potentially bad keyword in answer: Can I directly download audio using youtube-dl? by Charlotte Wu on askubuntu.com
 
!!/watch tele\Wconsultation\Wservices?
 
@tripleee Added tele\W*consultation\W*services? to watchlist
tpu- by tripleee
CI on d75b91f succeeded. Message contains 'autopull', pulling...
Restart: API quota is 18721.
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, pattern-matching website in body, +2 more: It will provide you with greater muscle by nadw on rpg.SE
tpu- by Tetsuya Yamamoto
 
10:00 AM
Didn't notice a huge increase in RAM after compiling & reusing all regexes
 
I don't think you would, if anything it should reduce the memory footprint is my guess
 
looking good
that's probably not the only place but it should already cover 90%
 
"the only place"?
oh, there are some other regexes outside findspam
yep, the majority is covered, as most regexes are executed against posts
 
[ SmokeDetector | MS ] Url in title, blacklisted website in body, blacklisted website in title, potentially bad ns for domain in body, potentially bad ns for domain in title, +1 more: curlycrayy.com/vital-progenix/ by ghters46 on rpg.SE
tpu- by paper1111
 
10:13 AM
seriously, "why does a video recording app request permission to record video" ...?
 
@tripleee it actually is "I've granted it, but it still says 'needed'"
 
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, body starts with title and ends in url, link at end of body, link following arrow in body, +5 more: Perfect Keto Max by jhmyughjfg on askubuntu.com
tpu- by Shree
[ SmokeDetector | MS ] Url in title, bad keyword in body, potentially bad keyword in body: www.selfgrowth.com/articles/healthy_school_lunches_yes_we_can by user48093 on rpg.SE
tpu- by ByteCommander
 
One strange thing, the maximum CPU credits for t2.micro seems to have increased from 72 to 144, but still there's only 1 vCPU and 6/hr
 
fp- by tripleee
fp- by Glorfindel
[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, link at end of body, pattern-matching website in body, potentially bad ns for domain in body: Do Not Lose Sleep Over Weight by khonken on superuser.com
tpu- by tripleee
tpu- by tripleee
 
10:34 AM
!!/watch Onlyoneyoulove
 
@tripleee Added Onlyoneyoulove to watchlist
[ SmokeDetector ] SmokeDetector started at rev 578f460 (SmokeDetector: Auto watch of Onlyoneyoulove by tripleee --autopull) (running on teward/Solar Flare)
Restart: API quota is 18246.
[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +2 more: supplementforus.com/lumaslim/ by subkatilrow on graphicdesign.SE
tpu- by Shree
 
10:53 AM
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted username, blacklisted website in body, blacklisted website in title, +7 more: www.visit4supplements.com/praltrix/ by jaimeldsan on askubuntu.com
tpu- by Glorfindel
 

« first day (1748 days earlier)      last day (2071 days later) »