« first day (2760 days earlier)      last day (2303 days later) » 
00:00 - 20:0020:00 - 00:00

12:32 AM
[ SmokeDetector | MS ] Offensive answer detected: How does B2Cl4 have two perpendicular c2' axes? by Scary Terry on chemistry.SE
[ SmokeDetector | MS ] Bad keyword in title: Why does Overwatch freeze my computer by Parthiv C. on gaming.SE
1:12 AM
I noticed...@SmokeDetector doesn't have a chat bio on this chat server
2:09 AM
Another night of fog here...the only reason you can see the tower is because they lit it in orange today
I spy with my sleepy morning eyes...
designed for multiple mansions, get approved for building a shed
Fight against condescending rich people, fight bureaucrats! Building more houses for immigrants and those who needs accommodation!
@TelautonomousKitty What do you mean?
2:23 AM
meaning trying to find ways to build bigger house for higher rent
you should build a bigger drone, or chicken farm :|
I have bought 3 baby chooks, hopefully I get at least 1 hen
after I finishing sending some emails I will work on the autonomous (toy) car
99% of the chance the building project will start this year, although paper work can take months if you want better design ... also some delay due to neighbour's illegal excavation situation ...
2 hours later…
4:19 AM
@FTP just curious, and certainly you're entitled not to answer this, but: is Meta Math.SE a bit sour recently?
have you considered changing your name to scp?
it's like FTP but more secure
@TelautonomousKitty never heard of it before (other than different SCP)... good idea, but I need 20+ days :/
Or you could change your name to Gopher next
4:39 AM
Meta math was sour, bitter, salty, etc since 2010.
I don't remember it ever being a happy place.
The only winning move is not to care.
Although, the moderatorship of Daniel Fischer and quid helped to cool things down.
5:29 AM
[ SmokeDetector | MS ] Bad keyword in answer: Second conditional in future by Aarya on ell.SE
6:01 AM
6:18 AM
I wonder whether sour, bitter people attract each other
6:34 AM
6:47 AM
@Feeds Harry Potter is Bart Simpson's secret identity.
[ SmokeDetector | MS ] Offensive answer detected, blacklisted user: Do these pictures depict the same man after two separate crises? by izraul on skeptics.SE
7:34 AM
[ SmokeDetector | MS ] Pattern-matching website in answer: how can I recover my forgotten gmail password in android? by James Luther on superuser.com
@MarcGravell Can I use this message of yours as an answer for this bug report? If that is the reason for such behaviour..
[ SmokeDetector | MS ] Email in answer: To generate private key by ZubyFrank on bitcoin.SE
8:25 AM
[ SmokeDetector | MS ] Pattern-matching website in answer: Is there a way to copy with verification or just verify copied data by Rurikov on superuser.com
@SmokeDetector tpu-
@TimPost Bingo, that was the one. Thanks, Tim.
9:05 AM
> We apologize for any inconvenience, but an unexpected error occurred while you were browsing our site. It’s not you, it’s us. This is our fault. Detailed information about this error has automatically been recorded and we have been notified.
Not even an error page is rendered for me, this url:stackoverflow.com/users/8928024/zf007
that text is just in the body.
Q: Systematic "This is our fault." on some links

CœurIt's unusual for me. I go to Performance questions about Generating Html Files from database. I tap on harmen's username. I'm directed to https://stackoverflow.com/error?aspxerrorpath=/users/176603/harmen with: We apologize for any inconvenience, but an unexpected error occurred while you w...

yeah, I'm seeing the same
Stack Overflow not wanting to load, comments to working
it said it was down for maintenance for a while, then that error, and then buggy runs
[ SmokeDetector | MS ] Pattern-matching website in body: Why logo is important for any business? by mobile app developer on softwareengineering.SE
9:33 AM
It's still very sluggish for me. Edits and comments are also slow to send.
@Shog9 since you took the time to delete his question, can you also please reset this user's name? Also, he posted several comments ranting about how bad MSE is, in totally unrelated posts. Dunno if this justifies suspension, your call. Thanks!
@the4kman slow to send?? What do you mean?
@ShadowWizard haven't you seen the stuff going on on SO?
Comments are slow to send, some times doesn't load, the site some times gives "This is our fault" and the page doesn't load
@RougetheBat nope. SO works fine for me. What's going on?
TL;DR: someone pushed a broken build
Probably some DNS issue.
9:35 AM
@RougetheBat no, this would affect everyone.
Q: Systematic "This is our fault." on some links

CœurIt's unusual for me. I go to Performance questions about Generating Html Files from database. I tap on harmen's username. I'm directed to https://stackoverflow.com/error?aspxerrorpath=/users/176603/harmen with: We apologize for any inconvenience, but an unexpected error occurred while you w...

It is
well, at least a large majority
and globally from the looks of things
no it's not.
it isn't link specific
So it's not bug in the code.
9:37 AM
See my comment
I just tried loading the main site and it failed
try again and it works
try something else and there's a chance that breaks
No argue something is borked, but looks like it's not code, but DNS/hardware/etc
@RougetheBat so maybe cache is borked
cache and cookies purged from the system, still doesn't work
doesn't work on mobile, desktop, this wifi, mobile data
@RougetheBat server cache, not local cache. You can't control it.
Only SE devs can.
On SE everything is cached, with REDIS.
9:39 AM
still though, it wouldn't explain why some connection attempts fail
speaking of the devil... the CV dialog doesn't load
"An error has occurred, please try again"
and refreshing the page doesn't load it
As I predicted. Off-topic questions on SO Meta rise after the doom. meta.stackoverflow.com/q/363736/3151675
The Doom?
@JourneymanGeek Stack Overflow is borked, question asking doesn't work as it should so people ask their questions on meta because it partially works
AAAND [status-repro] on SU too
@RougetheBat ...and worst of all, it doesn't even display a polyglot when it's broken.
9:44 AM
(I know 500 sites never displayed one, but shhh)
And yesterday it was facebook, today it's SO. Facebook and SO are more similar than you'd think :P
BTW I'll have my first remote Toptal interview, wish me luck. Any good advice?
@the4kman Just panic and you'll be fine ...
Let's just wake Jon Skeet. He'll fix it
@rene It's like a mini 1929.
10:06 AM
sysadmins-blames- ..... nobody left to blame
no, there's always someone to blame
users blame devs, devs blame sysadmins, sysadmins blame users
users blame .... everything
10:18 AM
I can barely restrain myself from writing an answer containing "Like this." and nothing else
When in doubt, I always blame Shadow
@Ano I'd love to have a job where I create customized wheels of blame all day.
@the4kman My request to bring back the 404 polyglot is getting close to +200
@RougetheBat ah. meh? ;p
10:35 AM
@Ano and yet the "won't change back" power level is over 9000.
@Derpy No, it's not yet
no, it is even better : it is
10:48 AM
Still waiting for Shadow to find the last Chaos Emerald
Shadow has left the chaos emeralds behind. It's all about the elements of harmony now! :P
@RougetheBat No, they are the elements of harmony. I use them to rid the curse at the end of the original 1991 game.
We are tracking down the stability issues on Stack Overflow, please bear with us s we figure out what's stalling out. I have removed the currently angry servers from traffic pools while we dig.
@Ano he is too busy trying to understand what is the canonical level progression in "Shadow the Hedgehog". Or asking himself how he could actually decide to collaborate with GUN. Or any of its other 28758903046675 character inconsistencies :P
@SNAFU looks like the next April Fool's idea: Angry Server: Traffic Pools Overflow.
@HTTP Rovio, the ones that managed to have malwertising inside their own games... I haven't touched any of their apps with a 6-8 meter pole since.
@Ano chaos emeralds are not the elements. Chaos emeralds sound right up Discord's alley though :D
@Derpy Interesting. Can you link an article about this?
@Rouge In case you didn't understand what I'm getting at, Shadow just needs one more Chaos Emerald before he can use Chaos Control on any question
@SNAFU wouldn't it be ironic if StackOverflow's problems is caused by a StackOverflowException? XD
@Ano in english? :D
10:59 AM
@RougetheBat Nomen est omen
@RougetheBat Shadow Wizard needs the gold badge for before he can close any MSE question as a duplicate (that he hasn't closed before or edited the tags of)
Nomen ate Omen?! I didn't know Nomen was a cannibal!
@Ano oh, cool
@Rouge The reason I made that statement a bit earlier is because I spotted a blatant dupe that was tagged , so I couldn't anyone here
@RougetheBat StackOverflow at renewing cache. Seems plausible.
cache the cache.
then cache the cache cache.
11:02 AM
Burn the cache into the pits from whence it came!!
@the4kman there are multiple report of the fake Angry Birds download with bundled trojan viruses, but I can't find anything about the malvertising case. What I can tell you is that it happened to a friend of mine. I personally checked that the app was the original one, I also saw the bad advertisement being showed to the user with my eyes. My friend was auto-magically subscribed to one of that 5$/weeks "news/meteo/spam" message services after viewing the ads.
deja vu about ForgedSource...
@Derpy Wow, interesting, to say the least.
I don't know if he "clicked" on the ads (or to be more precise: if the app decided to think that he clicked due to input lag and/or disingenuous behavior), all I know is that he lost 5€, immediately unsubscribed and luckily hadn't any other issues. That said, he also contacted customer support and never got a reply.
As a final notice... I somehow "despise" Gameloft and their inflated prices but I have to admit that every ads I ever saw in their games was about others games their produced (with one single exception - some mayor telephone company ads). Angry Birds on the opposite from what I saw was filled with random ads from providers that probably were found laying near the trash cans outside Rovio headquarters.
(Disclaimer: this happened on the Android app about 1-2 years ago. May have been an isolated case and things may be different now. I obviously never bothered checking again. Now my friend plays Pokémon Shuffle and he is pretty happy with Nintendo's ads free policy...)
11:20 AM
I never had issues with angry birds. Other than getting bored by it
You don't get angry with Angry Bird, but you do with Flappy Bird.
@JourneymanGeek I think that ads in Angry Birds are geo-targeted. So, if you live in a big state probably the ads are better because they have more honest providers to chose from. If you are in a small state with fever paying providers choices... be ready to get some bad spam.
singapore ;p
so kinda biggish?
A country that is smaller than a city >_<
11:24 AM
@Derpy I don't think they have a lack of providers. Ad companies should have stricter policies.
should have...
^ this one. "Should" is the magic word. Then you have countries where you have to manually request that your phone company disables "added value services" on your line so that ads can't try to auto subscribe you.
11:48 AM
@Derpy come to think of it, I think that's my country...
or worse, you can't request them not to bug you.... but they're free to auto-subscribe mine
once again, that little clip from Adventure Time with Jake explaining how laws came into existence seems very fitting.
12:10 PM
the user that posted this now deleted post on SO now has reposted the same question here
^ any 10k+ users wanting to step in? I can't do much more than flagging as unclear again
@Derpy Flagged it for the mods.
@the4kman custom flag you mean?
yep, that could be one option
@Derpy I also left a comment on that post
12:30 PM
@Derpy yup
And deleted once again. Waiting for Repost Zone - Act 3.
12:44 PM
[ SmokeDetector | MS ] Link at end of answer, username similar to website in answer: Simple search result browser for stackoverflow in kotlin by djlamberto on stackapps.com
1:07 PM
I am pretty divided on posting a reply to a question on SO. On one side, I think I may have a fitting response. On the other....
> please post more code i am begginer for development(please post html and controllers code also)
there's a perfectly good reply to that...
its called a downvote ;p
@Derpy Not deleted, I think you're clicking on the wrong link. (I made the same mistake; that's the removed message above.)
@JourneymanGeek And don't forget a close vote / RC flag
@Ano not enough rep ;p
@JourneymanGeek "RC flag"
and I don't really feel like flagging
1:18 PM
@JourneymanGeek RC flagging is not the same thing as mod-flagging. It just pushes it into CV queue. Same as a close vote, but without an actual vote. Mods are not pinged.
"Recommend closure flag" = "RC flag"
@Ano I do believe I've made my feelings on "flagging" or "voting by proxy" pretty clear.
After aboooout 8 years on the network, I vaguely think I know the appropriate actions to take.
@JourneymanGeek But it's not a vote. If it's already in the queue, all it does is score you a helpful flag if someone else votes to close it later.
It doesn't do anything else in that case
@Ano by which I mean, I really don't need to be told how to metamoderate
@JourneymanGeek Alright
see, I made a flippant comment, rather than a specific piece of advice...
1:21 PM
@JourneymanGeek Meaning?
Well, that said comment about downvotes do not reflect an endorsement of downvoting, or an actual downvote
IMO you should always vote or flag on the post's own merits, even though someone raises it up directly to you.
1:38 PM
Gordon Freeman on Final Fantasy 15. Ha ha ha.
1:52 PM
[ SmokeDetector | MS ] Link at end of answer: MetaMask, what is it and how to use it by PabloB0351 on ethereum.SE
Might as well write a novel about Princess peach fell in love with Bowser and the two live ever happily after ...
@TelautonomousKitty I believe there are many already...
@TelautonomousKitty To be fair, she tried to leave both of them on the moon.
2:02 PM
I mean the whole peach & bowser situation is a lot like beauty and beast
and I repeat, she was the one that tried to leave Bowser and Mario to live happily together on the moon.
Why not give Luigi a chance?
I need the hard disk immediately. and gati is checking my patience
more than 2 days without any activity update
@HTTP because he is more commonly paired with Daisy.
2:21 PM
[ SmokeDetector | MS ] Manually reported answer: Tkinter on Ubuntu 14.04 seems not to work by angelina subbs on askubuntu.com
2:38 PM
oh, nice. Once again, due to some Huawei related news, some discussion started in the office about smarthpones and antivirus bans. A co-worker suggested me to check wikipedia page about Mr. McAfee..
Nice, never knew about that story before.
I was still alive. as if we could expect a different outcome...
That is a triumph?
@Derpy maaaaan
THat's quite a tale
@JourneymanGeek I don't want to restart the old discussion, but it is fun to think that I never eared about that before but I keep reading that Eugene was in espionage school almost every week.
I mean, the company received requests to disassociate from him and that story didn't go viral too?
@Derpy erm, it kinda did?
I probably read it on /.
2:59 PM
All I know is that no one ever suggested me to avoid McAfee. Or at least, they never give this reason.
intel owns it now...
not sure that makes it any more or less trustworthy tho
BTW, I had also found out there are now declassified investigations papers about Huawey alleged espionage ties dating back to 2011. And yep, as far as they say, they give no real proof other than "they don't want to collaborate on our investigations".
And 7 year after we have yet nothing concrete. They really want to make us mad with paranoia.
Well, it seems that this may be a good year to switch to Linux.
Justin Trudeau was insulted heavily by us
**by India
And that was a clear warning to him that don't support terrorism in India
And that was a clear warning to him that don't support terrorism in India
@OptimusPrime Out of curiosity, why the duplicate message?
so that the warning is clearer?
When I switched to this tab, an error is shown with the message saying the message timed out and along with retry cancel button. I didn't noticed that it is already posted
may be a bug
3:24 PM
@OptimusPrime Probably the message got sent, but you briefly lost your connection before you could receive the "roger" signal from the server, so the client thought it wasn't sent properly. When you clicked "retry", it sent again.
Previously "TechLord"
I think this is karma striking back for the "We don't need a way to report users profile spam"?
Seen now. When I send a message and keep my system in idle, the last message is automatically appended once more, showing it is timed out, and 2 links to retry and cancel
probably the scripts waits for a sort of "response" and when you are idle that response is lost?
So the system thinks that the server never replied and shows you the timeout message.
In Kerala, yesterday few people killed a tribal person who is mentally not normal
another MLP question on SciFi, another reply, another little move towards the tag badge.
3:39 PM
[ SmokeDetector | MS ] Manually reported answer: How to remove [Deleted Video\] from Liked Videos list? by Cock on webapps.SE
3:53 PM
> Animal Crossing: Pocket Camp will host a Mario themed event.
Obviously, it will start on Mar, 10.
Also, Mari0
@HTTP and for a shocking revelation, please check the list of games they created. You can see it on the left side of the site.
Hey @bluefeet it looks like @Taryn plagiarized your profileimage ... :'(
@rene how dare they
disrespectful times ...
4:09 PM
searched 'how to report user'
@SmokeDetector to rollback or to... forget it... flagged
4:55 PM
the cat is back!
@rene shameful, I should report them
Yeah, or knock on their door.
5:07 PM
There are several Meta sites, the link I sent you is for electronic stack exchange. You will be better off to quit the Meta Stack Exchange and ask all of your questions on the proper Meta. I found this out the hard way. You are not likely to get much help here and your questions will get down-voted. Go to the right meta and your question will likely get answer right away because someone there most likely encountered the same problem. Just use the link in my answer, you will be glad you did. — Meta Stack Exchange Sucks 1 hour ago
Answer just got deleted, glad I inlined that comment here in time
@Ano You will get downvotes everywhere when you ask stupid questions but they post there because there is no rep associated on per site meta.
I noticed that many users have trouble keeping up, and end up feeling shut out because we hold all questions to the same quality standards, while other forums tend to cut a lot of slack to newer users. Sometimes I feel like I'm one of the few to actually pay attention to how new users feel when we take some sort of action.
While I don't disagree with the downvoting of their posts and our enforcement of our standards, I do share some feelings with this particular user.
let's not beat around the bush here. This particular user didn't struggle to keep up. They posted like 5 different variations on the same stupid question and got rude with everyone who bothered to respond.
@Shog9 What was the "stupid" question?
Ranting about downvotes? Perhaps he would have ranted less if we had just linked to this:
Q: How do I participate in Meta and not die trying?

rlb.usaMeta doesn't like me; I can't seem to keep my points. How can I post better and be well-received?

They are a reasonable user, and not a troll, @Shog9:
Q: Feature suggestion: How many minutes from the 40m are left to wait?

TechLordFor new users, these 40 minutes are the 40 minutes of death. That is an exaggerated nickname, but I adapted it from "BSOD". 40 minutes of hell could also be their name. It would be useful, if the 40-minute-error also indicated the number of remaining minutes. I hope my feature suggestion to be ...

@Ano I don't know if you haven't known already, but that user was suspended before. Oh, and some of their aggresive questions on MSE have been deleted.
5:21 PM
@Ano My first question here on meta was heavily downvoted and I tried modifying it even when I got downvotes. It was about an incident I faced on a site I participate. Users thought it was mine and downvoted. But I didn't rant about downvotes like this user did. After I came to know how MSE works, I modified accordingly and I love this site more than the site I first joined and provides more rep.
@HTTP I flagged that user's posts with requests to suspend them. Many of their posts are linked in my flag history.
@Ano there are more than two options.
@HTTP Even if I was an uninvolved user who didn't load up their profile when they were suspended, the answer to the second question says they were suspended at the time.
@Shog9 What more options are there?
@Ano a user who became so frustrated over something they couldn't let go of that they lost all perspective and turned all of their efforts toward futile attempts at laying blame elsewhere?
"Troll" is not a synonym for "someone who posts something unpleasant"
there exist an endless variety of motivations; trolling for responses is just one
@Shog9 The subsequent downvotes of those rants and their suspension were the right actions to take, I'm not disagreeing with that. But it also created a positive feedback loop with regards to their actions on MSE.
5:26 PM
@Ano in this case, yes
Most people break out of that loop on their own. Some need external assistance.
Perhaps if we would have linked to that first question on their first downvoted post, that positive feedback loop could have been averted.
that is unlikely
Go look at /questions/ask on meta. Pay close attention to the right-hand sidebar
This is similar to why I always leave a canned comment on off-topic posts, in addition to downvoting, RC flagging as off-topic, and posting a message here
One user posted their SO question on Meta, and the subsequent (correct) moderation response led them to posting this strange Ripoff Report complaint.
@Ano just fyi when you leave comments under posts that already got enough downvotes, the victim may target you
Perhaps if we had also taken care to advise them that they are posting on the wrong site, this could have been averted.
@OptimusPrime How?
@OptimusPrime I'm very careful in the info I disclose online. I don't have any website links or ways to contact me in my profile.
5:31 PM
He can target your internet points.
@OptimusPrime We have a script for that.
One downvote a day, Keep the reversal script away
@Shog9 Doesn't the reversal script also consider overall votes, and not just daily votes?
@Shog9 The serial voting reversal script.
5:33 PM
what about it?
I think votes in past 24 hour @Ano
1 min ago, by Ano
@Shog9 Doesn't the reversal script also consider overall votes, and not just daily votes?
I don't know what you're asking, but... I'm not going to reveal the specifics of the voting reversal scripts anyway, so it doesn't matter.
@Shog9 But don't we reveal some details of some scripts? Such as the fact that questions more than 30 days old when deleted don't count towards Q-bans?
@OptimusPrime Not even a day, take a gap of one hour.
5:36 PM
@Ano that's not even precisely true, but even if it was we don't exactly define what "count" means
@Shog9 Curious question, part joke: Is there a backup plan in case a disgruntled exiting employee leaks the post ban algorithm (anonymously)? If so, what is it? Change it to something else that has already been drafted?
@Ano unlike that, this one can be misused.
@Ano lol, that made my day
@Ano how would you know it was accurate if they did?
@OptimusPrime Ah, yes, I understand exactly what you mean. I had a question, but I'm withholding it as it could end up disclosing it by implication.
5:38 PM
Or, to put it another way... If I posted full details on the q-ban on meta right now, how would you verify I wasn't just pulling your leg?
@Shog9 Mods have access to some data that lets them know how close a user is to a ban, and whether or not they are banned. I'm sure that mods could go and check those info with the algorithm and see if it matches up.
@HTTP We already have so many about that, like Why does Stack Overflow have so many negative critics? [closed]
Found a vulnerability in Facebook. When using a specific payload, the server took ~50 Seconds to respond
...and publicize their results
@Ano so, you'd trust someone else to verify it
5:39 PM
@Shog9 You people are excellent in pulling legs [need citation]
@Shog9 No, I'd trust many other people to verify it. We have a lot of mods.
Mods don't have access to it
@Ano if that were sufficient to verify the details, then a sufficiently-determined moderator could reverse-engineer it now
I mean internally. They can only use the outcome
So either,
1. Moderators don't have sufficient access to determine / verify a ban algorithm, or...
2. ...there are no sufficiently-determined moderators
5:41 PM
@Shog9 A mod could create a whole lot of sock puppets, to see who gets banned and who doesn't. A similar thing was done for comment automatic deletion triggers: some users posted a bunch of test comments and had others flag them to determine the exact triggers for deleting comments with less than three flags.
@Ano again, what is stopping anyone from doing that now? You wouldn't even have to be a moderator...
@Shog9 They'd have to violate the moderator agreement, because they'd be disclosing non-public info, right? But if it gets leaked, it's already public, so there's nothing for them to leak.
@Ano that may be an irrelevant distinction in the scenario you outlined...
But more importantly... I feel like we went over this a few weeks back: you're attributing a lot more skill and motivation to folks who get q-banned than typically exists.
@Shog9 So if I successfully reverse engineer the ban algorithm as a non-mod (not bound by any agreement), and post the (correct) ban algorithm online, what will happen to me
5:43 PM
If you're interested in learning more about q-bans, you don't need a rogue employee or bored mod; you could create an account and try to get banned.
@Shog9 Yeah, to be fair I'm from a time when there were no warnings or rate-limits; one would just jump straight to a ban.
@Ano you'd probably get suspended for creating a big ol' pile of banned accounts. But, that'd probably happen even if you didn't post the details.
@Shog9 My security bug report (delegated by you) was fixed by @Adam on the same day. Out of curiosity, did SO consider it as security issue?
@OptimusPrime is this a roundabout way of asking if you get to be on the hall of fame?
@Shog9 Say that the only link between the banned accounts and me is my post with the findings, because I used a VPN to sever any known links.
5:45 PM
@Shog9 yeah. I asked that directly yesterday and didn't get any response :-(
'cause that's up to Adam.
...or, our Yet-To-Be-Hired Security Officer. Honestly not sure how we're planning on doing that going forward. But traditionally, it was up to the dev who handled the request.
@OptimusPrime I didn't see anything about that
@Ano so why should anyone believe you?
didn't pinged you. When I asked yesterday, both of you are not here. So I don't want to disturb or distract you from your work
that was very considerate, thank you.
Although, not especially productive
5:48 PM
My personal take is that it was a minor issue. the same day fix had more to do with the fact that I had some time and it was an easy one than with the severity :)
Yet-To-Be-Hired Security officer in 6-8 days
@OptimusPrime or, it could be you!
@HTTP nah. not me.
@AdamLear FMPOV, it's both minor and major issue. Minor because it can't be exploited from your side. It can be exploited only via a third party. Major because if it's exploited, it will prevent the victim forever. Since the attacker got the password, changing the email will lock the victim
Oh, the forgot password on that site? nvm, dunno what i'm talking about
So, funny thing about that... the way our account recovery works, it's not necessarily sufficient to change the email.
5:54 PM
@AdamLear If the attacker changed the password, the victim can still request an account recovery and set a new password. But if the attacker changed the password, the victim can't do anything
@OptimusPrime There's the side bit that if a provider did this they'd pretty much guarantee they weren't a trusted provider much longer.
@OptimusPrime Do you mean "if the attacker change the email"?
The link is also valid for a one-time use within a certain amount of time. The window of opportunity to exploit this is there, but the odds are pretty small since you have to control the network.
(and if you're worried about 3rd-party spoofing, game's pretty much over already)
And no, changing the contact email on the account is not sufficient to prevent account recovery. Ironically, right now it actually straight up doesn't work - we don't look at the verified email in the slightest, and one of the locations we store email in that we do check isn't editable anymore.
@Shog9 If someone do an authentication bypass or got the credentials of SO on that site by bruteforcing or found an IDOR, then it can be exploited without the help of third party
@AdamLear agree with that. 30 minute lifespan
6:01 PM
@Shog9 (Not representative of me, just wanted to make the example flow) I would disclose the exact details of my tests and the user IDs of the accounts I used to do the tests, and I'd be willing to sacrifice my own account over the disclosure.
But no point talking about a joke.
@OptimusPrime hmm
@Ano so...
- there is a non-trivial chance that someone has already done this (but not posted the details publicly as such)
@Shog9 That question was more of a joke, really.
- there is limited value in actually knowing the details of the q-ban. We don't publish them because we don't particularly want folks to "work to the ban" if you know what I mean
@Shog9 I understood that the whole time, so that's why I described the question as a joke.
If you're banned, there are only a few ways to get out of the ban. Knowing that question #38298321832 contributed more than question #389291818981 is of little value, but a major distraction.
Worst-case, you get folks on the very edge thinking "oh, I'll just undelete this question, problem solved" - but they're still on the very edge, now just to the other side. Next question likely gets them banned again.
6:05 PM
@Shog9 But it is useful to know to evade the ban, and not trigger it
there are waaaay easier ways to do that
@Shog9 Can you please handle the recent flag I cast? I didn't want to make that issue public.
in Charcoal HQ on The Stack Exchange Network Chat, 1 min ago, by HyperNeutrino
@ArtOfCode Maybe Shog9 got bored of being so All Powerful and All Knowing so he split his form into two, both of which only knew half of the original and only had half as much power, but then they both became All Powerful and All Knowing :P /s
This happens on a third party plugin of GA
6:38 PM
[ SmokeDetector | MS ] Link at end of answer, potentially bad keyword in answer: Guest posting vs commenting for building backlinks by احسن سیال on webmasters.SE
7:13 PM
@Shog9 Is my behavior just being tested? Why was my most recent flag just "declined - No."?
Seems self explanatory
The answer seems obvious, but I'm curious what the question is
@Shog9 Meaning? I asked for a detailed explanation in that flag; are they declining the request, or refusing to provide the explanation?
@Shog9 I don't just want my rep back. My request was purely based on principle. In fact, a while ago on SO, I once passionately argued that one of my questions should be undeleted, even though doing so would reduce my account rep by over 100 points (mostly from a bounty).
7:57 PM
@Ano like I commented, with less than 1000, there's 0 chance Mr. Friend will reconsider the decision.
@ShadowWizard Commented where?
With 1000 upvotes, there's a very very very small chance he'll reconsider, and much lower chance the decision will be reverted. Bottom line: I don't think there's anything we can do to affect major decisions like this.
(aka making SO/SE more boring.)
00:00 - 20:0020:00 - 00:00

« first day (2760 days earlier)      last day (2303 days later) »