« first day (2232 days earlier)      last day (1097 days later) » 

12:10 AM
Wow! A handy panic inducer! days.to/until/1-november
12:44 AM
@bjb568 you feeling better?
1:12 AM
1 hour later…
2:18 AM
That's... a bit extreme @bwDraco to call this a security issue. It's not a security issue, and unless someone has a very small data allowance and a connection with very fast speeds...
We were discussing it on Root Access...

Potential abuse of chat oneboxing to cause users to consume excessive bandwidth

1 hour ago, 45 minutes total – 133 messages, 6 users, 2 stars

Bookmarked 19 secs ago by bwDraco

in Root Access on The Stack Exchange Network Chat, 51 mins ago, by Bob
It's "This could happen. If it happens, it's bad. Please fix it."
in Root Access on The Stack Exchange Network Chat, 1 hour ago, by Journeyman Geek
DDOS is a bit of an extreme way to describe it
Sure, it's hypothetical, but it's a potential attack vector nonetheless.
My feelings ^^.
in Root Access on The Stack Exchange Network Chat, 1 hour ago, by Bob
@bwDraco Consider a fairly typical monthly data cap is something like... 1 GB. Maybe 2-3 on the higher end.
2:24 AM
How fast does a typical mobile internet connection download stuff?
Can be well over 100 Mbps under certain conditions.
I'm lucky if I can get a 1 GB file to download in 10 minutes on mobile data...
At least 10 Mbps is realistic in locations with good LTE connectivity.
So that's 13.65 minutes to download. And if something is taking 13 minutes to load you're not going to be like "what's going on here"?
Furthermore, since users see little more than a spinner while an image is loading, they might just think their connection is slow.
2:25 AM
It's annoying, sure, but I don't see that there's a "security" implication.
It doesn't share any PII, it doesn't deny the user the possibility of loading the webpage.
It just is... annoying.
The problem is the potential for exhaustion of the data allowance.
How is that a security problem though?
in Root Access on The Stack Exchange Network Chat, 59 mins ago, by Bob
I've seen charges of 4c/MB, 5c/MB
It's denying service to users.
No...? A user can still load the webpage.
A theoretical attack is still an attack.
2:32 AM
But it doesn't "deny" service. It just might make a user run through their data cap. That's like saying that poorly designed ads that download 1 GB/hour are running a DoS attack because they can run through the data cap. While true, that's not a DoS. It's just an effect of running through the data cap.
That's... still not a DoS.
All I'm saying is that this is not a security issue. It's annoying, but calling it a DoS is way overblowing it.
in Root Access on The Stack Exchange Network Chat, 1 hour ago, by Journeyman Geek
but I think the term DOS is inappropriate here. I suggest "PITA" AKA "My Donkey has agony internally"
To each his own.
Ask on Sec.SE. I'm nearly positive that they'll agree with this.
The big issue is that this happens without user interaction.
Hence, it's an attack.
Sooo... any website that loads large images without user interaction is running an attack?
Not the website itself. It's an exploitable weakness in the chat platform.
The person hosting and linking to the image is the attacker.
2:43 AM
Don't you think that's a bit extreme? I mean, if someone deliberately did that, sure, but the odds of that happening... most people are probably just either misguided or didn't realize or didn't care, not malicious.
Not a security professional by any means, but I did take a hacking course a couple of years ago and I do have a bit of that security mindset.
[ SmokeDetector | MS ] Blacklisted website in answer: Magento 2 : Infinite Ajax scroll for listing page by Harry on magento.stackexchange.com
sd why
@bwDraco [:5249907] Body - Position 333-348: bsscommerce.com, Position 415-430: bsscommerce.com
Known spam, but don't have an account there.
sd - trueu-
(trying to hide it)
Legit activity on the user profile. What gives?
Q: Set up Magento 2 sites on the same server with another Magento 1 site

HarryI already have a Magento 1 site but now I want to set up an additional Magento 2 site on the same server with that Magento 1 site. Is it possible to do this thing?

3:01 AM
@bwDraco User removed from blacklist (42028 on magento.stackexchange.com).
Innocent until proven guilty.
I'm not sure about that one. It seems like almost all they post is links to bsscommerce. Just leave it to regulars of the site I guess.
2 hours later…
4:50 AM
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body: To Have Basic Strategies For Choosing The Best Skin Care Products by user57392 on workplace.stackexchange.com
5:08 AM
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, pattern-matching website in body: Simply exactly what are the energetic components of ExoSlim? by exoslimreview on superuser.com
5:29 AM
[ SmokeDetector | MS ] Bad keyword in title, link at end of body, pattern-matching website in body: Increase Brain Power - Some Power Building Strategies That Is Helpful by SummerRae on gaming.stackexchange.com
[ SmokeDetector | MS ] Link at end of body, link following arrow in body, pattern-matching website in body: Nuts And Brain Functions? by blackmonhio on askubuntu.com (@kos)
5:48 AM
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching website in body: Muscle Building Tips - Get Bigger Muscles Easily by chrslderesn on security.stackexchange.com
sd 5k
6:01 AM
[ SmokeDetector | MS ] Bad keyword in body, link at end of body: you can likewise utilize it to have a sound and adjusted body. by kllunbxz on superuser.com
6:18 AM
sd k
6:46 AM
[ SmokeDetector | MS ] Phone number detected in answer: Looking for an annotated vectorial map of the world by Malte on gis.stackexchange.com
7:06 AM
[ SmokeDetector | MS ] Bad keyword in body, link at end of body: This supplement is not present to treat any wellbeing infections by floranapol on workplace.stackexchange.com
7:32 AM
@bwDraco Good luck.
Q: Let the user choose to turn off oneboxing

DeadMGRecently I've moved from a large 1080p screen to a smaller one, and I never noticed this before, but holy crap, oneboxing is incredibly annoying if you don't have a large quantity of screen space. Please implement a feature where the user can choose to turn off oneboxing.

That has.... already been ignored in the past.
@bwDraco BTW, I would also point out that thanks to some "oh, sooooo good it is almost stealing" data plans, here in Europe I have seen multiple operator in many countries putting both a monthly data cap and a daily data cap on a consumption plan. Some have managed to put the daily limit in the 200MB range....
An off-topic question asking for the meaning of "noise". How ironic.
7:48 AM
[ SmokeDetector | MS ] Chinese character in title, messaging number in body, messaging number in title, mostly non-Latin body, mostly non-Latin title: Q/微信193998606!办理UT(加拿大多伦多大学毕业证成绩单),(文凭/学历认证)回国人员证明,教育部认证University of Toronto by J.Peng on bitcoin.stackexchange.com
[ SmokeDetector | MS ] Chinese character in title, messaging number in body, messaging number in title, mostly non-Latin body, mostly non-Latin title: 澳洲房源租房子学位证UQ大学毕业证成绩单Q微627212264办学士学位硕士学位理澳洲昆士兰大学UQ学位证书成绩单使馆证明学历认证教育部认证文凭学生卡 University of Queensland by xiguai116 on bitcoin.stackexchange.com
8:18 AM
[ SmokeDetector | MS ] Chinese character in title, messaging number in title, mostly non-Latin body, mostly non-Latin title: Q微234178458办理美国达特茅斯学院毕业证成绩单 理达特茅斯学院文凭历认证使馆认证学历学位认证 学生卡 Dartmouth Colleg by yaya999 on bitcoin.stackexchange.com
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, pattern-matching website in body: Omega 3 fatty acids: This Can Be A commonly understand Brain Booster by stepweeks on superuser.com
8:50 AM
sd 3k
OMG.... Jon Skeet got out-upvoted on a question he answered
Q: Strange Java behaviour with static and final qualifiers

srnjakIn our team we found some strange behaviour where we used both static and final qualifiers. This is our test class: public class Test { public static final Test me = new Test(); public static final Integer I = 4; public static final String S = "abc"; public Test() { Sys...

@JamesENL The age of the old myths and gods is over. Pan, the Fairy Queen, Shog Cthulhu and even Skeet... they will all soon been forgotten as the prophecy has foretold.
@JamesENL lol, well... the other answer is much more detailed. If it was anyone else, Skeet's answer would have gotten just few votes.
In their place, a new era of science, machines and steam will take hold of our life, bringing progress and advancement to us all.
Maybe he did it on purpose, as a social experiment.
Join the Illuminati now and let the power of reason be our strength.
8:56 AM
"How many devote followers I have? Let's check!";)
@Derpy Illuminati is deprecated, replaced by Scientology.
Jon Skeet is a self fulfilling prophecy these days
@ShadowWizard How darest you!
If he makes typos language designers just assume they did the design wrong and amend it to not look stupid
Aug 24 at 11:01, by Derpy
on SE it works in a little different way:
^ this and the following ones are the answer you seek.
@Derpy so you're the head of Illuminati?
This can explain why you keep your identity so secret..... :P
9:22 AM
@ShadowWizard this is an actual window in Canterlot Castle.
Now, enjoy the rest of your life... always wondering...
Are those MLP fans simply insane? Are they actually the only sane ones on the planets, having understood that they can safely ignore what others think??
Or.... are they actually the Illumiati, silently governing your life and constantly exchanging message thru apparent candy colored ponies show references?
@Derpy I choose to believe this one. Respect! :)
(and please don't punish me too hard for using so many uncouth words in the Den... ;))
After all, the best way to hide something is to leave it in plain view.
@Derpy Totally true. Works best for chocolates.
If you also manage to appear completely inoffensive by giving out the appearance of a playful dreamer... that are added points.
1 hour later…
10:48 AM
4 messages moved to Sandbox
11:30 AM
Uh.... could anyone please constructively explain what is so awful about either of the two questions I posted today that they both got an avalanche of downvotes? They weren't proposals so I can't even explain that away with "people disagreed with the proposal" - they were yes/no questions with no intended answer .
They weren't even theoretical "let me post random question about hypothetical situation that can never occur and thus useless to ask", as they stemmed from actual situation which happened and wasn't clear how to handle
[ SmokeDetector | MS ] Chinese character in title, bad keyword with email in body, messaging number in body, messaging number in title, mostly non-Latin body, mostly non-Latin title: 制作澳洲ANU毕业证书成绩单【微Q744043126】澳洲文凭毕业证办理澳大利亚国立大学毕业证学历文凭公证The Australian National by fghjuytr03 on bitcoin.stackexchange.com
The "Does repeating non-nice statements originally made by the someone at oneself violate “Be nice” policy?" seems almost like asking "Can I be rude if others are rude", and probably has been regarded by most as this.
That would be either a joke question, a troll or a nonsense one, so I assume it was downvoted because of that.
the other one.... I think most categorized it as "you are either trolling or overthinking"
so, same results as the above.
11:54 AM
Voting on Meta is weird. The only winning move is not to post.
Actually, I don't think there is an actual enforced requirement for votes to follow some rules anywhere
(not that it would be something easy to do)
so, one could have downvoted you because all ravens are black.
12:08 PM
Does the "download now" link work for anyone viva64.com/en/pvs-studio-download ?
@DVK I am starting to fear that there are several users on MSE who vote along the lines of "gah, not this again". I don't like it, but there's not much we can do about it. Meta votes have always been weird, and on MSE they seem to make no sense whatsoever sometimes.
Then again, they can always explain it with a "I don't think this is useful to discuss".
12:34 PM
@DVK 7 downvotes (on one of them, where I posted a comment) isn't really "avalanche of downvotes", plus you got 2 upvotes in there. All in all, nothing awful, people probably take it as "this should be allowed/this shouldn't be allowed" and picking a side by voting instead of taking part in the discussion.
@DVK similar example is this question on MSE:
Q: How is the policy of letting people edit another person's questions justified, under USA law?

SimonTGiven that Stack Exchange, Inc. is based in the USA, how does it justify the policy of allowing someone to edit another person's question? If someone objects to the grammar, formatting, etc. of a question, they can post a comment. No one should be allowed to edit another person's submission. Th...

Even though it's a discussion about the "how", people see it as picking side and saying "letting people edit another person's questions is not justified" meaning asking them to stop editing. Of course, they are not really happy with that...
In your case, it's as if you say "don't repeat non-nice statements originally made by someone else at oneself" - to which people on MSE disagree. Get the idea?
1:01 PM
is that pig smiling?
[ SmokeDetector | MS ] Link at end of answer: Install ubuntu on POS system with touch screen by Dillan White on askubuntu.com (@kos)
1:26 PM
omg, I think I discovered an email address that I totally forgot to check for the past year or so ...
@Bart Amen :)
@ShadowWizard your theory seems plausible, but it seems to be contradicted by the fact tat people UPvoted answers that say "do NOT do this", so how can they be said to disagree? If anything, it seems people who downvote for some reason assume the question endorses such behavior. Eh.
@DVK yeah, might be....
2:10 PM
kitty image detected X 2
Dogs look up to us. Cats look down on us. Pigs treat us as equals.
2:23 PM
Breaking pattern!
talking about awkward pictures ...
You want awkward? OK!
Google Art? ^
anyway, to conclude the FF intervention, also a gif...
Better than cat animations!
2:29 PM
Why would you post a picture of @GraceNote?
@ShadowWizard Deep Style
@Derpy it's international GraceNote awareness day.
that is GraceNote? didn't know GraceNote was a vegetable ... or was it a plant?
only if cucumber grows arms and legs
@Telkitty That is a cactuar. And it is gracenote
2:44 PM
@Telkitty and thorns. Many thorns.
1 hour later…
3:50 PM
so how does gang downvoting work? is it really gang downvoting or is there a bot handling it?
6:48 PM
@Bart nothing works, the page don't even load for me, so no, if there is a download now link, it doesn't work for me ...
1 hour later…
8:11 PM
@ShadowWizard There's also "this is fairly obvious and it doesn't show any research effort" -> downvote.
3 messages moved to Sandbox
1 message moved to Sandbox
1 hour later…
9:27 PM
I wonder if the follow up to this will be the request to close down either certain chatrooms or chat all together ... and/or comments ...
That's disgusting coming from a high-rep user like that.
@bjb568 the more I see these type of posts the more I realize reputation isn't a reliable factor to predict the usefulness of future contributions
at least that goes for meta
@rene I've known that for a while. It's still sad.
@rene I hold that one of the big advantages of Stack Overflow's format is that it doesn't require knowledgeable people to also be talented writers, diplomats, or even particularly well-adjusted people. Of course, this advantage doesn't necessarily translate to meta.
10:07 PM
[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer: What is the meaning and origin of bridal veils in Christian weddings? by carol on christianity.stackexchange.com
sd k
10:36 PM
is there a policy on linking to your own answer in comments? along the lines of "ohh hey, this answer is better"
probably not, it's not necessarily a bad thing that you've written a relevant answer, just try not to force it down their throat
hrm, okay.
not for me, noticed someone who commented on (most) all other answers saying his was better
they were axed in the past, because then they were "you should delete this and look at mine" type comments, and he seemed to learn not to ask for others to delete them
now he's just cross linking back to his own answer in a few other questions (in comments)
seems.. ugh
that sounds like he's really forcing it down their throat, maybe moderator intervention would be a good idea
sd naa
@Quill [:5253364] Recorded answer as an NAA in metasmoke.

« first day (2232 days earlier)      last day (1097 days later) »