**** BEGIN LOGGING AT Wed Aug 01 03:00:00 2018 Aug 01 06:52:54 DocScrutinizer05 : What's up with Sigyn? Why didn't it work? Aug 01 06:57:29 This is why lots of channels are requiring auth to speak. Aug 01 06:58:47 * Oksanaa thinks that if X sends a message with a spam link, X should be banned immediately. Question is, defining what "spam link" is Aug 01 07:02:35 Spam link is likely to: 1) point to domain, not a specific page; 2) have domain with absurd whois (registrant Name and Organisation are nearly identical, like "Data Protected Data Protected" and "Data Protected"); Aug 01 07:05:46 3) be sent by a suspicious user (not authorised with NickServ; wasn't seen on channel before; sends suspicious message) Aug 01 07:06:39 Suspicious message is a long message without commas or dots, containing word "you" and/or exclamation point and/or quotation mark (like "'") Aug 01 07:06:56 you notice, that those bots leave once they sent their stuff, its too late to ban them then :) Aug 01 07:07:17 (since banning them after spamming is what a lot of scripts do already) Aug 01 07:07:33 phlixi : They send two or three messages in a row. Or more. Banning them after one message may decrease spam. Aug 01 07:08:01 those are already sent before your script gets the first message Aug 01 07:08:19 they already leave before you can ban them Aug 01 07:08:25 That's... Annoying. Aug 01 07:08:59 thats irc :D Aug 01 07:09:05 Since Sigyn is Freenode's bot, cannot Freenode staff connect Sigyn with their Freenode server, so that server would catch and filter out spam before it reaches the channel? Aug 01 07:09:37 have to be very careful with that... Aug 01 07:09:42 For those channels that invited Sigyn, of course Aug 01 07:10:59 could do something like urls not allowed until one day after registration and first mesage to channel... but even then, bots would probably just implement that. on other networks they already register (some channel use +n) Aug 01 07:11:29 19:06:39 < Oksanaa> Suspicious message is a long message without commas or dots, containing word "you" and/or exclamation point and/or quotation mark (like "'") Aug 01 07:11:35 So like these ones? https://gist.github.com/Maxdamantus/ba4fc21689f1f271e3a1b2522e76b562 Aug 01 07:12:01 Maxdamantus : let me see, I was just comparing with backscroll Aug 01 07:12:18 Didn't include a length criterion, but can visually filter that. Aug 01 07:12:31 cat ~/irclogs/Freenode/#maemo.log | sed '/^..:.. <.[^>]*> /!d; /^..:.. <.[^>]*> [^\.,]*$/!d; /> .*you/I!d; /!/!d' Aug 01 07:12:57 Should also be mentioned that suspicious message contains a [spam] link, but then definition gets recursive Aug 01 07:13:48 Luckily that search didn't match on any of my messages. Aug 01 07:13:54 And clarify that suspicious single quotes are outside word (like 'test' ) and not inside word (like don't ) Aug 01 07:14:23 Didn't include a filter based on quotes. Aug 01 07:14:30 In short, [spam] link is the most important factor Aug 01 07:15:04 How do you determine that it's a spam link? Aug 01 07:15:05 But "absurd whois" will probably not work anymore when spambots start advertising somebody's business in earnest Aug 01 07:16:49 Spam link is likely to: 1) point to domain, not a specific page; and 2) be inside a suspicious message, which: a) is long; b) likely contains "you" and/or exclamation point; c) is sent by a suspicious user Aug 01 08:18:06 Supposedly setting the channel mode +r blocks the current wave of spam. Aug 01 16:16:05 i need some help with opera (not mini) Aug 01 16:17:19 my work network has filtering, and for some reason, i cannot open some sites with opera mobile that i can open with microb. Aug 01 16:18:37 i ran tcpdump -i wlan0- port 53 to check if it might be trying to access something else, and found that opera tries to contac sitecheck.opera-mini.net. i would like some help to figure out what setting controls that Aug 01 16:19:20 i want/need to diable it. i have Turbo mode turned off Aug 01 16:19:58 s/diable/disable/ Aug 01 16:21:00 i can open the sites with opera on other networks btw **** BEGIN LOGGING AT Wed Aug 01 22:26:51 2018 Aug 02 00:02:48 I thought that was an known thing with opera 12? Aug 02 00:03:29 I recall this was why I never updated from 11.x **** ENDING LOGGING AT Thu Aug 02 03:00:00 2018