Page 1 of 1

"Do not buy our kitchens": false-positive fears of site hacking caused by this forum

Posted: Sat Aug 18, 2018 7:25 pm
by sozzled
I've asked about this before; I can't find where I asked about this before but I know I spent an hour or two discussing this issue here on the forum. We were answered in a positive way before. Someone has decided to turn things around and we're back somewhere near where we began before. The previous discussion has been removed from the forum.

See viewtopic.php?f=710&t=954817 for some background.

Like most of my suggestions to this forum, this one will probably be rejected, too. There is nothing inherently wrong with writing the word "kitchens" anywhere on the forum. In the context of the FPA, where people have installed JCE, there is a plugin with a name that includes a string of characters that this forum's auto "bad word" filter objects to; the plugin named WF_KITCHENSINK not a "bad word"; it is not malware, suspicious or something to be afraid of.

Re: "Do not buy our kitchens": false-positive fears of site hacking caused by this forum

Posted: Sat Aug 18, 2018 9:58 pm
by mandville
oops . edit

you asked for the topic to be removed, it was noted to the mods section for record keeping why the word was on the naughty list

Re: "Do not buy our kitchens": false-positive fears of site hacking caused by this forum

Posted: Sat Aug 18, 2018 10:31 pm
by sozzled
I can't remember where I left my coffee cup this morning let alone whether I asked for a topic to be removed (or the reasons why). The point I'm unsuccessfully trying to make is that, for a brief time (a couple of months) my previous suggest was taken seriously and the FPA reports were able to be read without being censored.

The argument that was given earlier—why kitchen-stuff is naughty—was to deal with an overwhelming spate of kitchen product-related spam. To be honest, I haven't seen continuous or excessively hight rates of kitchen product-related spam on the forum on that many occasions. If the reason was a means of catching those spam posts that weren't detected by humans then (a) it also catches legitimate use of the text and (b) is ineffective in dealing with that kind of rubbish.

I'm also saying that my suggestion will probably suffer the same fate as many of my other suggestions.

Re: "Do not buy our kitchens": false-positive fears of site hacking caused by this forum

Posted: Sat Aug 18, 2018 10:35 pm
by Webdongle
But has the problem reoccurred because the spam filter was changed or because code was changed in the plugin?

Re: "Do not buy our kitchens": false-positive fears of site hacking caused by this forum

Posted: Sat Aug 18, 2018 10:58 pm
by sozzled
@Webdongle: There is no problem with JCE; there is no problem with the FPA (the FPA simply reports what it finds). The issue I'm talking about is created by the Joomla forum, leading other forum users to believe that websites using JCE (as one example) contain malware or suspect software.

Re: "Do not buy our kitchens": false-positive fears of site hacking caused by this forum

Posted: Sat Aug 18, 2018 11:52 pm
by Webdongle
The spam filter (in the forum) was changed to stop it treating the plugin as spam.
But now the spam filter (in the forum) treats it as spam and replaces with that phrase.
So either the spam filter (in the forum) has been altered or the plugin has changed and the spam filter (in the forum) is replacing it with that phrase?

Re: "Do not buy our kitchens": false-positive fears of site hacking caused by this forum

Posted: Sun Aug 19, 2018 1:24 am
by sozzled
It's of little importance really. Whenever I draw these matters to someone's attention I spend far too much time explaining the obvious or trying to achieve the impossible. The spam filter in the forum was changed, to allow the use of k*itchensink and then it was changed again (less than two months later) to outlaw it. That's my point.

Go back over several years and you will find instances where people have used JCE, where they've posted the FPA, and where the forum "bad word filter" has transliterated it. I don't need to provide examples; the moderator team is aware of the issue. Try it yourself; create a FPA report on one of your websites that uses JCE and see the results on the forum. JCE hasn't changed the naming of this plugin for several years.

Re: "Do not buy our kitchens": false-positive fears of site hacking caused by this forum

Posted: Sun Aug 19, 2018 1:10 pm
by ooffick
Hey

I have removed the word kitchen from the word sensor filter.

Kind regards
Olaf

Re: "Do not buy our kitchens": false-positive fears of site hacking caused by this forum

Posted: Sun Aug 19, 2018 3:02 pm
by sozzled
I know that KITCHEN is not a bad word. KITCHEN was not a bad word before. KITCHEN was never a bad word. @ooffick: if you "removed kitchen" then I don't know what word you removed. "Kitchen" was not a problem before.

The bad word is KITCHENS

Please remove KITCHENS (and therefore KITCHENSINK) from the word censor.

This matter is not fixed.

Re: "Do not buy our kitchens": false-positive fears of site hacking caused by this forum

Posted: Sun Aug 19, 2018 4:07 pm
by Webdongle
WF_KITCHENSINK_TITLE (2.6.32)
The offending word is
kitchen
(plural with an s)
kitchen without an s
Not sure where in JCE the fpa finds it

Re: "Do not buy our kitchens": false-positive fears of site hacking caused by this forum

Posted: Sun Aug 19, 2018 4:49 pm
by ooffick
That's resolved as well now, it looks like multiple rules were catching this word.

Kind regards
Olaf

Re: "Do not buy our kitchens": false-positive fears of site hacking caused by this forum

Posted: Sun Aug 19, 2018 7:24 pm
by sozzled
Thanks.