Misplaced Pages

:Sockpuppet investigations: Difference between revisions - Misplaced Pages

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
Browse history interactively← Previous editNext edit →Content deleted Content addedVisualWikitext
Revision as of 01:35, 27 May 2009 view sourceGogo Dodo (talk | contribs)Administrators197,922 edits Restore MascotGuy request... "Blocking of underlying IPs for a longer term than afforded by autoblock"← Previous edit Revision as of 01:52, 27 May 2009 view source Versageek (talk | contribs)Edit filter managers, Autopatrolled, Checkusers, Administrators38,588 edits MascotGuy: blocksNext edit →
Line 64: Line 64:
*{{checkuser|Invisible Touch Guy}} *{{checkuser|Invisible Touch Guy}}
More MascotGuy accounts. Blocking the underlying IPs or a rangeblock would be appreciated. -- ] (]) 01:01, 27 May 2009 (UTC) More MascotGuy accounts. Blocking the underlying IPs or a rangeblock would be appreciated. -- ] (]) 01:01, 27 May 2009 (UTC)
:I hard blocked one DSL IP for 3 months, and AO/ACB blocked two public terminals for 3 months. --]] 01:52, 27 May 2009 (UTC)

Revision as of 01:52, 27 May 2009

This page has an administrative backlog that requires the attention of willing administrators.
Please replace this notice with {{no admin backlog}} when the backlog is cleared.
Page for requesting investigations of sockpuppetry
ShortcutsIf you suspect sockpuppetry by an administrator, you should email the Arbitration Committee to open an investigation. If you need to submit off-wiki evidence for some other reason, you must contact the checkuser team privately to open an investigation. Private information, emails, logs, and other sensitive evidence must not be posted on Misplaced Pages. All evidence related to a sockpuppet investigation must otherwise be posted on the designated page. ←What is a sockpuppet?What happens in an SPI?
Sockpuppet investigations
Information pages
SPI clerk pages
IRC
  • #wikipedia-en-spi
  • #wikipedia-en-spi-clerks
SPI archives

This page is for requesting that we investigate whether two or more Misplaced Pages accounts are being abusively operated by the same person.

Before opening an investigation, you need good reason to suspect sockpuppetry.

  1. Evidence is required. When you open the investigation, you must immediately provide evidence that the suspected sock puppets are connected. The evidence will need to include diffs of edits that suggest the accounts are connected. (This requirement is waived if the edits in question are deleted; in this case just provide the names of the pages that the accounts have been editing.)
  2. You must provide this evidence in a clear way. Vaguely worded submissions will not be investigated. You need to actually show why your suspicion that the accounts are connected is reasonable.
  3. Concision is key. Evidence should be presented in a concise format. Because of the length of the backlog, cases with clear and concise explanations and evidence are handled the most quickly.

Investigations are conducted by a clerk or an administrator, who will compare the accounts' behaviour and determine whether they are probably connected. Upon request, investigations can also be conducted by a checkuser, who can look at technical data behind the accounts in order to determine how likely it is they are connected. CheckUser results are often called technical evidence, in contrast to publicly available behavioural evidence.

Due to Misplaced Pages's CheckUser policy, checkusers will conduct a technical investigation only if clear, behavioural evidence of sockpuppetry is also submitted; if you ask for technical evidence to be looked at but do not provide behavioural evidence, the investigation may not be allowed to proceed. Additionally, checkusers will not publicly connect an account with an IP address per the privacy policy except in extremely rare circumstances.

How to open an investigation

To add to an existing investigation (or case), enter the case name in the box below. To create a new investigation, enter the username of the oldest-created registered account (the "sockmaster")—or, if only IP addresses are involved, the IP that made the first relevant edit. Then click "Submit". Note: Do not include "User:" or any other commentary.

For example, if a prior filing was at Misplaced Pages:Sockpuppet investigations/John Doe, or this is a first filing and the oldest registered account is User:John Doe, you should enter John Doe in the box below.

You will then be taken to another page containing a form you must complete to open the investigation. The process for opening a subsequent investigation on the same user is the same as for creating a new case. Again, do not include "User:" in any of the numbered fields.

If you also wish a checkuser to investigate, change |checkuser=no to |checkuser=yes in the edit box on the next page and explain why you are requesting it.

Note: You can also open an investigation using Twinkle. After installing Twinkle, an "ARV" option will appear in the "TW" tab on any user, user talk, or user contributions page. Clicking on this option and selecting either "Sockpuppeteer" or "Sockpuppet" will allow you to fill in a few simple fields to file a report. The report will be automatically formatted for you.
If you are not autoconfirmed, and the case page is protected or does not exist, please click "show" to the right and use the box below.


Open cases: not awaiting CheckUser

Cases in this section may need additional evidence, patroller review, or a decision.

  • If your case is not showing up here, or this section seems out of date, please click here to refresh the page, or check the closed cases.

User-reported cases

(view cases)


Bot-reported cases

(view cases)

Bot reported cases


Open cases: awaiting Checkuser processing

Cases in this section have an open request for CheckUser that is being processed. Any user may update or act on this case, and any patroller or clerk may decide the case. However it will not be closed if the Clerks believe any further action is needed.

  • Endorsement or decline of CheckUser may only be made by a Clerk.
  • If your case is not showing up here, or this section seems out of date, please click the purge link.

Awaiting Clerk approval

(view cases)


Awaiting CheckUser

(view cases)


Completed cases

Pending close

Cases here have been closed by users and are awaiting a Clerk to review for formal close and archiving.

  • If your case is not showing up here, or this section seems out of date, please click the purge link.

(view cases)


Quick CheckUser requests

Use this section to request checkuser information relating to a situation that does not involve sock puppetry. You could use this section to request, for example:

  • Underlying IPs of an account, where the autoblock has expired or been ineffective.
  • Collateral damage checks for the informed hardblocking of IPs or ranges.
  • IP block exemption checks before granting IPBE (or to verify it is being used constructively).

For threats of harm (to self or others) you must email emergency@wikimedia.org (see the threats of harm page) and not use this page. Requests to investigate and confirm sockpuppetry should be listed in the sockpuppet section above, and not here (such requests will be summarily removed).

To make a request here, copy the following template and paste it to the end of this section (quick link to edit) – replacing "header" with an informative title, and adding underneath the template any relevant information – then sign using "~~~~", preview, and click "save".

==== HEADER ====
{{SPIquick}}
* {{Checkuser|username}}


Rigaudon

This quick case is open.

This user just sent out what I'm assuming is a large mass of emails to administrators claiming that he's hacked a steward account and will desysop anyone who doesn't mass block contributors. I've blocked the account (see talk page), but if someone wouldn't mind making sure the IP address isn't going to come back in 24 hours, that would be appreciated. I wouldn't be half surprised if it was a proxy, either. Hersfold 00:43, 27 May 2009 (UTC)

I blocked one sleeper & one Tor exit node. We may want to change the block type to exclude talk page editing, as he's placing his spew there in the form of an unblock request. --Versageek 01:04, 27 May 2009 (UTC)


MascotGuy

This quick case is open.

More MascotGuy accounts. Blocking the underlying IPs or a rangeblock would be appreciated. -- Gogo Dodo (talk) 01:01, 27 May 2009 (UTC)

I hard blocked one DSL IP for 3 months, and AO/ACB blocked two public terminals for 3 months. --Versageek 01:52, 27 May 2009 (UTC)
Categories: