Misplaced Pages

:Suspected sock puppets/Rafaelsfingers: Difference between revisions - Misplaced Pages

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
< Misplaced Pages:Suspected sock puppets Browse history interactively← Previous editContent deleted Content addedVisualWikitext
Revision as of 02:24, 15 April 2008 editJehochman (talk | contribs)Extended confirmed users, Page movers, Pending changes reviewers, Rollbackers46,281 edits →User:Rafaelsfingers: more details← Previous edit Latest revision as of 01:03, 19 April 2008 edit undoJehochman (talk | contribs)Extended confirmed users, Page movers, Pending changes reviewers, Rollbackers46,281 edits →User:Rafaelsfingers: spell 
(10 intermediate revisions by 2 users not shown)
Line 1: Line 1:
{{SSPa}}
===]=== ===]===
;Suspected sockpuppeteer ;Suspected sockpuppeteer
Line 39: Line 40:
{{user5|Stone put to sky}} has already been confirmed as sockpuppets with {{user5|Aho aho}}. It's not clear why one of these accounts weren't blocked as an abusive sockpuppet (if not both). They are unrelated to Rafaelsfingers however. {{user5|Stone put to sky}} has already been confirmed as sockpuppets with {{user5|Aho aho}}. It's not clear why one of these accounts weren't blocked as an abusive sockpuppet (if not both). They are unrelated to Rafaelsfingers however.


;Comment by John Smith's

*Even if Stone put to sky is not involved, there is the possibility supergreenred, rafael and the IPs could be the same person. I can see some possible 3RR vios:

# Supergreenred
# Supergreenred
# Rafaelsfingers
# Rafaelsfingers

Note how they only revert "one at a time" as it were. Also note when 64.118.111.137 was editing. As soon as the page was semi-protected the other accounts jumped in. 64.118.111.137 is now back on the talk page again.

] (]) 06:38, 15 April 2008 (UTC)

I have also taken a look at the contributions of Rafaelfingers, supergreenred and the IP 76.102.72.153. If you check, you will see they all essentially edit the same articles, primarily ]. The IP and Rafael also have an interest in ]. In terms of registration, they all started editing in March - the IP one day after Rafael. ] (]) 13:32, 15 April 2008 (UTC)


;Comments ;Comments
Line 50: Line 65:
Suspected sockpuppets: Suspected sockpuppets:
*{{checkuser|Supergreenred}} *{{checkuser|Supergreenred}}
*{{checkuser|Moriss levy}} - ] *{{checkuser|Moriss levy}} - ]
*{{checkuser|Thecryptthing}} - blocked *{{checkuser|Thecryptthing}} - blocked previously based on
*{{checkuser|Aho aho}} - ] *{{checkuser|Aho aho}} - ]
*{{checkuser|YumpinYimini}} - ] - now blocked *{{checkuser|YumpinYimini}} - ] - now blocked on behavioral evidence.

;Related checkuser reports
* ]
* ]


;Conclusions ;Conclusions
I am blocking ] immediately. This edit and this page ] gives away that they are a sock just like ]. ] <sup>]</sup> 02:17, 15 April 2008 (UTC) * I am blocking ] immediately. This edit and this page ] gives away that they are a sock just like ]. ] <sup>]</sup> 02:17, 15 April 2008 (UTC)

* There are just so many coincidences here, it creates a very strong appearance of either ] or ]. I am going to block the other two socks, Moriss levy and Aho Aho, which have been found twice by checkuser to be {{likely}} socks of Stone put to sky. As for Aho Aho, my determination was influenced by an analysis of the contributions. Here are a few sample diffs to illustrate the common interests, and common editing point of view of {{user|Aho Aho}} and {{user|Stone put to sky}}: --. Additionally, I will block Stone put to sky indefinitely because they have been caught sock puppeting previously, twice, and ], yet have continued using Aho Aho as recently as April 10. After being caught a couple times, I expect the user would desist. Also note that in spite of a long contribution history, Stone put to sky is virtually a single purpose account for editing ], as are the socks. ] <sup>]</sup>

* The case against {{user|Giovanni33}} as a second puppetmaster in this case with a distinct set of sock puppets, {{user|Supergreenred}}, and {{user|Rafaelsfingers}}, is very convincing. (I find no relationship between this group and Stone put to sky and their socks.) Checkuser evidence is inconclusive, however, as a proven puppetmaster, Giovanni33 has more than enough experience to evade checkuser. The remarks provided by Thatcher in ] tend to corroborate rather than refute this case. Per the evidence on this page, it is an implausible coincidence for these three accounts, supporting each other and the same idiosyncratic point of view, to be located in such a narrow geographic region while editing the same narrow set of articles. A panoptic view of this case leads me to conclude that there is a high probability of ] or ] puppetry going on here. Therefore, I will indefinitely block all three accounts. Giovanni33 has a very long block log and has been caught socking before. All available second chances have been expended. ] <sup>]</sup> 03:29, 16 April 2008 (UTC)
**Upon discussion with several administrators who know Giovanni33's style, I have sufficient doubts that I have unblocked. The other two accounts remain blocked as disruption-only, single purpose accounts, probable socks of each other, perhaps with an undisclosed puppetmaster. ] <sup>]</sup> 02:42, 17 April 2008 (UTC)
**I have agreed to unblock ] on condition that they become a member of the ], and use only one account. Further trouble without signs of progress should result in a speedy reblocking. ] <sup>]</sup> 01:03, 19 April 2008 (UTC)


---- ----

Latest revision as of 01:03, 19 April 2008

The following discussion is an archived debate of the case of suspected sockpuppetry. Please do not modify it. No further edits should be made to this page. All edits should go to the talk page of this case. If you are seeing this page as a result of an attempt to open a new case of sockpuppetry of the same user, read this for detailed instructions.

User:Rafaelsfingers

Suspected sockpuppeteer

Rafaelsfingers (talk · contribs · deleted contribs · page moves · block user · block log)

Suspected sockpuppets

Supergreenred (talk · contribs · count · logs · block log · lu · rfa · rfb · arb · rfc · lta · socks)
Stone put to sky (talk · contribs · count · logs · block log · lu · rfa · rfb · arb · rfc · lta · socks confirmed)
Aho aho (talk · contribs · count · logs · block log · lu · rfa · rfb · arb · rfc · lta · socks)
Giovanni33 (talk · contribs · count · logs · block log · lu · rfa · rfb · arb · rfc · lta · socks confirmedsuspected)
76.102.72.153 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot)
64.118.111.137 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot)
76.126.64.74 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot)
64.121.40.153 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot) (previous Giovanni33 IP - San Fran area)
38.114.145.148 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot) (Previous Giovanni33 IP - san fran area though this is likely a static IP used to talk software provider in Utah through Cogentco IP provider)


Report submission by

DHeyward (talk) 19:37, 13 April 2008 (UTC)


Evidence

Both Rafaelsfingers and Supergreenred were created at around the same time. First contributions were to report 3RR violations or revert other editors. Both accounts are SPA's that target the State terrorism and the United States article and supporting article. Stone put to sky (talk · contribs) and Aho aho (talk · contribs) were previsoulsy shown to be sockpuppets from Taiwan and it's not clear why they weren't blocked (or why one wasn't blcoked). Giovanni33 (talk · contribs) has a number of meatpuppets/sockpuppets from the San Francisco area but IP's are different. I suspect it's dense enough that he could use a wirless card to use different peoples ISP's in a very local area. Giovanni33 has a history of sockpuppetry. These accounts all have a very narrow editing focus with the same POV often reverting to the other editors version to the point that the edit warring bars all progress to fixing the article and invariably leads to the article being locked. It's to the point that if the IP is from SF area it's Giovanni or if it's from Taiwan it's SPTS. Bottom line is that regardless of the CU results, these are SPA meatpuppet/sockpuppets that need to be dealt with if those articles are to be fixed.

Rafaelsfingers created March 27 . Only two edits that day to support the only person sharing his view in that thread, Giovanni33. . Rafaelsfingers then takes a few weeks off and returns to revert Jtrainor (talk · contribs).. But that was only after the page was semi-protected after the IP editor 76.102.72.153 (talk · contribs) and 64.118.111.137 (talk · contribs) was involved in an extensive edit war over the same material the day before. As an example, these two edits are 19 revisions apart but are identical. These edits are 5 apart.. Basically the account Raphaelsfingers didn't start editing until his IPs were blocked due the semi-protected status and a 3RR block of 64.118.111.137.

Even though the two IPs show up as geographically distinct (5 hours apart), Sierra-Tel (64.118.111.137) offers dialup service which means that there is possibly a large geographic location that could be used for access. Similarity of edits, relative proximity and profile of edits links all three of these accounts.

Supergreenred (talk · contribs · deleted contribs · page moves · block user · block log) was created on March 15. Like the IPs and Rafaelsfingers, it has a very short editing history. He made a report to 3RR on the related article Debate over the atomic bombings of Hiroshima and Nagasaki . The person he reported was in an edit war with 76.126.64.74 (talk · contribs · WHOIS), another San Francisco area comcast IP (see Giovanni33). He then took a month of until April 13 where he became involved in the edit war there. et al. He was temporarily blocked for tendentious editing for 24 hours related to these edits.

Giovanni33 (talk · contribs · deleted contribs · page moves · block user · block log) has a 1RR arbcom restriction. He has a Northern California IP as established by previous checkusers and his previous sockpuppets. The other accounts above are all SPA's with very short edit histories. Basically these match very closely to his location and it is more than coincidence (either meat or sockpuppets) for all these Northern California accounts all editing a very narrow set of articles. His previous checkuser confirm the location of these accounts. Giovanni33 is currently under a 72 hour block for violation of his 1RR restriction.

Through research of Stone put to sky (talk · contribs · deleted contribs · page moves · block user · block log) I have just found out that there was a previous request for checkuser on the IPs and Rafaelsfingers . This editor ostensibly edits from Taiwan.

Stone put to sky (talk · contribs · deleted contribs · page moves · block user · block log) has already been confirmed as sockpuppets with Aho aho (talk · contribs · deleted contribs · page moves · block user · block log). It's not clear why one of these accounts weren't blocked as an abusive sockpuppet (if not both). They are unrelated to Rafaelsfingers however.

Comment by John Smith's
  • Even if Stone put to sky is not involved, there is the possibility supergreenred, rafael and the IPs could be the same person. I can see some possible 3RR vios:
  1. 22:12, 13 April 2008 Supergreenred
  2. 22:29, 13 April 2008 Supergreenred
  3. 04:45, 14 April 2008 Rafaelsfingers
  4. 09:30, 14 April 2008 Rafaelsfingers

Note how they only revert "one at a time" as it were. Also note when 64.118.111.137 was editing. As soon as the page was semi-protected the other accounts jumped in. 64.118.111.137 is now back on the talk page again.

John Smith's (talk) 06:38, 15 April 2008 (UTC)

I have also taken a look at the contributions of Rafaelfingers, supergreenred and the IP 76.102.72.153. If you check, you will see they all essentially edit the same articles, primarily State terrorism and the United States. The IP and Rafael also have an interest in Guatemalan Civil War‎. In terms of registration, they all started editing in March - the IP one day after Rafael. John Smith's (talk) 13:32, 15 April 2008 (UTC)

Comments

This will be controversial. We need diffs showing what you have summarized. Jehochman 23:19, 13 April 2008 (UTC)

Sockmaster:

Suspected sockpuppets:

Related checkuser reports
Conclusions
  • The case against Giovanni33 (talk · contribs) as a second puppetmaster in this case with a distinct set of sock puppets, Supergreenred (talk · contribs), and Rafaelsfingers (talk · contribs), is very convincing. (I find no relationship between this group and Stone put to sky and their socks.) Checkuser evidence is inconclusive, however, as a proven puppetmaster, Giovanni33 has more than enough experience to evade checkuser. The remarks provided by Thatcher in Misplaced Pages:Requests for checkuser/Case/Giovanni33 tend to corroborate rather than refute this case. Per the evidence on this page, it is an implausible coincidence for these three accounts, supporting each other and the same idiosyncratic point of view, to be located in such a narrow geographic region while editing the same narrow set of articles. A panoptic view of this case leads me to conclude that there is a high probability of sock or meat puppetry going on here. Therefore, I will indefinitely block all three accounts. Giovanni33 has a very long block log and has been caught socking before. All available second chances have been expended. Jehochman 03:29, 16 April 2008 (UTC)