Wikipedia:Sockpuppet investigations/Dwaro: Difference between revisions

Content deleted Content added

Inline

Latest revision as of 05:06, 2 October 2020

Dwaro

Dwaro (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Populated account categories: confirmed · suspected

For archived investigations, see Wikipedia:Sockpuppet investigations/Dwaro/Archive.

@@ Line 1: / Line 1: @@
 <noinclude>__TOC__</noinclude>
 {{SPIarchive notice|Dwaro}}
 {{SPIpriorcases}}
-===07 June 2020===
-{{SPI case status|clerk}}
-====Suspected sockpuppets====
-* {{checkuser|1=Throwawiki}}
-<!-- You may duplicate the templates above ({{checkuser}} and {{checkIP}}) to list more accounts-->
-*'''Tools''': <span class="plainlinks">[https://tools.wmflabs.org/sigma/editorinteract.py?users={{urlencode:{{SUBPAGENAME}}}} Editor interaction utility] • [https://tools.wmflabs.org/interaction-timeline?wiki=enwiki&user={{urlencode:{{SUBPAGENAME}}}} Interaction Timeline] • [https://tools.wmflabs.org/betacommand-dev/UserCompare/{{urlencode:{{SUBPAGENAME}}}}.html User compare report]</span> <small>''Auto-generated every hour.''</small>
-Throwawiki joined the day after Elfin's block and has now (over a year later!) recreated an identical version of [[WooPlus]] [[User:Praxidicae|Praxidicae]] ([[User talk:Praxidicae|talk]]) 16:49, 7 June 2020 (UTC)
-:I've also sent an email to functionaries about this as I don't want to fall afoul of outing. [[User:Praxidicae|Praxidicae]] ([[User talk:Praxidicae|talk]]) 17:18, 7 June 2020 (UTC)
-::{{u|Praxidicae}}, On the top, the editor has also making request to remove speedy delete tag on my talk page [[User_talk:Amkgp#WooPlus]] [[User:Amkgp| ~ Amkgp]] [[User talk:Amkgp#top|<big>✉</big>]] 17:24, 7 June 2020 (UTC)
-====<big>Comments by other users</big>====
-<small>''Accused parties may also comment/discuss in this section below. See [[Wikipedia:Sockpuppet investigations/SPI/Guidance#Defending yourself against claims|Defending yourself against claims]].''</small><br>
-When this [[Special:DIFF/929869928|name suppression]] happened in this edit in midst of edits involving one of those alleged accounts, I had a strange feeling. I am curious if this one could be related to the whole deal? and also [[Special:Contributions/Thomastheo]] when the account suddenly came out of a nearly two year hiatus to participate in AfD, then suddenly went off the radar again. [[User:Graywalls|Graywalls]] ([[User talk:Graywalls|talk]]) 19:33, 8 June 2020 (UTC)
-====<big>Clerk, CheckUser, and/or patrolling admin comments</big>====
-*Putting this on hold to discuss on checkuser-l. [[User:TonyBallioni|TonyBallioni]] ([[User talk:TonyBallioni|talk]]) 18:11, 7 June 2020 (UTC)
-*The following accounts are either {{confirmed}} to one another:
-**{{checkuser|Elfinshadow}}
-**{{checkuser|Afvalbak}}
-**{{checkuser|Eoppa}}
-**{{checkuser|DwaroPublic}}
-*The following account is {{likely}} to the above:
-**{{checkuser|Streepjescode}}
-*The following account has been linked to this case by being on the same static IP previously according to the CU log. It is {{possilikely}} technically if I had to use a template:
-**{{checkuser|MeneerTijn}}
-:Note that this does not appear at first glance to be a shared IP. The only reason I didn't confirm Streephescode is that there is a difference in browser version on the same day, which indicates a different device (i.e. they were using an older browser a few hours after one of the confirmed socks was using a newer one). At the same time, they'd previously used the newer browser version the day before on the same system, so it's clear they have access to both devices.{{pb}}Anyway, I've {{bnt}} all the confirmed socks for violating [[WP:PROJSOCK]] and also likely being related to COI and UPE editing via evasion of scrutiny. In case there's the argument that Throwawiki was a legitimate alt, the engaging in [[WP:PROJSOCK]]ing nullifies that, as does the apparent UPE/COI editing. Also based on the time of account creation and similar subject, I think Elfinshadow likely is the same, but the CU log there shows a potential proxy, so I can't tie technically and the account is stale.{{pb}}Would a clerk move this to Dwaro, and a clerk or patrolling admin assess behaviourally the two I haven't blocked and tag as neccesary? Thanks. [[User:TonyBallioni|TonyBallioni]] ([[User talk:TonyBallioni|talk]]) 17:53, 8 June 2020 (UTC)
-::{{u|MER-C}}, pinging you since you blocked the account that led to this check. [[User:TonyBallioni|TonyBallioni]] ([[User talk:TonyBallioni|talk]]) 18:00, 8 June 2020 (UTC)\
-:::I had been alerted to this prior to the filing of the SPI and have seen some of the private evidence too. I agree Elfinshadow is a sock. [[User:MER-C|MER-C]] 18:09, 8 June 2020 (UTC)
-::::They emailed me admitting to the socking but said that Elfinshadow wasn't them and that it was oddly a coincidence. Doesn't really impact much here as its still a policy violation what happened, but I'll remove the tag so there isn't confusion. Based on the email as a whole, I believe them. [[User:TonyBallioni|TonyBallioni]] ([[User talk:TonyBallioni|talk]]) 22:36, 8 June 2020 (UTC)
-*{{clerknote}} On it's own, the [https://tools.wmflabs.org/sigma/editorinteract.py?users=MeneerTijn&users=Dwaro&users=Elfinshadow&users=Afvalbak&users=Eoppa&users=DwaroPublic&users=Streepjescode interaction evidence] wouldn't be enough, but together with the technical evidence, I think it's enough to call them behavioral socks.  The unusual use of "j" in both their usernames is another hint connecting those two, although it may be nothing more than "j" being a common letter in Dutch, which from their shared interest in [[Noordwijk Climate Conference]], I'm guessing they are.  Blocked and tagged both of those. -- [[User:RoySmith|RoySmith]] [[User Talk:RoySmith|(talk)]] 23:48, 11 June 2020 (UTC)
-----<!--- All comments go ABOVE this line, please. -->