User talk:Ivanvector

close
I am not really sure how specific this should be (or needs to be), but you recently closed a discussion that has then moved to the subject's talk page. (I blanked it without doing anything further.) JackTheSecond (talk) 16:15, 6 July 2024 (UTC)
 * you'll have to help me out with a link here, I don't know what discussion you're referring to. Ivanvector (Talk/Edits) 16:22, 6 July 2024 (UTC)
 * I decided to post it to WP:AIV. JackTheSecond (talk) 16:25, 6 July 2024 (UTC)

Your Drbogdan block
You may want to comment on this:,,. (I did ping you but I think I messed it up). DeCausa (talk) 09:32, 7 July 2024 (UTC)
 * thanks, you're right that your ping didn't work. You need to sign the same edit where you add the ping template - if you add the ping to a comment that is already signed then it doesn't trigger. A workaround is when you're adding a ping, you can remove your previous signature and re-sign, then it'll work. Ivanvector (Talk/Edits) 13:34, 7 July 2024 (UTC)
 * Yes, should have done that! Thanks for the clear explanation on Drbogdan's talk page. DeCausa (talk) 13:37, 7 July 2024 (UTC)

Proxy
Hello - You mentioned "they're using a proxy." Pardon my ignorance but could you help me understand a bit more? 1) Why do editors use proxies? 2) When you say "proxy," are you referring to VPNs? 3) As I understand it, if someone's account isn't IP exempted, they can't edit using a VPN because VPN IP ranges are generally blocked. How does an account get past this restriction? P.S. Just trying to learn more, not planning on using proxies! —  Saqib  ( talk  I  contribs ) 20:36, 11 July 2024 (UTC)
 * "Using a proxy" is kind of code for a few different things.
 * In the Nauman335 case it looked like that account is using a peer-to-peer proxy service, which is software you run on your computer that shares your connection (and your public IP) with other users of the same service - Apple Private Relay is a popular one. These don't usually show up as proxies in our detection tool but they're easy to spot with checkuser, they look like a static IP with a lot of simultaneous users, or one user editing at the same time from connections that are very far apart. People use them because they're sold as "anonymizing" services, and they can be built into an OS or a browser or even a router without the end user even being aware.
 * There are also proxies that are set up deliberately or can be left open by a badly configured server or one infected with malware, which are an old-school tool for hackers. We usually block those when we see them because you need to be up to no good to find one to connect to in the first place, and they usually don't last very long.
 * VPNs are not quite the same thing: they're organized and set up on purpose, often by organizations that need to share local private network resources with users across multiple physical locations. They're very common, and normally limit access to known people within the organization, so we don't normally block them unless they're actually being used abusively. Most users connected to one probably have no idea, but they can also be open to the public or exposed by malware, and those are the ones that would often be blocked.
 * There are also residential VPN services you can sign up to like NordVPN or Surfshark that will hide your IP and encrypt your connection, which have valid uses in the real world (I use one but not for editing) but they are also usually blocked because it's very easy to use them for abuse. These are usually also the services that are used to bypass a government firewall (like China or Turkiye) so we commonly give IP block exemption to users who request it from one of those countries, since they can't even read Wikipedia without using one.
 * Like you probably guessed, bad actors on Wikipedia use proxies to hide their connection details, thinking that if we can't see their real IP address that we won't be able to link them to prior blocked accounts. But checkuser reveals more than just IP addresses, and we have plenty of ways to see through proxies. The only way for an account to edit from a hardblocked (not anonymous-only) IP is to have local IP block exemption (global IPBE does not override local blocks). It would be very unusual for an account without established history to get IPBE without being checked by a CU. Hope that helps! Ivanvector (Talk/Edits) 16:12, 12 July 2024 (UTC)
 * I get the gist, but some of the technical stuff is a bit much for me but anyway, thanks for taking the time to explain! — Saqib  ( talk  I  contribs ) 19:52, 12 July 2024 (UTC)

Question about Sockpuppet_investigations/StayCalmOnTress
Hello, I have seen that you concluded Sockpuppet_investigations/StayCalmOnTress as unrelated, but a simplewiki CU has concluded as related (simple:Special:Diff/9639111, simple:Wikipedia:Requests_for_checkuser). Does this affect your previous decision? I look forward to hearing from you. MathXplore (talk) 06:12, 12 July 2024 (UTC)
 * thanks for pointing that out, I'll follow up with the simplewiki CU. I checked again this morning but it still looks to me like they're consistently located in an entirely different country from the Nauman335 socks, but I can only see data from this wiki. Ivanvector (Talk/Edits) 16:15, 12 July 2024 (UTC)

Juno (film)
Hey. On the page you have protected indefinitely, the disruptive editor's behavior is not compatible with WP:DEADNAME: "Paraphrase, elide, or use square brackets to replace portions of quotations to avoid deadnaming or misgendering". Since the user doesn't follow the warnings and is extendedconfirmed, I did not request another page protection, but this should be dealt with. ภץאคгöร 11:44, 15 July 2024 (UTC)

16th July 2024
@Ivanvector, please check this user and his SPI investigation, he moved years old article Ahluwalia (caste) into draft even with wrong edit summary he is also making articles with poor sources and inaccurate titles like Draft:Kalsi (caste) Kalsi is not a caste but a clan/tribe of Ramgharia caste itself, and Dhanoa Jats (caste)  and Jat is a caste Dhanoa is a tribe/clan of the caste not a separate caste, , and  they also belonged to same sockfarm agency. See their Interactions Prabh Singh Bains/Truthfindervert/Khalsajudicary @MathXplore, @Bbb.223.123.2.217 (talk) 14:11, 16 July 2024 (UTC)
 * Ivanvector, I've blocked the IP for a week as a proxy.--Bbb23 (talk) 15:56, 16 July 2024 (UTC)
 * I've been battling a few UPE sockfarms on Special:Contributions/223.123.0.0/19 for a while now, it's a cesspool of spam. has been dealing with it on simple. I doubt it's coincidence that this proxy showed up in that range and also pinged both of us. Ivanvector (Talk/Edits) 17:17, 16 July 2024 (UTC)
 * I saw your range block, but I didn't look any further as to what was going on. Why did they ping me?--Bbb23 (talk) 17:20, 16 July 2024 (UTC)
 * You've probably blocked some of their socks. There's one sockfarm in particular that has been incredibly persistent, probably hundreds of accounts this year alone. Ivanvector (Talk/Edits) 18:24, 16 July 2024 (UTC)

Case request
Andy the Grump and Andy Dingley are entirely different people, FYI. 28bytes (talk) 18:38, 17 July 2024 (UTC)
 * Ivanvector (Talk/Edits) 18:41, 17 July 2024 (UTC)
 * I replied to your post at RFAR (in my own section). In theory, this means you can't remove it.  But if you prefer to solve this by just removing your section, instead of crossing it out because it's been replied to, feel free.  I'll just delete my comment too. Floquenbeam (talk) 18:45, 17 July 2024 (UTC)
 * I think I'll leave it to the clerks to remove it if they think they should. Andy Dingley has a history of personal attacks himself, and I think my underlying point about wondering why we're coming down like a ton of bricks on Thryduulf for referencing an aspersion cast by someone else, while not talking about that someone else at all, is valid. It doesn't seem like there's a case coming out of this anyway. Ivanvector (Talk/Edits) 19:12, 17 July 2024 (UTC)
 * Sandstein's response to the whole thing has been extremely weird. Focusing entirely on my quote rather than what I quoted or the entire context in which I quoted it. Thryduulf (talk) 19:57, 17 July 2024 (UTC)
 * User:Thryduulf I agree. You quoted a troll post, and Sandstein came down on you as an admin rather on the troll.  I would have understood coming down on both of you, or only on Dingley.  I know that standards for admins are higher, but ....  Robert McClenon (talk) 02:28, 18 July 2024 (UTC)

On the case of the many Andys
Re Special:Diff/1235111790 you are not the first to make that mistake and I'd be surprised if you were the last! I very nearly conflated the two users in the original discussion on Sandstein's talk page but fortunately spotted before I hit publish. Thryduulf (talk) 18:56, 17 July 2024 (UTC)


 * I did think that there was at least as much reason to list Andy Dingley as a party as to list Thryduulf. It may be that the only reason I knew the difference was that I knew which one had insulted me in the DRV after I rebuked him.  The good-faith explanation is that, for some reason, Andy Dingley was unintentionally playing the role of a troll, making an insulting remark to see how much confusion and anger he could cause.  The answer to that question is:  A whole lot; too much.  AndyTheGrump would not do that, because when he insults another editor, he does it directly.  Since you weren't involved in either kerfuffle, I understand how you confused two difficult editors with similar names.  Robert McClenon (talk) 02:21, 18 July 2024 (UTC)

Sock suspect
A user User:Dabuno blocked by you seems to have come back, user:Dooblts has similar edits like him. 2409:4085:486:1067:A449:1BA:CD1:DE94 (talk) 14:41, 20 July 2024 (UTC)