Wikipedia:Sockpuppet investigations/Cuddlyable3/Archive

11 December 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Cuddlyable3 was known to have conflicts with myself and Franamax, this account appeared on the Reference Desks a few days ago (an old C3 haunt) and very quickly started leaving cryptic messages indicating prior contact with myself and just recently drew a connection between this account, Cuddlyable3, and Franamax:   Also in somewhat of bad taste to call a recently deceased Wikipedian a "mean bully", but that's well within character for C3. Requesting checkuser to confirm. Thanks. -- Jayron  32  02:19, 11 December 2012 (UTC) Jayron  32  02:19, 11 December 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  02:43, 11 December 2012 (UTC) — Berean Hunter   (talk)  03:18, 11 December 2012 (UTC)
 * - because Cuddlyable3's contribs are stale by a year so this one should be a behavior-based call.
 * In that case, could I get an impartial admin to review the behavior here to assess it. I have a history with C3, and as such I'd rather not block myself, but if someone else could look at this with fresh eyes and make the call one way or the other?  -- Jayron  32  03:01, 11 December 2012 (UTC)
 * Since he seems to be speaking for C3 in this edit and other similarities, I've indeffed the sock and closing.

04 August 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

This is user has nearly 100 edits, essentially all at the Reference desks, its Talk page, or at user pages addressing RefDesk-related topics. This pattern matches User:Cuddlyable3 (if only that, though, this would not be notable). What attracted attention recently (discussedat Talk:RD) was a series of edits that match Cuddlyable3's pattern in two ways: hyperbolic focus on spelling and User:SteveBaker, whom the alleged sockmaster pestered mercilessly about minor spelling errors. In addition, the user shows other evidence of the same inordinate focus on spelling errors:. If confirmed, this would suggest repeated block evasion. Scray (talk) 03:13, 4 August 2013 (UTC)
 * User notified (I realize this was not mandatory). -- Scray (talk) 03:22, 4 August 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Of special note is that this sock's first edit was mere days after C3's last known sock was blocked. That last sock, User:SkylonS, was blocked on December 11, 2012.  This current account started editing on December 14, 2012.  SkylonS's non-RefDesk edits also fall into the same sorts of articles as do DreadRed's, providing another locus of commonality.  -- Jayron  32  03:20, 4 August 2013 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The timing and the attitude are perfect. Blocked for obvious sockpuppetry. Someguy1221 (talk) 03:27, 4 August 2013 (UTC)

17 September 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Cuddlyable3 had two key behavioral tics that showed up again and again 1) he tended to harp on typographical errors, and rudely attack the person who made them 2) He didn't like me or Steve Baker (apparently because I occasionally made such mistypings, though I've forgotten exactly why I was the target of many of his attacks, and have no idea why Steve Baker was as well, likely for the same reason) and 3) He tended to spend a lot of time at the ref desks. While his last known sock was over a year ago, they both had the same basic behavior of a) spend time at ref desks b) focus on accidental typos, and c) attack me and Steve Baker, often for the same typo problems. The above IP has a LONG memory of myself, remembering ref desk posts from many years ago The above IP also has this weird fixation with typos: where he attacks me for one and here where he does same against Steve Baker. The It's/Its mistake was a common source of C3's obsession, especially in relation to myself and Steve Baker. From my perspective, this is screaming WP:DUCK. However, I'd like some impartial admins to look this one over and make the call here, given my history. -- Jayron  32  01:56, 17 September 2014 (UTC) Jayron  32  01:56, 17 September 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * I agree, this IP editor has the same MO and the exact same turn of phrase as C3. SteveBaker (talk) 04:08, 17 September 2014 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * No doubt about who this sockmaster is, IP blocked for a year, Category:Suspected Wikipedia sockpuppets of Cuddlyable3 created, DriveByWire (previously tagged as a LightCurrent sock) attached to this sockmaster as well. No idea if checkusering for further socks is useful. Fram (talk) 06:35, 17 September 2014 (UTC)
 * Thanks Fram. Closing as no need for CU this time. Callanecc (talk • contribs • logs) 14:51, 20 September 2014 (UTC)

26 September 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility


 * User:Cuddlyable3, aka User:DriveByWire is indefinitely blocked as an abuser of multiple accounts, with the characteristic "tic" of being unable to tolerate accidental confusion between "its" and "it's" in other editor's talk page comments, as mentioned at Wikipedia:Sockpuppet investigations/Cuddlyable3/Archive, especially as mentioned by 's comment on the same page, here.


 * Last September 17, 2014, was blocked for a year by  diff


 * This September 21, 2015 Hayttom created a new thread at the Language ref desk May I correct "it's" etc. in the Reference desk? which was answered in the negative.


 * Then, on September 24, IP 84.209.89.214 returned to the ref desks after his one year block was up:


 * adding this "grammar note correcting a mistaken use of "it's" and restoring the disruption after it was removed:
 * once and
 * twice

until being blocked by for three years by


 * Given the "coincidence" that Hayttom had just asked permission to fix other people's "it's" mistakes before 84.209.89.214 became active, if you look, you find the exact same Cuddlyable3 pattern of editing other's talk page "grammar mistakes" in Hayttom's edit history:


 * 1,
 * 2,
 * 3,
 * 4,
 * 5 "correction of horrible grammar mistakes in one response",
 * 6,
 * 7 "Removing apostrophes
 * 8
 * 9
 * 10

(I have limited myself to ten of the more easy to find examples above; there are many more.)


 * The last time a CUI was requested for Cuddlyable3 socks, it was declined, but presumably it would have found this account, and possibly more given the known history of multiple socks. So I am filing this report and asking for a check user investigation.  Thanks.  μηδείς (talk) 00:28, 26 September 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * I don't understand much of this terminology but I think somebody thinks I am using more than one account? I am certainly not.  And I am sorry that my 'tic', or effort to improve Wikipedia, bothers anybody.  I ask questions on the reference desk and sometimes try to answer them.  My article edits are meant to be clarifications.  Hayttom (talk) 02:27, 26 September 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I've declined the CU request. It appears that all previously blocked socks are .--Bbb23 (talk) 01:01, 26 September 2015 (UTC)
 * Can you explain that? Hayttom is active (unless he's just been blocked) and IP 84 was only just blocked as a sock of Cuddlyable3 (or as his IP).  Would this not mean that Hayttom is likely an active sock identifiable with IP 84? μηδείς (talk) 01:26, 26 September 2015 (UTC)
 * If a checkuser did find a technical match between an IP and a username, he would be prohibited from saying so due to the foundation's policy. It is thus standard practice to decline CU requests if there is only one account and one or more IPs. The checkuser team will occasionally conduct such checks, but you'll never hear about them. Someguy1221 (talk) 01:39, 26 September 2015 (UTC)
 * Thanks for the explanation. μηδείς (talk) 02:01, 26 September 2015 (UTC)


 * Hayttom's actions did make me curious, so I looked into it. Based on behavior, he does not seem to be the same person as Cuddlyable3, cuddly's socks, or the IP (who all have behavioral similarities). Aside from the interest in grammar corrections and the reference desks, I feel like the similarities end. Cuddly and his socks/IP edit at predicable times of day and with predictable edit summaries. These features have remained true of Cuddlyable3 from his earliest edits in 2007 up to his IP edits this week. Hayttom has been around since 2006 and doesn't seem to have significant overlap with Cuddlyable3 (socks and IP included), nor has he ever shown those sorts of behaviors or edit vs. time distributions. Someguy1221 (talk)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

AllBestFaith showed up to Wikipedia about December 2015. Since then, they have almost exclusively edited at the Reference Desks. I have had some suspicion, based on the Athena-like birth knowing the conventions of Wikipedia, coupled with a precocious knowledge of the Ref Desks and the regulars therein that this account was not a new user, but someone familiar with Wikipedia. I was not sure who it was, but recent events have given me a clearer picture, based on behavioral evidence, as to who this is. I'm pretty certain this is Cuddlyable3, who has been known to create socks to return to the reference desks, and who was banned from Wikipedia back in 2011 for disruption at the Reference Desks, mostly centering around personal attacks of other editors, and a pre-occupation with correcting mistakes, usually around accidental its/it's or your/you're errors. My evidence that this is the same person centers around the following evidence: I'm not going to request a CheckUser, as I'm pretty sure the last confirmed C3 sock is WELL over a year old, but I would like an administrator to look over this evidence, especially, , who I believe are all well familiar with C3's particular characteristics, and can give this a more thorough reading for me. Thanks! Jayron 32 19:52, 17 October 2016 (UTC)
 * 1) A pre-occupation with certain reference desk regulars, myself included, whom he sees as enemies.  See This conversation here where he becomes combative, repeatedly berating me for a bad answer, even after I apologized and conceded that I gave an inaccurate answer.
 * 2) A fixation on correcting possessive pronoun/conjunction mistakes, which AllBestFaith has taken up, most recently here but I can dig up several earlier examples if needed.
 * 3) The peculiar use of the circumflex in the spelling of "role", c.f. here and here for AllBestFaith, and here, here, and here for three examples from C3; neither of these is exhaustive, merely representative.
 * 4) These two edit count reports, using X!s edit count utility, show that C3 and ABF edit at the same times of day: C3 and ABF

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I agree this is Cuddlyable3, and came to the conclusion independently. I first made the connection when AllBestFaith complained about a grammar error of mine [//en.wikipedia.org/w/index.php?title=Wikipedia:Reference_desk/Science&diff=prev&oldid=724785868] which is classic Cuddylable3 behaviour. This was on the on the heels of [//en.wikipedia.org/w/index.php?title=Wikipedia:Reference_desk/Miscellaneous&diff=prev&oldid=724662170] which to be fair was a resonably confusion situation mostly due to my mistake (although I don't think AllBestFaith's second comment added anything useful after BB's comment but it didn't matter). A quick look at the edit history at the time showed an interest in and knowledge of electrics and electronics especially around audio equipment, radio equipment and LEDs all affirming my suspicions since I recalled similar from Cuddlyable3. I missed [//en.wikipedia.org/w/index.php?title=Wikipedia:Administrators%27_noticeboard/Incidents&diff=prev&oldid=704624258] which would have raised strong concerns, since editors with a tenious right to be here shouldn't be much involved in dealing with alleged problems of others. (I couldn't be bothered with an SPI, but considered warning the editor but in the end did not.) Since then, I've further noticed these same interests. I've also noticed Reference_desk/Archives/Miscellaneous/2016 September 13 strongly suggesting a connection to Norway. It's possible to dig up diffs, but I think this long term IP User:84.209.89.214 and User talk:Cuddlyable3 is enough to establish a Norwegian connection for CA3. Nil Einne (talk) 03:36, 1 November 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * based on the evidence here. Please block. Ivanvector (Talk/Edits) 19:22, 3 November 2016 (UTC)
 * Blocked, closing. Katietalk 18:11, 4 November 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

New account was created the day (October 18) after the last account was reported for SPI (October 17); this was standard C3 behavior during his last set of visits a few years back. The account was left dormant until after the last one was blocked, and has recently showed up brand new at the Ref Desks with a clear knowledge of Wikipedia conventions. Also, shows an interest in electrical and electronics topics, a C3 favorite. I'm flagging this one very early for a checkuser, because we now have a recently blocked confirmed sock to work off of. If a checkuser could look into this, it would be most helpful. Jayron 32 12:44, 21 November 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅:
 * Blocked, tagged, closing.--Bbb23 (talk) 14:52, 21 November 2016 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 14:52, 21 November 2016 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 14:52, 21 November 2016 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 14:52, 21 November 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

A user posted a query on my talk page in January 2016, see. He did not sign the post, but the edit history shows that it was User:AllBestFaith. This user was later established to be a sockpuppet of the banned user User:Cuddlyable3 and blocked indefinitely. Today User:Blooteuth posted a follow-up query on my talk page to the query that AllBestFaith had posted last year, see. Blooteuth is therefore another sock of Cuddlyable3. Further evidence comes in the form of an interest in the it's/its error, knowledge of Norway and the fact that Blooteuth's first edit was on 24 November 2016, not long after the most recent sock (User:DaDoRonRon) had been blocked. -- Viennese Waltz 12:06, 24 November 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
I have indef blocked the user as a sock of Cuddlyable3. The above were enough to make it clear that they are the same: furthermore, here they continued the exact same behaviour that got them indef blocked in the first place, so it's not some benevolent sock editing without disruption. Fram (talk) 13:00, 24 November 2017 (UTC)
 * Sock tagged based on Fram's observations. Closing. Ivanvector (Talk/Edits) 13:52, 24 November 2017 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same pattern of behavior as all prior C3 socks. 1) Primarily edits Ref Desks, shows up at the Ref Desks with the earliest edits from the account with a precocious knowledge of the Ref Desks, their conventions, and the principal contributors there. 2) Minimal main space editing, except for a particular interest in articles about electrical engineering and or weaponry and related topics: DroneB edit1, DroneB edit2, DroneB Edit3, Edit from Blooteuth, confirmed C3 sock, edit from AllBestFaith, confirmed C3 sock, edit from C3 themself. Other mainspace edits are spelling or grammar mistakes fixes, with a particular edit summary style of: sp and " " marks or grammar and " " marks, i.e. DroneB here, Blooteuth here, DriveByWire, another C3 Sock, here, C3 themself here, also a particular penchant for correcting the grammar of other refdesk users, ESPECIALLY around the accidental inclusion or emission of apostrophes in the homophones its and it's, which has been a particular bugbear for them. DroneB here, Blooteuth here, and many further examples of the It's/Its preoccupation can be found all over the SPI archives. Known to use or store sleeper accounts in the past, maybe a CU would be useful, but maybe not given the gap between this sock and the last one. -- Jayron 32 19:19, 28 April 2020 (UTC) Jayron 32 19:19, 28 April 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * . ST47 (talk) 23:32, 4 May 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

User is from Norway, per WHOIS and Geolocation. C3 is known to be from Norway. User edits almost exclusively on the RefDesks, and has a precocious knowledge of RefDesk personalities. User has a pre-occupation with the good-faith grammatical errors, (see SPI archives for numerous examples from past), see here and here for the it's/its error (a common bugbear for C3) and this for a rant from this user which is similar in style and tone from rants C3 has been known to give in the past. C3 also had a propensity for editing the comments of other people when they angered him for various reasons, like this and this from this IP address. Also, other than a single edit, this IP address only became active after the last C3 account was blocked. Requesting another admin review the evidence and apply blocking & tagging as necessary. Thank you. Jayron 32 19:47, 17 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The editing interests and style are unmistakable, and the date when the IP started editing is telling. The IP appears stable, blocking (without tag) for one year. Girth Summit  (blether)  16:11, 1 January 2021 (UTC)