Wikipedia:Sockpuppet investigations/River Stumpf/Archive

14 July 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

This is an odd case which combines fantasizing or wishful thinking, lots of hoax material developed in userspace, and the use of multiple accounts in mainspace to fight over article text. The latter part is why this case is being filed, but first here's the hoax stuff, for the record:

The River Stumpf account was created on July 27, 2008, telling the world his 1994 birthday and location in Minnesota. He told the world his favorite band was Maroon 5, and also Fall Out Boy. He stopped editing in December 2008, after having worked on articles related to Maroon 5 and Fall Out Boy. There was one personal attack he made against, after Wolfer68 prodded a song article that had been started by River Stumpf.

Fast forward to August 2012. The first edit by the new account Gifchief is to post a hoax album article by a nonexistent band named Soundcheck. A few hours later Gifchief renames this fantasy band "River Stumpf & the Spooner Brothers". For many months, the only edits by Gifchief were similar to this, harmless fantasizing on his user page. As well, Minnesota IPs 96.42.113.106, 204.15.155.65 and 64.83.214.23 took part in developing the River Stumpf stuff directly on the Gifchief user page. In December 2013, Mockchief began to play with this fantasy on the Gifchief user page, followed in March 2014 by Minnesota IP 63.152.167.223 and Tellafriend.

The same sort of fantasizing about a musical artist named River Stumpf was happening on the Mockchief user page starting in November 2013. Gifchief2 took part in the fun starting January 2014, as well as Gifchief, Tellafriend, and Minnesota IP 24.179.196.177.

User Gifchief uploaded a ton of images which were deleted, all of them related to Maroon 5 or Fall Out Boy or Patrick Stump, the leader of Fall Out Boy. Interestingly, Stump's birth name is Stumph.

So now for the abuse of multiple accounts. You can refer to the editor interaction tool if you wish.

On 8 July 2014, Gifchief changed the dance-pop genre of the "Maps" article to pop rock. Somebody removed that, so on 14 July, one of the Minnesota IPs changed it back to pop rock, getting rid of dance pop. We've established that Gifchief and IP 24.179.196.177 were both interested in the River Stumpf fantasy/hoax articles in userspace, so this bit of edit warring looks like the abuse of multiple accounts.

At the article about an album called Issues, Mockchief added genres nu-metal, metalcore, and post-hardcore on 26 February 2014. Someone removed post-hardcore, so Gifchief restored the post-hardcore genre on 3 March. 

I'm not asking for checkuser because the duck evidence is so strong. Only one person would be interested in fantasizing about a musical artist named River Stumpf.

After this SPI concludes, if the various user pages are not deleted I will PROD them because of the hoax bands that they have contained at one time or another. Until then, I would like the user pages to remain undeleted so that the DUCK behavior is plain to see. I would also like to ask for the accounts Mockchief, Gifchief2 and Tellafriend to be indefinitely blocked. I would like the user to choose whether he keeps his original River Stumpf account or the later Gifchief account, and after he selects, the other one should be indeffed. Basically, the guy should operate with just one account. Binksternet (talk) 20:55, 14 July 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Based on duck (thanks for the report connecting everything), I've indeffed and tagged all the named puppets, no matter when they edited last. I also blocked for one month because he edited recently. I took no action against the other IPs as they are too stale, and I left the master unblocked and untagged because he hasn't used that account in so long.--Bbb23 (talk) 20:55, 19 July 2014 (UTC)

15 January 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

This user added Singles (Maroon 5 album) to articles they have composed - this article was composed by User:Pistolplay3, who was banned for being a sockpuppet of User:Pistolplay. This evidence seems likely that this user is avoiding a ban by using a sockpuppet. Full disclosure, this is not based on recent activity, but wanted to report a possible ban-avoidance. Garchy (talk) 22:31, 15 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * tagged and blocked indef as a sock per behavioral evidence. Closing case. Mark Arsten (talk) 02:01, 16 January 2016 (UTC)

22 January 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Pattern of activity shows a repeat of the same types of edits the other puppets were doing on Dance Gavin Dance and other related pages (these edits have been challenged by other editors). Requesting CU as the last sockpuppet was able to be resolved solely based on behavioral patterns and blatant username User:Pistolplay4. Garchy (talk) 23:41, 22 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅ to each other:
 * Clutchreality was blocked as a sock of River Stumpf. It's clear technically and behaviorally that River Stumpf, a much older account than Pistolplay, is the master. I've blocked and tagged Strawberrygirls and tagged or retagged the others. Closing.--Bbb23 (talk) 05:15, 23 January 2016 (UTC)
 * I had Brokenfame on an offwiki notepad. I was going to file in a few days to save resources because I suspected he'd immediately make another account. I hope that's okay. Oh, and I was going to file a fresh SPI with User:Pistolplay as master. I actually don't see him listed here or in the archives, only mentioned. Ah, scratch that last bit. I see the Pistolplay -->River Stumpf move now. Anna Frodesiak (talk) 05:23, 23 January 2016 (UTC)
 * Clutchreality was blocked as a sock of River Stumpf. It's clear technically and behaviorally that River Stumpf, a much older account than Pistolplay, is the master. I've blocked and tagged Strawberrygirls and tagged or retagged the others. Closing.--Bbb23 (talk) 05:15, 23 January 2016 (UTC)
 * I had Brokenfame on an offwiki notepad. I was going to file in a few days to save resources because I suspected he'd immediately make another account. I hope that's okay. Oh, and I was going to file a fresh SPI with User:Pistolplay as master. I actually don't see him listed here or in the archives, only mentioned. Ah, scratch that last bit. I see the Pistolplay -->River Stumpf move now. Anna Frodesiak (talk) 05:23, 23 January 2016 (UTC)
 * Clutchreality was blocked as a sock of River Stumpf. It's clear technically and behaviorally that River Stumpf, a much older account than Pistolplay, is the master. I've blocked and tagged Strawberrygirls and tagged or retagged the others. Closing.--Bbb23 (talk) 05:15, 23 January 2016 (UTC)
 * I had Brokenfame on an offwiki notepad. I was going to file in a few days to save resources because I suspected he'd immediately make another account. I hope that's okay. Oh, and I was going to file a fresh SPI with User:Pistolplay as master. I actually don't see him listed here or in the archives, only mentioned. Ah, scratch that last bit. I see the Pistolplay -->River Stumpf move now. Anna Frodesiak (talk) 05:23, 23 January 2016 (UTC)

23 March 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

behavior pattern - continuing to edit where former sockpuppets left off Garchy (talk) 20:23, 23 March 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

A commonality can be seen in the use of Reddit as a reference, specifically the Reddit conversation (subreddit) about Dance Gavin Dance. Here, the most recent sock uses a Reddit reference which is https://www.reddit.com/r/dancegavindance/comments/4anbqw/just_a_reminder_the_whole_warped_tour_lineup_will/d13njpz. Another one from the same edit is https://www.reddit.com/r/dancegavindance/comments/4aecnw/jonny_craig_and_tilian_pearson_have_announced. In this edit, confirmed sock Strawberrygirls also used a Reddit source from the same subreddit: https://www.reddit.com/r/dancegavindance/comments/34omgb/do_jon_mess_lyrics_mean_anything/. Note that Reddit discussions are not normally considered a reliable source, so citing Reddit is rare. Only somebody who follows this subreddit would even know about it, so that really narrows the field when we are considering possible socks. Binksternet (talk) 23:34, 23 March 2016 (UTC)
 * Wondering where this request stands? Thanks, Garchy (talk) 13:52, 31 March 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅, blocked and tagged.-- Jezebel's Ponyo bons mots 21:56, 1 April 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Pattern of behavior - creating a new account and then editing the same articles (in the same style) in a short time span until it is blocked. Requesting CU for confirmation. Garchy (talk) 13:28, 6 June 2016 (UTC)
 * Hi, this Sockpuppet case with River Stumpf (and related puppets) goes way back, and the pattern of behavior can be seen by looking at the contributions of the User:goldmedalribbon account - an account created to continue the editing patterns of the other related puppets. The pages edited on are extremely specific and narrow - a confirmed sock created this page, and this new account continues the editing pattern here . Looking at this puppets contributions you can see that the only pages edited are the same pages that are edited by the other socks . Pinging , who was able to also help provide correlations for the last puppet, User:ThrowingInTheTowel — Preceding unsigned comment added by Garchy (talk • contribs) 14:23, 7 June 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * I was mentioned here, but in looking at this case, I don't see any smoking gun. As far as I can tell, the suspected sock hasn't repeated any of the edits of the other socks. It is interesting to see that the suspect is editing a handful of obscure articles that were previously edited by River Stumpf socks, so that's the closest connection. Binksternet (talk) 17:52, 7 June 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - In order to facilitate and expedite your request, please provide diffs to support your case. Please give two or more diffs meeting the following format:
 * 1) At least one diff is from the sockmaster (or an account already blocked as a confirmed sockpuppet of the sockmaster), showing the behaviour characteristic of the sockmaster.
 * 2) At least one diff per suspected sockpuppet, showing the suspected sockpuppet emulating the behaviour of the sockmaster given in the first diff.
 * 3) In situations where it is not immediately obvious from the diffs what the characteristic behaviour is, a short explanation must be provided. Around one sentence is enough for this. Kevin ( aka L235 ·&#32; t ·&#32; c) 22:44, 6 June 2016 (UTC)
 * - Please, compare Goldmedalribbon to (see:  vs/ ).   Vanjagenije   (talk)  20:34, 8 June 2016 (UTC)
 * I noticed some other similarities on other pages too. Tree City Sessions: Goldmedalribbon, ThrowingInTheTowel, Dance Gavin Dance: Goldmedalribbon, ThrowingInTheTowel. With that, I ran a check and found Goldmedalribbon to be highly to ThrowingInTheTowel. I've blocked and tagged the account. Mike V • Talk 21:09, 8 June 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Hi, The pattern of editing is directly continuing the changes/edits the sockpuppets have made prior - specifically, editing obscure articles (with the same tag/genre changes, as well as template changes that match those changes reverted from the previous puppets. Garchy (talk) 20:52, 14 July 2016 (UTC)
 * Please see the contributions for 2 recent confirmed socks (I've included diffs) - all the socks have a pattern of editing the same articles, articles that are obscure and exhibit similar patterns in what is being edited (list to flat list switches, genre changes, adding tags to other pages that lead to pages confirmed socks have created.

+ ->
 * ->

Of course there is a chance I could be wrong, however I believe there is a strong likelihood given the correlations, and the fact that the user has done this 4 times already in 2016. I would like to ask Please defend yourself if this is incorrect - I noticed the user removed the notification I placed on their talk page but have not addressed the issue. Thanks, Garchy (talk) 14:09, 15 July 2016 (UTC)
 * Hi Checking on on the status of this investigation. Garchy (talk) 17:45, 18 July 2016 (UTC)
 * If you are unable or too busy to continue this investigation can you please delegate this to a CU who can? Time is of the essence with cases like this, and it's been sitting, with evidence provided, for nearly a week. Garchy (talk) 14:23, 20 July 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Please provide diffs that sufficiently establishes a connection between the suspected account and one or more previous sock accounts. Note that cases without supporting evidence may be summarily closed. Mike V • Talk 23:04, 14 July 2016 (UTC)
 * Hollywoodthecracked is ✅ to Goldmedalribbon. Mike V • Talk 17:13, 20 July 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

This IP has blanked the "confirmed sock" template from a confirmed sock - [] - this IP also has added in the exact same +4,132 edit as a confirmed sock, which leads me to suspect this is the exact same user. [] Garchy (talk) 13:42, 16 August 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * We won't openly run a check on an IP address. I have blocked the IP for 1 week based upon the behavior. Mike V • Talk</b> 18:54, 16 August 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Behavioral evidence suggests this is another one of many accounts attributed to River Stumpf. This user restricts their edits to the grindcore/hardcore music scene, as seen via these confirmed socks here and here. This account was created right after the previous socks were blocked, and immediately embarked upon some in-depth editing, suggesting this is not a new user, but rather one continuing their previous mission. One specific run of the Editor Interaction Analyser seems to confirm at the very least a strong correlation in pages edited here. Garchy (talk) 19:42, 3 March 2017 (UTC)
 * This user removed the notice about this investigation, and has continued editing. Is this still in the pipeline for review? Garchy (talk) 19:34, 22 March 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Looks like obvious DUCK because of the editor interaction analysis. Binksternet (talk) 20:27, 22 March 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  18:37, 14 April 2017 (UTC)
 * Checkuser comment - Previous accounts are so this will need to be reviewed on behavioural evidence. -- Euryalus (talk) 05:05, 6 March 2017 (UTC)
 * Yes, this is still waiting. Since technical analysis is not possible, we can only judge upon behavioral evidence. You failed to provide any strong evidence of sockpuppetry. You should provide some WP:diffs that show similarity in editing between the alleged sock and the master (or precious socks).  Vanjagenije  (talk)  20:12, 22 March 2017 (UTC)  Vanjagenije   (talk)  20:12, 22 March 2017 (UTC)
 * Indeffing and closing.