Wikipedia:Sockpuppet investigations/Truesayer/Archive

22 February 2011

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

All single purpose accounts solely making favourable edits in relation to British MP Shahid Malik. Mostly UNDUE or NPOV edits although the occasional justified edit also. For example, all very keen on retaining blatantly undue section relating to Shahid Malik's pool playing activities. In particular his winning of a non notable competition and making an issue of the prize money being donated to charities (even though there was no option other than to donate the prize to charity). Also keen to add/keep UNDUE introduction section giving great detail on boundary changes in the constituency with the implication this was the sole reason for Malik's election defeat, (the end result being the section fails to summarise the article):  

Examples of disruptive edits by DAVIDBrave wrongly removing NPOV tag from article on four occasions despite three different editors restoring it.   

Both DAVIDBrave and truesayer use extremely similar tone and language in discussions and edit summaries: "hence" DAVIDBrave: DAVIDBrave: Truesayer:

"fact" / "factual" DAVIDBrave: DAVIDBrave: Truesayer:

"element" DAVIDBrave: Truesayer :

"alleged breach of the Ministerial code" DAVIDBrave: Truesayer: [Truesayer:

Timing of edits is very similar also with two editing periods for both accounts DAVIDBrave 3.30-5.40 GMT and, 12.45-13.50 GMT Truesayer: 1.20 GMT-4.50 GMT and 12.16-15.38 GMT

User:Higginsthethird is the earliest account but evidence in terms of timing/language is less blatant so I didn't list him as the main Puppeteer (note that the term "Higgins" is likely to reference a famous snooker/pool player). Some examples:  

In summary I believe someone is creating different accounts over time to make it appear as if there are several sources of support for NPOV/UNDUE material in the Shahid Malik article. Shakehandsman (talk) 05:11, 22 February 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * It's possible they're all the same, but there's no overlap in edits here - and really no abuse of sockpuppet accounts per se. I'm closing with no action for now (as two of the accounts are stale), but relist if there's further action - or actual multiple account abuse. —  Hello Annyong  (say whaaat?!) 16:23, 22 February 2011 (UTC)

23 February 2011

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

As suggested I am now reopening this due to Truesayer resuming editing and therefore socking.

He's made exactly the same disruptive edit that DAVIDBrave has repeatedly been told to stop making (even by admins). Also note the timing of the new edits fitting in with that of DAVIDBrave

Even worse is the fact that Truesayer is now attacking me in edit summaries falsely implying bias against ethnic/religious minorities on my part. For the record I've edited articles of literally hundreds of articles of MPs on Wikipedia and have received hostility from proven coi editors from most parties. I had absolutely no idea of the religion of most of those people and as the edits clearly show I was simply going through adding categories for former BBC employees who are now in politics which is the only factor all those people have in common. If I'm known for one thing on this site it's my commitment to equality so these claims couldn't be any more ridiculous. Further still Truesayer's supposed list of my recent edits is rather false and omits mentioning every single one of recent edits to white male MPs, so as well as attacking me he's also giving misleading information. Shakehandsman (talk) 04:59, 23 February 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
The two accounts are highly the same user. Frank &#124;  talk  13:46, 23 February 2011 (UTC)
 * Alright, now we've got some overlap. Endorsing for a checkuser to confirm, and also maybe a sleeper sweep. —  Hello Annyong  (say whaaat?!) 05:09, 23 February 2011 (UTC)
 * Alright. Blocked and tagged the sock, and blocked the master for 24h for puppeting. —  Hello Annyong  (say whaaat?!) 14:10, 23 February 2011 (UTC)

03 April 2011

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

Making exactly same types of edits as Trusayer and previous sock, in particular adding synthesis and undue material regarding boundary changes to the Shahid Malik article. All accounts also remove sourced information or sources pertaining to Malik's abuse of the Parliamentary expenses system or pretend he was not found guilty of any wrongdoing (he was cleared in some cases but not in others).

Also they are all SPA, editing at similar times and with similar username choices. I.e. two parts to each name with one aspect implying accuracy or correction truesayer, wikistraight, etc. This theme continues in terms of language use in comments/edit summaries, all accounts fond of the term "facts" for example.

See previous SPI for more diffs for previous accounts (there are a great many diffs relating to the emphasis of the boundary changes in particular).

On a related note I suggest somehow protecting this page from edits by new editors as looking though the history of the article shows this sort of problem is very long standing with SPAs being created, making inappropriate edits and then abandoned usually once warnings were received. New accounts then appear with the cycle repeating again and again. e.g. Shakehandsman (talk) 05:15, 3 April 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
User:Truesayer and User:Wikistraight are highly to be the same user. Frank &#124;  talk  15:55, 3 April 2011 (UTC)
 * It's likely, but I'm endorsing to confirm the pattern here. Truesayer hasn't edited in a month anyway, but if he's avoiding scrutiny, we should know that. —  Hello Annyong  (say whaaat?!) 14:19, 3 April 2011 (UTC)
 * Blocked and tagged the sock. —  Hello Annyong  (say whaaat?!) 16:24, 3 April 2011 (UTC)

Unblock-en
Just a note -- this account has requested unblocking via the unblock-en mailing list, and claimed they were not socking. The unblock request was denied, and given that the user claimed their name was David (matching the DAVIDbrave account), the above sockpuppetry appears to be soft-confirmed. &rArr;  SWAT Jester    Son of the Defender  02:48, 11 April 2011 (UTC)

26 April 2011

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

As with the previous sockpuppets/master Bigbaddaddy is a SPA only editing the Shahid Malik article. He shows similar editing themes and use of language to the above accounts.

Again the account is keen on over-emphasising boundary changes as the cause of Malik's election defeat with any possibility that his expenses claims played a role removed. Unflattering material is also removed such as Malik's employment of his father as a case worker

Editing times are similar particularly when compared to Truesayer with 11pm-12pm GMT being the most notable overlap.

Similarities in use of language are found in edit descriptions and talk pages. They again include: "facts" "hence" (see above for uses of these terms by other socks/master)

Other new terms identified include: "bias" Bigbaddaddy Truesayer

"tidy up" / "tidying up"Bigbaddaddy    Truesayer  Shakehandsman (talk) 02:36, 26 April 2011 (UTC)

Given that 3 accounts have now been banned is it possible to check for more please as I do have suspicions about certain other dormant accounts. Thanks.--Shakehandsman (talk) 02:57, 26 April 2011 (UTC)


 * Update There's now an IP User:89.194.81.1 behaving in the same fashion, this time deleting all information relating to expenses wrongdoing..--Shakehandsman (talk) 17:49, 27 April 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Given that this went to unblock-en (see archive) I'm endorsing for confirmation. —  Hello Annyong  (say whaaat?!) 03:34, 27 April 2011 (UTC)
 * , but there is not much we can do about blocking the underlying IPs at this point.. Dominic·t 08:43, 27 April 2011 (UTC)
 * Hm, alright. Blocked and tagged. —  Hello Annyong  (say whaaat?!) 02:12, 28 April 2011 (UTC)

28 April 2011

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

Three IP addresses (all Orange IPs) now vandalising the page deleting all examples of expenses wrongdoing and now again vast over expanding the boundary changes information even though that issue has been discussed and agreed countless times already in the talk page. Also assuming it's the same person then they've broken 3RR already. Timing of the edits basically a perfect match for Truesayer as is tone and language.

Also Special:Contributions/89.194.45.128 has started quite an extensive attack on me, messaging every single person I've had significant disputes with in my 5 years here and questing my editing/conduct and making various allegations. Of course once again they deny any connection with Truesayer so I'd appreciate confirmation no matter how obvious this may be. I've also requested page protection for the Shahid Malik article although given that people here know so much more about the case perhaps you're better placed take action on this?

Also presumably now we have wrongdoing by actual IPs can action now be taken there? It might be useful if others can put the page on their watchlist as obviously I'm getting all the hassle/attacks as revenge for exposing the sockpuppets and reverting the vandalism. Thanks.--Shakehandsman (talk) 02:37, 28 April 2011 (UTC) Shakehandsman (talk) 02:37, 28 April 2011 (UTC)
 * Also for purposes of completeness another associated IP with previous socks is User:94.175.130.191 although that address hasn't actually breached any rules as of yet.--Shakehandsman (talk) 03:34, 28 April 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Shahid Malik is protected and I've blocked two of the IPs for evasion. The range to take down all the 89.x IPs has a lot of collateral damage, so there isn't much that can be done there. —  Hello Annyong  (say whaaat?!) 01:11, 29 April 2011 (UTC)

29 April 2011

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

Previous IP socks went through my talk page and messaged anyone I had disagreements with (including sockpuppet cases from 2009!). Jobone is a brand new account and he is going through my most recent edits and deleting any sections I have contributed to. Language very similar to Truesayer as is timing.--Shakehandsman (talk) 02:56, 29 April 2011 (UTC) Shakehandsman (talk) 02:56, 29 April 2011 (UTC)
 * Also worth noting that one of the previous socks edited the [[Ed Balls] article in the past.--[[User:Shakehandsman|Shakehandsman]] (talk) 03:32, 29 April 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I'm sick of this crap. Endorsing for sleepers and any sort of IP blocking that can be done. —  Hello Annyong  (say whaaat?!) 02:58, 29 April 2011 (UTC)
 * IP blocking isn't possible at the moment. This account is a match and has no sleepers.  TN X Man  13:13, 29 April 2011 (UTC)
 * Jobone hasn't edited since this was opened. Closing for now with no action taken, but relist if things flare up. —  Hello Annyong  (say whaaat?!) 03:17, 6 May 2011 (UTC)

16 May 2011

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

Yet another Orange IP address appearing immediately after semi-page protection has ended. Again over-emphasising boundary changes. Now even taking issue with the inclusion of new material such as the inclusion of Malik's middle name (sourced of course). . Probably not much you can do but worth listing so everyone is aware of the issue and so we have a record. Shakehandsman (talk) 17:51, 16 May 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've protected the Shahid Malik article for a month. —  Hello Annyong  (say whaaat?!) 19:10, 16 May 2011 (UTC)

17 May 2011

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

Summary: I've found a few more accounts and uncovered some new links between the different ISPs.

user:94.170.152.170 is a Telewest IP. It removed details of Malik's employment of his father from the Shahid Malik article. . It also messaged User:Ged UK to appeal the semi-page protection of the Malik article put in place in April.. User:Ged UK informed the IP that it was in fact User:DragonflySixtyseven who had protected the page and a similar appeal can be found on that user's talk page also, this time by Orange IP User:109.249.221.129.

Most significantly of all user:94.170.152.170 describes to User:Ged UK how he has left me a message on my talk page. In fact the message was written by previously reported sock User: 89.194.71.167. Therefore we now have proof that the both Orange and Telewest IPs are being used by the same person. and just to cement things further the Telewest IP uses the same language as Orange IPs. ( wiki, libelous, defamatory, manipulative/manipulate).

Finally note that Jobone (previously reported possible sock but not proven) has now messaged the person semi-protecting the Malik article, just as occurred with the IPs known to be socks.

Anyway, I don't believe Telewest has an issue of random IPs each time someone goes online so presumably unlike the Orange addresses a block may be possible there? Also this link between the Orange and Telewest IPs may be of use. Shakehandsman (talk) 06:39, 17 May 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Please note that has been checked before (see archive). TN X Man 11:27, 17 May 2011 (UTC)
 * Per behavioral evidence I've blocked Jobone, and I blocked the 94.170 IP for two weeks for evasion. —  Hello Annyong  (say whaaat?!) 12:11, 17 May 2011 (UTC)

25 June 2011

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Evidence is pretty obvious to anyone familiar with the case though it seems they are continuing to modify their behavior slightly and once again starting off editing other articles before moving onto Malik. Edits are less blatant now so I suppose you could argue we're making progress but I don't think Truesayer is ever going to stop socking. More detail if requested but if this is going to be a permanent exercise then I think it may be detrimental to provide complete detail of everything here as that will only aid the learning process of the offender. Shakehandsman (talk) 00:25, 25 June 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Hm.. I'm endorsing for a check against and . —  Hello Annyong  (say whaaat?!) 00:35, 25 June 2011 (UTC)
 * ✅ TN X Man  13:44, 26 June 2011 (UTC)
 * Blocked and tagged. —  Hello Annyong  (say whaaat?!) 14:00, 26 June 2011 (UTC)

04 July 2011

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Another blatantly obvious sock, this time questioning my editing and criticising me for all the above bans of socks. IP also quotes a previous sock who called for me to be banned. Once again an Orange IP address operating from a similar location to all the others. Sock also questioning the actions of User:HelloAnnyong who in fact has acted impeccably throughout these abuses of Wikipedia, showing a huge amount of patience. User:Brandon has already protected the Malik article though I'm adding this evidence here so we have a full and up to date record of the saga.

Also please be aware of a current OTRS ticket apparently from the article subject 2011062910001967 which may or may not be relevant here. I don't have the ability to view OTRS tickets so don't know if its contents, language or exact timing, though it seems the ticket emerged sometime before the latest episode of socking. Shakehandsman (talk) 05:55, 4 July 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ and blocked. Brandon (talk) 09:18, 4 July 2011 (UTC)

08 July 2011

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Just adding the latest Orange IPs for this case. It's all very obvious as usual and Brandon has already checked and the first one and blocked it for three months. I've since uncovered a second Orange IP posting the same content elsewhere at the same time. Shakehandsman (talk) 15:52, 8 July 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Both IPs are blocked. —  Hello Annyong  (say whaaat?!) 23:04, 8 July 2011 (UTC)

15 July 2011

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Pro forma report. I will be submitting evidence provided by Shakehandsman to the CU mailing list. Sh i r ik ( Questions or Comments? ) 16:03, 15 July 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Self endorsed -- Sh i r ik ( Questions or Comments? ) 16:05, 15 July 2011 (UTC)

❌ –MuZemike 20:24, 16 July 2011 (UTC)
 * No action Sh i r ik  ( Questions or Comments? ) 20:32, 16 July 2011 (UTC)