Friday, September 16, 2011

Off With Her Head!

'When I use a word,' Humpty Dumpty said, in rather a scornful tone, 'it means just what I choose it to mean — neither more nor less.'  Lewis Carroll
Farce: an empty or patently ridiculous act, proceeding, or situation.
Mirriam_Webster
As many of you know, WAMcKinley (WAM) was banned from SBFII earlier this summer.  She had not been posting, but had had some private discussions with SBFII members.  She was accused of “bullying” in these private conversations, though the exact nature of the alleged bullying was not revealed to her. 

WAM denied the charge and asked for “a means to redress this issue as I feel it is in no way fair.” In a reply, WAM was told the following:
“You still have the possibility to address your self to the Appeal Panel, from our part this is the last communication with you."
WAM informed SBFII that she intended to do so.  The appeal was delayed because the chair of the Appeal Panel had some medical issues.  So WAM waited, fully expecting her appeal to go forward.

However, it was not to be.  WAM received a message in September, signed SBFII, informing her that contrary to the earlier message,  she would not be allowed to appeal. (For more details: Sentence First - Verdict Afterwards )
“After consulting two of our our legal advicers, we are very sorry to have to inform you that we cannot allow for an appeal in your circumstances.
According to our bylaws an appeal is only possible after the forth warning and is meant to prevent further sanctions as described in our sanction rules.
An administrative ban is not open to appeal.”
Let’s examine the rules and bylaws of SBFII.  The warnings/sanctions escalate in severity as you read down the list.    The first four sanctions are temporary.  The rest are permanent.  The last sanction listed is the most severe of all, a complete ban.
Sanctions Policy

Warnings stay on record for 12 calendar months.
1. First warning - No sanctions, but a PM reminder of the rules and notification of warning.
2. Second warning - Moderated posts for 7 days. *Pre – Approval status
3. Third warning - Removal of posting and PM privileges for 30 days. *Read Only status
4. Fourth warning - Removal of posting and PM privileges for six months.*Read Only status
5. Fifth warning - Permanent removal of posting and PM privileges. Read-only privileges. *Read Only status
6. At the discretion of the Administrators, those who continuously disrupt the forum or violate Rule #3 persistenly may be put on indefinite pre-mod
7. For very serious offences member will be issued a complete ban (flagrant violation of the rules, bullying, cyber stalking and spamming) 
Note: You can appeal the decision to the Appeal Panel as of the 4th warning.
Here is the relevant section of the bylaws.
Article VIII -Appeal Panel
The Appeal Panel is a committee whose mandate is to receive appeals from members of the forum.susan-boyle.com. The appeal Panel consists of one (1) chairperson who is not a member of Staff or a member of the Board, one (1) Administrator of forum.susan-boyle.com, preferably not a Director, one(1) moderator of the forum who is not a Director, and two (2) members of the voting membership who are not Directors. 
The function of the Appeal Panel will be to hear appeals of sanctions received as a result of serious breaches of the rules committed by members who have acquired a sanction of the removal of posting and PM privileges of six (6) months (fourth warning) or more, as decided by the forum Staff in accordance with published Sanctions. Decisions of the Appeal Panel are final and will be made within three (3) weeks after the request for appeal has been made. The decisions will be made by majority vote.
The rules list the sanctions in order of severity.  The rules say that “you can appeal the decision to the Appeal Panel as of the 4th warning.”  The bylaws state that the Appeal Panel will hear appeals of “members who have acquired a sanction of the removal of posting and PM privileges of six (6) months (fourth warning) or more..”

The obvious purpose in allowing only the most severe sanctions to be appealed is to prevent clogging the appeal committee with appeals for minor offenses and sanctions.  The first three sanctions are short term and would likely expire before an appeal was completed.  Only as things get more serious and the sanctions last longer, is there an opportunity for appeal.

By using the terms “as of” and “or more”, they are recognizing the increasing severity along the continuum of offences and sanctions.  The term “as of” generally means starting at that point and going  beyond.  “Or more” means essentially the same thing, a sanction that is this severe or more severe.   A ban is the final sanction on the list, more severe than any of the previous ones.  It is clearly “more” serious than the fourth sanction, a punishment far beyond the fourth sanction.  As such it ought to be appealable. 

The bylaws do not prevent an appeal of a ban.   Nor were they were intended to.

When the meaning of a rule or statute is unclear, it can be instructive to examine the intentions of the author of the rules and bylaws. It can be helpful to examine other writing from the time the rule was written.  We can safely presume that the administration is responsible for the rules as well as the revised bylaws, having either written or approved them.

The bylaws were posted on May 27, 2011.  WAM was banned on June 12.  She wrote to Kalua and received a reply.  It was signed “The administration”, so it was clearly intended to be an official response.  She was told “You still have the possibility to address your self to the Appeal Panel …..”

So, as of June 12, less than three weeks after the new bylaws were posted, we can see that the original intent of the administration was that bans could be appealed.  Only later, in a desperate attempt to prevent WAM’s appeal, did they seek another interpretation.

I fail to understand how an appeal could threaten the administration so much that they would prohibit it.  The SBFII Appeal Panel was already stacked in favor of the staff by the substitution of PonyLady as chair.   (Citroenlady had been removed as chair.)  Based on past comments, it is extremely unlikely that PonyLady would ever vote against a decision made by the staff.

But having a stacked deck was not enough.  The administration decided to eliminate the possibility of WAM ever presenting her case at all.  To me, that implies they knew they had a very weak case.  Had they been confident that their decision to ban WAM would stand up to scrutiny, they would have let the appeal proceed.

Saturday, July 16, 2011

Setting the Record Straight

In a post apparently designed to confuse and misinform, SBFII has intimated that the blogs contain lies and libel.  I stand by the reports I have made about the content of the database.  There has been no rebuttal of any of the actual database information which I posted (and which can be independently verified).

Thursday, June 2, 2011

Liars and Enablers

Though I have been evicted from SBFII, members there occasionally share posts with me.  Recently, I was shown a post by Kalua, an administrator there.  He claimed that “I do not read those blogs and I do not have the slight intention to do so.” 

Actually, he reads the blogs quite often.  In fact, his IP address has shown up on my blog over a hundred times.   There have only been 41 blogs, so I assume he checks regularly for new ones.   Other staff and Board members have also been reading the blog. 

I use Statcounter at my blog and can see the IP address of everyone who goes there.  I can also see the page they clicked on to get there.  Many have “no referring link”, since they have bookmarked the page.  Kalua has apparently bookmarked my blog page, but he also frequently clicks on a link at Susahumor.com.

The Board members of SBFII cannot claim ignorance of the information I have presented in the blogs.  I know they have read it.  By the way, no one has disputed any of the facts from the database.  As I have stated previously, if anyone doubts the accuracy of my data, the same information can be obtained independently from Hostgator if you want to verify it. 

Another post shared with me was by Board member sunandroses.  She was talking about forgiveness for those who left SBFII. 

“I for one always believe in forgiveness, but forgiveness with a well-trodden path of acknowledgement of whatever the charge was, recognition of the pain caused by the misdeed, and promises that that kind of breach of the social fabric won't happen again in the future. Only then can trust be reestablished and only then can a renewed relationship begin. Trust but verify!!”

In my opinion, she has things entirely backwards.  Those who left (Dyebat, lchris and Citroenlady) were the recipients of “the pain caused by the misdeed”, not the cause. 

Dyebat, lchris and Citroenlady never had any sort of plot to take over the forum, but they were falsely accused of that by staff members.  Tech staff members of SBFII created a fake “hacking” incident and tried to blame others for it.  Admin and Board members learned about it and covered it up.    Where is the outrage for all of those actions?

Where is the “acknowledgement of whatever the charge was”?  Where are the “promises that that kind of breach of the social fabric won't happen again in the future”?  How can trust possibly be reestablished when the staff and the admin of SBFII have told lies?  Where is the accountability? 

Do all Board members sanction the actions of JudyOkla and Danileo?  Do the Board members sanction the actions of their president, Tickled Pink, who covered up and lied about events?  Do the Board members sanction the actions of staff who made public, but false, accusations?  Do the Board members sanction the actions of those who knew about the events, but remained silent?  (This includes Board members themselves.) 

If they continue to do nothing, the obvious conclusion is that the Board members do sanction that behavior.  Why would people of supposed good character do that?  Were those who suggested them for the Board wrong about their character?  Is it because they are involved in the misdeeds themselves, if only after the the fact?  Does the Board President have so much influence over them that they would ignore their own moral sense of right and wrong?  Are they being lied to yet again? 

Where is the outrage?  Where is the accountability?

Sunday, April 24, 2011

Time for a Declaration of Truth

Nicola Phillips, who used to work for celebrity publicist Max Clifford, has refused a payout offer, lawyer Mark Lewis said.  "She ... needs a declaration of the truth," Lewis told CNN.      www.cnn.com                                      
I can connect JudyOkla and Danileo to the irregularities at forum.susan-boyle.com last July.  It has been shown that Pickled Tink was aware of the activities shortly after they occurred and helped cover them up.  The official Board report of Nov 14, 2010 makes the entire Board complicit in the deception.

The SBFII Board wrote and signed an official report which the Board members knew was not true.  The report contains many inaccuracies and I will detail some of them here. If I do not address a particular point, that does not necessarily mean it is correct.  It merely means that there were so many inaccuracies in the Board’s report that it became necessary to choose which to address.  I will skip the generalizations in the first paragraph, describing the growth cycle of forums and the joint bid. (The text in red is the official SBFII Board Report.)
Report from the Board of SBFII
1, Context.
For the past 12 months the forum has experienced a degree of disquiet and periods of dissent as members argued and accusations were made over various issues. The reasons were for this were not clear but factions grew and the then site owner decided that a number of members should be banned. The staff attempted to ensure that membership was inclusive but various groups appeared to want the forum to move in a particular direction, and to exclude certain groups. The then owner and the staff wished in principle for the site to be open to all. All forums have their forming, storming, norming, and performing, phases and we seemed to have lengthy period in the storming phase as the forum evolved. We had moved into the norming phase when the then owner decided that he was selling the site and this destabilised and unsettled the situation. The staff were putting together a bid when they learned that members wished to buy the site and decided they did not wish to bid against the members. A discussion was held with Dyebat who was fronting the members bid and it was agreed that a joint bid would be made. This was felt to be a positive way forward as both groups had been concerned about raising sufficient funds, and also both groups had said they wanted to ensure that the forum and the site was disrupted as little as possible – something which all members were saying was what they wanted. 
Throughput the time that the forum has been active the forum has been targeted by trolls, and one in particular. The staff have always been aware of this individual and when he, and others have appeared staff have dealt with them in accordance with the standard advice given on the matter. The uncertainty of the transfer of ownership however proved to be a fertile ground for trolls to sow the seeds of mistrust and doubt and within weeks these were growing thick and fast. 
"The staff have always been aware of this individual..."   
The troll in question provided the staff with a lot of false and misleading information.  Was the staff really aware of from whom they were getting that information?
Things started off well and amicably between all, then Kalua was accused of rigging the auction, of being some one else, of being Paul Wood (previous owner) of lying about a family bereavement, and of being a SONY employee. The mistrust grew and Kalua understandably refused to work with individuals who were mistrusting him in this manner. He withdrew from his position and for the rest of the staff relations became to say the least strained. All parties were very committed to getting the process moving but the misinformation spread by the troll (see below) hindered the process and both sides agree that there was considerable mistrust on both sides.
Dyebat and lchris trusted Kalua from the start.  But the staff did not trust Dyebat and lchris.  It was unusually secretive behavior on the part of the administrators that led Dyebat and lchris to question the veracity of Kalua’s personal situation and his continued involvement in management of the site.
The Site was purchased and the upgrade was commenced, This took far longer than anticipated and obviously this heightened the already present anxiety and the mistrust which was growing. Things came to a head in July when Lchris removed the admin and mod powers of the staff and rumours circulated that the forum was being attacked or hacked.
This timeline needs to be clarified in this statement because Lchris removed admin and staff powers as a result of unusual events on the forum.  The apparent “hacking” was the reason she temporarily suspended staff powers.
2. Was the forum under attack or were we hacked?
On July 18th a number of database errors occurred and Dyebat posted on the forum that we were under attack. A number of individuals reported seeing a number of banned members reappear and other unusual occurrences.
There were no database errors reported for July 18th in the error log file. Lchris had also enabled a feature that emailed a copy of each error to the forum email account. There are no database errors reported for July 18th through July 20th in the email backup of July 24th.
Lchris removed all admin and mod powers from staff although she left PT “green” she removed her admin powers, stating this was to ensure that she could not be accused of anything. The staff resigned as they felt unjustly treated, but lchris requested they return and they did so.
This is an intentional misrepresentation of what actually occurred. Staff resignations began before lchris temporarily removed any staff powers on the evening of July 18th.  Waldog and Stevieboy resigned on July 17th. Kalua resigned just after noon on July 18th.  JudyOkla and Danileo told the meeting of staff “investors” on the afternoon of July 18th that they planned to resign.  All of these actions occurred prior to lchris removing any staff powers.

When she did feel it was necessary to remove staff powers, lchris told everyone what she was doing and why.  All knew that this was a temporary measure necessitated by the situation. It was thought at the time that someone was letting banned members in. Unknown admins were appearing and causing mischief. Some staff and members were behaving strangely out of character, and posting accusations of a ‘takeover’ on the forum.

She posted the following announcement on the forum.
Thread: Heads up to all members
As one or more mods and/or others with access are causing mischief and Tink (official Admin of this site) is asleep, all access for staff is temporary blocked until Tink returns to deal with this issue.
As all is recorded in logs, Tink can determine if she wishes to share any more info about this matter.
Personally, I must say that I am surprised at such childish behavior.
07 / 18 / 10 @ 10:23:26pm EST
She notified the current admin (PT), the current owner (Dyebat).
From: lchris To: Dyebat, Pickled TinkSubject: URGENT : Admin Mischief
1 or more mods and/or tech is causing mischief - some banned members have been allowed in - I believe to continue the meme that djgers are taking over the site?
Hulapig is posting some harsh stuff about going out with a bang, but rumor has it that it is mirrim actually posting. Sheesh.
Honestly, this place is so over the top.
To protect the site, I have temporarily blocked all access by mods/tech team till you return. They made sure to do it while you were sleeping - cowards. I can check the logs tomorrow to see who it was. It or they.
I posted an announcement.
07 / 18 / 10 @ 10:34:57pm EST
She  sent a separate PM to the Tech staff; JudyOkla and Danileo.
From: lchris To: Danileo, JudyOklaSubject: Admin mischief???
I was alerted to some mischief by a mod and as tink is asleep, I have to lock all out till she returns to deal with this. Sigh.
Some formerly banned member accounts were unbanned..likely to make it appear as though djgers have taken over the site.
I don't know what else has been done. I downloaded the log and will report back who/what etc.. tomorrow.
Chris
07 / 18 / 10 @ 10:38:56pm EST
The deliberate delay by staff in returning to their positions was not addressed here at all.  It was ignored in the report as if it had never happened. The staff walkout was discussed and planned beforehand.  If they truly believed the forum to be under attack, was the walkout a responsible action?  Or did the staff know there was nothing to fear from “outsiders”?
Whist the board completely understand that lchris felt she was acting in the forum's interests, they feel that her actions were , with the benefit if hindsight, pre emptive. The board feels that if she felt the forum was under attack she should have closed the forum and then waited until PT retuned from Scotland( she was visiting Susan in Scotland that week end) and discussed the matter with her then as is standard operating IT protocol for such situations and is now written into the site's IT protocol. However, rumours and mistrust were rife by this time, and due perhaps to the influence of the troll lchris believed that staff may have been involved in what she was witnessing.
Lchris never heard any rumors from the troll about staff being involved in the events.  She did see new admin names appear in the admin control panel, to which only a few staff had access.  The possibility of staff involvement was a reasonable consideration.  JudyOkla and Danileo neglected to mention that they were creating admin accounts.
Following this a number of wild allegations began to circulate and to be posted, including that staff had hacked the forum, that we were hacked from outside, and that members of another forum had hacked the forum in order to take it over. 
The report fails to mention that staff and some members had attended a secret 4 hour meeting during which staff promoted the fiction that the forum was being attacked by the DJGers and that Dyebat and lchris were in league with them.
We have investigated all of these allegations and can find no evidence of any hacker or of any such plot. The board initially spoke with lchris who provided us with some screen caps from the data base which indicated some unusual activity by a previous staff member in the database, however the activity was a physical impossibility and lchris agreed that the member concerned would have to have been the bionic woman to have performed all of the tasks in the time frame indicated.
The reason for the concern was that the staff member in question, Hulapig, in addition to behaving out-of-character, was recorded in the banning.php area of the control panel thirteen times that evening, including six times prior to the mention of the “banned” members. However, it was not necessary to resort to references to fictional characters.  An examination of the database would have revealed that Hulapig did not perform the steps necessary to ban or unban anyone on July 18.
Lchris also raised concerned that PT had not “authorised” the creation of 2 test admin accounts by Judyokla and Danileo in July however, they had notified PT by email of the creation of these accounts in accordance with lchris's own advice on redundancy.
Had Pickled Tink really authorized the creation of EvaMarie, kaydaniels (8101), roseym, kaydaniels (8106), looie and jayme by JudyOkla and Danileo?  If so, she is complicit in the “admin mischief”.  

Creating new admin accounts, for the purpose of disrupting the forum, has nothing to do with “redundancy”.  Redundancy refers to backing up important data so that there is more than one copy should something go wrong.  Redundancy refers to ensuring that multiple people are trained for specific tasks.

The purpose of “test accounts” is to see the forum as members without staff permissions see it. Test accounts would naturally be member accounts, not admin accounts.

Had those been legitimate accounts, there would have been no reason to use proxies.  Had they been legitimate accounts, there would have been no reason to alter the records.  Had they been legitimate accounts there would have been no reason to “kill” some of them.
These accounts had no admin permissions attached to them and were fully visible in the admin panel and were never “secret.” PT gets several hundred e mails and PM's a day so had to hunt this out as she did not initially recollect it when questioned by lchris, but has confirmed receipt of this e mail.
The accounts did have admin permissions and performed actions in the admin control panel.

How much did Pickled Tink know about the new admin accounts and their activities?  Tink knew about the faux admin accounts and who had used them by late July.  She “killed” two of the accounts herself.  But what did she know and when did she know it?  There are three possibilities.

1)  She knew about them beforehand and was complicit in their activities.
2)   She knew about other accounts, but did not find out about their activities until later, after which she helped cover up the evidence.
3)  She found out about them later, helped cover up the evidence and lied about receiving the email.
Given the level of concern expressed on the forum the board wished to reassure the members that the database was safe and wished to investigate further,. They asked Lchris and Dyebat to join them in their investigation but Lchris and Dyebat declined to do so. 
Which is the only reason that any of this is coming to light.
The board have sought to look at the security of the database. Initially we sought to hire an expert to instigate and were prepared to pay for this out of our own pockets, however this proved to be totally cost prohibitive. We approached a number of individuals including some on the forum. In the end we secured the assistance, free of charge, of a non relative, James W, a friend of one of the board members, (PT). He is a computer science graduate who is also an experienced internet forum user and experience in provision of services to forums.
Lchris was rather surprised when she noticed that the “independent investigator” was working from PT's own home IP address and more so when she discovered that this person was a friend of Tink’s son. She alerted JudyOkla and Truus immediately. They were not at all surprised.
He was asked to examine the data base to see if there was any evidence of hacking, or interference and to comment upon the database errors which we were and are continuing to experience.
Was the investigator, James W, given any evidence at all? Was he asked to check for outside interference only? Was he told what names should normally appear in the admin control panel?  If he did not know what was normal, he could not have known what was unusual.
The data base was examined and no evidence of outside interference was found. He advised that someone with very sophisticated knowledge might be able to plant a script to make some of the changes which occurred but the errors he observed were consistent with what he called “hash  string errors”. These are errors which commonly and frequently occur in upgrades and result in a fatal flaw which he advises will remain. This means that the data base errors will remain unless either the upgrade is completely redone from scratch, (and we lose much of the forum content), or we go back to an earlier version and re do the upgrade – neither of which is is something which we relish. 
To blame the events of July 18 on database errors is convenient, but not supportable.  Lchris never actually upgraded the original forum.  She left the original “as is” in case the forum needed to revert back or needed to move any data manually.  She installed a FRESH version of vbulletin and imported a copy of the database data from the original.  She told this (multiple times) to the admins and the tech team.
We asked if any interference could have been done from within and were told that theoretically it was possible, but again it would require a sophisticated knowledge but that if any such activity had occurred it had been wiped clean. On the basis of his observations he felt that database errors relating to the upgrade were the most likely explanation – and in his experience are very common on forums.
There was evidence of that activity still remaining.  I am not a computer expert, but I found it.  Why didn’t this computer science graduate (“who is also an experienced internet forum user and experience in provision of services to forums”) find it?
We have explored the issue of the banned members. It seems that in actual fact only one banned member was readmitted, and that one of the temporary admin appointed by Lchris has said she admitted this person as she thought that the amnesty which had been discussed by PT, Kalua, and Lchris towards previously banned members had commenced.
As has been previously described, this is not only nonsense, Pickled Tink knew it untrue. Unbanned?

The Board members knew it was not true either.  Lchris’s preliminary report, sent to all Board members in August, contained the following:
WHO UN-BANNED THE MEMBERS AND CAUSED THE MISCHIEF?
One rumor I can dispel is that CitroenLady un-Banned the members. Her admin access was given at Monday, July 19, 2010, 9:17:40 PM (as shown in config files), the day after the initial incidents occurred.
I find this one of the most perplexing inclusions in the report.  Any of the staff who could view the list of members waiting for their accounts to be approved would have known that no one approved those members on July 18.  Yet they kept repeating the fiction that banned members were let in, long after July 18th.  Why?  And why continue to pin the blame on Citroenlady when they knew she could not have done it?
A great many things were said on that night and in the days which followed which were painful and hurtful and which we all now know were untrue. The ensuing panic and mistrust was again a great feeding ground for the troll and his followers, for he was not acting alone, and it engenders further radicalisation opportunities, for want of a better word, for groups who feel disenfranchised and alienated.
It is true that the troll was not acting alone.  Staff and members, who had been in contact with the cyber-troll, were actively spreading the lies and misinformation he had given them.  As for the “followers” of the troll, those would appear to have been the staff members and others who were convinced by him. The people who were accused of the takeover by the troll were certainly not his followers.

The phrase about “further radicalization opportunities” for those who feel disenfranchised is curious. Was she saying that the false accusations made by the troll and staff would cause further alienation? That would appear obvious.  Was it the intent?
The forum was not hacked and there was no plot to take over the forum by other sites or by individuals on the forum.
This is true.  The forum was not technically hacked.  The “mischief” and “unusual occurrences” were not due to hacking from the outside.  It was done by staff members JudyOkla and Danileo.  It is also true that “there was no plot to take over the forum by other sites or by individuals on the forum.”   This is one of the few things the report got right.
 3. The Troll.
The major investigation into the troll has been undertaken by lchris, dyebat and Citroen Lady. However, the board and the staff have sought legal advice in Europe and in the USA., and also spoken to the police. We also consulted SONY as they too have been affected. SONY consulted an independent expert on this field and passed on the advice to us. PT also spoken to a psychiatrist about troll behaviour. The advice we obtained was completely consistent from all sources.
The legal advice we obtained was that trolls are are fact of life on all on forums, and that in most cases there is usually little to be gained by issuing proceedings. However, individuals whom he has libelled “might” have a case for a civil suit and should seek their own advice. The advice we obtained from the police was the same. The expert advice in dealing with trolls is that they should be ignored and that by constantly discussing them, publicly refuting the rumours they perpetrate, and highlighting their misdemeanour’s is actually feeding their need for attention. 
What were the experts and the police told about this troll? This particular individual was more active, more persistent and more threatening than most.  Beyond being a nuisance, he had committed crimes (including stalking and harassment of members) which the Admins should have reported to the police.  

He apparently had the ear and trust of the staff members themselves. Both some of the staff and forum members were in communication with him, even after the July incidents. The source for CanadianBill’s Urgent Questions thread, which was pre-approved by staff, was this troll.  But the admins seem strangely uninterested in reporting or dealing with him.  I have no doubt that he is back on Susan Boyle forums under yet more identities. 

The advice we have been given was actually the practice which the staff had been following before July. Some information regarding the rumours perpetrated by the troll was published but as the experts advised this has actually led to an increase in the rumour machine, rather than a decrease. The board and the staff have now taken the view that they will follow the expert advice on this issue. The board are aware that this is not a view universally held, and the board accepts that not everyone will agree with this approach. However having taken soundings from various sources the board feels that this is the best approach. Advice on dealing with trolls can also be found here.
1. A police advice forum:-http://policelink.monster.com/topics...e-trolls/posts
2. Definitions of trolls and discussions etc....
http://www.thezeitgeistmovement.com/...d=60&id=216501
3. IMDB advice on trolls:-
http://www.thezeitgeistmovement.com/...d=60&id=216501
4. A cultural blog with some intereting insights on human nature and trolling:-
http://www.cognitionandculture.net/O...mentation.html

Lchris and Dyebat have advised us that they continue to be involved in investigating the troll, together with individual members and other fan sites and we understand that there is in fact a police investigation and that as such they are not at liberty to disclose the details of their inquiries. When they are at liberty to do so we are sure they will do so. Their commitment and tenacity in this respect is to be commended. 
We share the frustration of those who wonder about the police investigation.  It does seem to be taking a long time.  But it is a complex case.
4. Members reactions and expectations.
In the ensuing weeks and months there have been a number of reactions from members and these have included accusations made against long standing members which have no basis in fact. Accusations have also been made against staff which again have no basis in fact. It is time for for this to come to an end.  
Yes, it is time for the facts to take precedence.
5.Apologies.
A lot of people have been hurt in recent months as allegations and counter allegations have been made both on and off the forum. The board take the view that individuals are responsible for their own posts and that all must accept responsibility if they are in breach of the rules. Under normal circumstances the Board would not apologise on behalf of another member but we are unanimous that apologies should be offered to everyone involved for the events which occurred in recent months. The board feels that all members must accept a degree of responsibility, and the board must accept overall responsibility for allowing the troll and his rumour machine to disrupt and upset the forum.
We therefore wish to make a full and public apology to Dyebat, lchris, Citroen Lady, Kalua, PT , the staff and all of our members who have been insulted maligned and accused of various nefarious plots too numerous to mention. We also wish to make an apology to DJG and his members for the false allegation again perpetrated by the troll, that he was plotting to take over the forum. 

The apology to DJG and the members of his forum was the right thing to do.  I was disappointed not to see apologies from the individual staff members who were spreading and perpetuating those false allegations.

There should also have been an apology to the members of the forum mentioned in CanadianBill’s thread, especially Citroenlady, as well as Dyebat and lchris.  The allegations stated and implied in that thread were untrue. Because it was approved by staff, they have some legal responsibility for the posting of that thread.

Finally, I must comment on the fact that the apology includes the staff and all members.  This is equating the questioning of Kalua’s unusual behavior with the deliberate sabotage of the forum while blaming it on others.

JudyOkla and Danileo created faux admin accounts to cause confusion and alarm on the forum.  Other staff members spread lies about forum members, Dyebat and lchris.  Pickled Tink helped cover up these activities. Compare that to the “transgressions” of Dyebat and lchris. They wanted to fill out the paperwork with Kalua’s identity and became suspicious when he refused to provide it.

To equate these actions is to negate the meaning of the apology.

Conclusion:
The board feels that it is likely that some will have been looking fore someone to blame, and that the conclusion that we were not hacked will not sit comfortably with some who may still be mistrustful. That is understandable. The board has concluded its investigation and feels that enough time and attention and anxiety has been devoted to this matter The board has directed the staff to deal with trolls as per the the expert advice. This thread will remain open for questions for the next 2 days to be asked to all the board members, but any flying accusations and insults will be deleted.
The board are aware that mistrust remains in some quarters and has therefore requested that impartial mediators be appointed to talk through any residual outstanding issues which may remain, away from the forum, so that Susan Boyle remains the focus of the forum and not the rumours perpetrated by trolls and gossips. 
Thank You.
The Board of SBFII
Pickled Tink, John V, Leonine. Cicichi, Waforgas, Lonnirose, Truusbuist.

This report was written and signed by people who knew that much of the contents were not true.  Pickled Tink knew it was not true because she helped cover for JudyOkla and Danileo.  The rest of the Board members had already been told that the unbanning of a member could not have been done by Citroenlady.  They also knew that there were questions about the activities of JudyOkla and Danileo.

Did any Board member object when the investigation, which was supposed to be independent, was done by a friend of Tink’s son and in her home?   Did they consider that to be independent?

Are Board members aware of the very real responsibility holding office brings with it?   It was the duty of Board members to insist upon a truly independent investigator, who was given access to all of the relevant data.   If they did not, they are guilty by neglect.  It is their responsibility to direct the staff of SBFII, not to be mere rubber stamps for every action of the staff.  They bear legal responsibility for any action the staff takes in their name.

Information which should have been included in the original investigation has been made available to the Board through this blog.  Should they choose to ignore it, the conclusion must be that they are not interested in the truth.  If they do not trust my interpretation of the data, they may request the data independently from Hostgator and check it for themselves.  They will see that I have not altered the data in any way.  The logs are as I have reported.

The fact that Board members of SBFII knowingly signed a false statement is serious.  I would like to believe that at least some of the Board were unaware of the level of deception, but it is becoming harder and harder to give them any benefit of the doubt.  If they do not want to perpetuate the deception, it is time for a declaration of the truth from the Board of SBFII.

Friday, April 22, 2011

Evidence Given to the Board

Lchris sent a preliminary report for the Board of SBFII on August 4, 2010.  The report, sent to all of the Board members, contained screen grabs of the admin control panel logs.   The screen grabs included some of the actions of JudyOkla and Danileo, both setting up the new admin accounts and using them, though the user was not always identified.

Without understanding the creation and timing of the new admin accounts, it would have been hard for Board members to understand what was being done.  But the log did show Danileo editing admin permissions for EvaMarie. It showed JudyOkla editing admin permissions for kaydaniels and EvaMarie.  It showed JudyOkla editing admin permissions for lchris, DocRobbie and roseym.

(Click on image to enlarge)
The logs showed the actions of the faux admins, but most of their names had been removed.  Roseym did appear in the logs, using JudyOkla’s IP address.  There were also instances of changehistory shown in the logs.
(Click on images to enlarge)

These logs should have raised some questions.  The screen grabs show JudyOkla and Danileo editing admin permissions for kaydaniels, Evamarie and roseym.  Who were they and why did they have admin permissions at all? Why were some names in the control panel log not shown?  Who was roseym and why was she performing actions in the admin control panel?  Why was JudyOkla using that account in the middle of the confusion on July 18?  What does changehistory mean?

Examples of the logs sent to the Board:
(I have cropped out the IP addresses on the far right, but they were included on the Board copies.)

(Click twice on image to enlarge)
 (Click twice on image to enlarge)
(Click twice on image to enlarge)

The preliminary report did not have the answers, but it was a start.  It pointed at some irregularities that should have been questioned.  The official report would not be written for three more months.  Surely it would have the definitive answers ......... if the questions were asked.

Thursday, April 14, 2011

Staff Walkout

There are a few more pieces of the puzzle to put together.  In her July 18th email to selected members (hours before the "admin mischief" began), LonniR stated that “unless the good members such as yourself and as many friends as you can muster do not post against Chris and Dyebat's actions, the entire staff is prepared to resign today.”

What action of Dyebat’s and Chris’s was so egregious that the entire staff of forum.susan-boyle.com was prepared to resign?  They had asked for identification.

Back in May, Dyebat and lchris had discussed the formation of the NPO with staff.  All had agreed to the NPO prior to the auction. Dyebat and lchris assumed it would be done quickly (within days of winning the auction, should they win) and that Kalua would be the Director of the Board.   Kalua was aware of this, of course.  So was the staff. 

In the minutes of the staff meeting of June 17, item f lists the future Board members as chosen by staff.  It included Kalua (Carlos).
STAFF MEETING JUNE 17, 2010

Staff Present: Carlos, Hils, Dani, Judy, Ross, Lonni

4. Corporate Structure

f. Board Members were chosen from staff: Hils, Lonni, Ross, Carlos, and
Judy
. Graeme will serve as alternate. Chris and Mary Jo will choose 2
board members from the membership.
Kalua knew very early in the process that the Board members were required to provide a real name and address.  Chris provided staff with the forms that would be necessary for the NPO.  The information required of those on the Board included name, address and phone number.  That is the information which Kalua refused to provide.
 (Click on image to enlarge)

Anyone who has ever been involved in setting up an NPO knows that the information is both reasonable and necessary.  They did not ask for anything to be made available on the internet or to members.  That was exaggeration and disinformation spread by staff to make the requirements seem much more onerous than they actually were.

Kalua knew that he would be required to provide the information required on the form if he was to be a member of the Board.  But he neither provided it nor turned down a Board position. 

What happened instead was that the formation of the NPO was repeatedly delayed.  Dyebat and lchris found out later that they had been blamed for the delays. Finally, Dyebat began the Transparency thread out of frustration – raising the issue of the need for identification publicly as there was no plausible reason for the delay in supplying her with the necessary information for her to file the NPO.

And the staff made plans for a mass exodus.  

As LonniR said, “the entire staff is prepared to resign”.  Pickled Tink said the same in a basecamp discussion with lchris on July 18th.
Hils:    … .right now all of the satff are ready to walk –(sic)
The staff resignations were not spontaneous individual decisions.  It was a strategic maneuver.   Waldog and Stevieboy resigned on July 17th.  It had always seemed strange that two staff members whose real identities were known would resign over identification requirements.  But it would make sense if they were part of a planned walkout by staff.

Some members knew about the planned staff resignations.  On July 17th, Kalua and Pickled Tink sent out invitations to those staff and members who had contributed to their portion of the auction price.  They were to have an MSN meeting on July 18th.  Those invited were AireMom, bklvr79, Bobber, Danileo, Hulapig, jayhawk fan, JudyOkla, Kalua, Lonnirose, Martha Ellen, Mirrim, musictchr, stevieboy49, the subofan, truusbuist, Waldog and wasforgas.  Treedeen, the lender for the member's portion of the sale, was not invited.
To all Investors in staff contribution to bid for forum:
Dear Everyone,

We are sure that you may be somewhat bemused by the transparency thread and by some of the discussions currently taking place on the forum which have not been instigated by the staff. As you have all so generously contributed to the staff section of the bid we felt that we should update you on what is going on.

We would like to invite you all to join the staff at a meeting, on MSN tomorrow, Sunday 18th July  at 8pm BST,  3pm EDT,  9pm European time.

Please let us know as soon as possible if you are unable to make it and we will ensure that you are provided with the relevant information. We would be grateful if you did not discolse that this meeting is taking place to anyone outside of those named at the top of this PM.
For those of you who do not have it  my MSN address  is
[email]

Thank You

Kalua and Pickled Tink
Administrators.
The meeting took place within hours of Kalua’s resignation on July 18th. During the meeting, JudyOkla stated that it would “send a huge message if all staff resign at once”.

And much of the staff did resign.  Others had their staff powers temporarily withdrawn  because of the activities of the faux admins.  The activities of those new admins could only have taken place if the staff resigned.  Otherwise staff would have had to either stop them or appear complicit. 

It was harder for lchris to figure out who was doing what in the admin control panel because she had never been a moderator and was unfamiliar with those features of the forum.   Lchris knew someone was doing it, but not who, so on the evening of July 18th, she suspended staff privileges until Pickled Tink returned in the morning.  

Lchris thought that Tink would help get the remaining forum staff quickly reinstated.  But instead, Pickled Tink herself resigned early on July 19th. 

Even though she had resigned, Tink continued to discuss forum matters regularly with lchris and Dyebat, giving them instructions.  Over the next few days, lchris repeatedly asked Tink to get the staff to return.  Sometimes Tink ignored the request, other times she obfuscated, with vague excuses.  
snippets from CampFire
July 18
Chris:  Hils -  I don't want anyone to leave without cause - i have no issue with anyone here
Chris: Dyebat and I just wanted the site/staff to stay the same..
Chris: dyebat /I do nOt want to take over anything - all staff are her to stay
Chris: ok..so are staff all in? can we get stevie and ross back?
July 19
lchris3: I know but how are staff?  can you get them to return?
July 20
lchris2: please, just take the reigns and get back to the site
lchris2: We do not want to be in charge..shessh..you all walked out
lchris2: please, just take the reigns and get back to the site
lchris2: YOU GUYS LEFT THE SINKING SHIP
lchris2: Hils, I work for you - you tell me what to do
lchris2: just step in and be the boss   
lchris2:  huh? You return - make a post that you are back   
we did not take anything - you gave it away - you have to take it back
lchris2: you all walked away - sheesh
lchris2: So - have you un-resigned yet?
July 21
lchris2:  MJ/I are waiting for staff - you to return
lchris2: need to get mods back so I can get xeno/cl out
lchris2: you all left the ship or don't you recall???

The staff did not return on the 19th as lchris had expected.  It appears that Pickled Tink was telling the staff that lchris was keeping them out. On July 22, lchris was clearing the forum mailbox and came across a message from Pickled Tink to staff. (It was in the mailbox because Stevieboy had replied to the email notification which included the PM contents.) 

At the same time that lchris was asking for Tink to get the staff back, Pickled Tink told staff that “a return to the forum has been negotiated with lchris”.  Chris was begging for them to come back but Tink told them she negotiated their return, as if it were lchris who was keeping them out. 

Dyebat and lchris decided to take the opportunity of Kalua’s resignation to finally file for the NPO.  A few hours after Kalua left, they sent out invitations to staff members who were to be on the Board.   Lchris sent repeated requests for staff to reply to board invitations.   But no one replied for days.
snippets from CampFire
July 21
lchris2: THERE IS NOT ONE REPLY FROM STAFF - NOT ONE
lchris2: FOR DAYS
lchris2: NOT ONE
lchris2: Not a single staff has replied to the letter to be on the Board
It appears that the staff had planned the walkout to force the issue of Kalua’s identification requirements.  They would stay out until he was allowed to return, without providing identification.  Tink said in a discussion on July 20:
Hils:  I can not keep on in limbo- I ahve said to the staff I am with them and its eitehr all of us or none of us – (sic)
“Either all of us or none of us” was to be the staff ultimatum.   Perhaps the staff thought that the members would demand the return of Kalua.  To that end, the staff encouraged members to make posts in support of staff.  Martha Ellen did just as she had been asked in the email from LonniR and started a support thread for staff. 

But the walkout was cut short because Dyebat and lchris took advantage of the staff walkout to finally file for the NPO.  Kalua could no longer block the NPO because he had resigned. 

On July 18th, they sent out letters to prospective Board members.  But the staff members who had received them did not reply.  Finally, lchris issued a deadline.  If they did not reply, the seats would go to regular members instead of staff.  Facing the prospect of losing seats on the Board, the staff began to reply to the Board invitations. 

As soon as they received affirmative replies from two Board members, lchris and Dyebat did what they had wanted to do for over two months.  They filed for the NPO.

Monday, April 11, 2011

The Cover-Up

It appears that the new admin accounts were created for a specific purpose.  Afterwards an attempt was made to hide what had been done. The cover up included both altering the record and removing some of the accounts.

The cover-up began while JudyOkla and Danileo were still attempting to give administrator permissions to their new admin accounts.  The account of kaydaniels (8101) was apparently not working out well.  So they got rid of it.

Both Danileo and JudyOkla altered the record of kaydaniels. Then on the evening of July 18th, the first kaydaniels was “killed” by Danileo, using the account of Evamarie.   (Reminder from a previous blog:  To “kill” in vBulletin is to “run code to remove item in database”.)

admin
logid
user
id
dateline
script
action
extrainfo
ipaddress
48054
57
(Danileo)
1279501248
07 / 18 / 10 @
8:00:48pm EST
user.php
change
history
user id = 8101
6x.xxx.xx.xx7
(Danileo)
48058
250
(JudyOkla)
1279501448
user.php
edit
user id = 8101
9x.xxx.xxx.x7
(JudyOkla)
48059
250
1279501460
07 / 18 / 10 @
8:04:20pm EST
user.php
change
history
user id = 8101
9x.xxx.xxx.x7
(JudyOkla)
48068
250
1279501659
user.php
edit
user id = 8101
9x.xxx.xxx.x7
(JudyOkla)
48069
250
(JudyOkla)
1279501739
user.php
edit
access
user id = 8101
9x.xxx.xxx.x7
(JudyOkla)
48089
250
1279502929
user.php
edit
user id = 8101
9x.xxx.xxx.x7
(JudyOkla)
48092
8036
(EvaMarie)
1279503005
user.php
edit
user id = 8101
6x.xxx.xx.xx7
(Danileo)
48093
8036
1279503027
07 / 18 / 10 @
8:30:27pm EST
user.php
remove
user id = 8101
6x.xxx.xx.xx7
(Danileo)
48094
8036
(EvaMarie)
1279503037
07 / 18 / 10 @
8:30:37pm EST
user.php
kill
user id = 8101
6x.xxx.xx.xx7
(Danileo)

Beginning on July 19th, lchris began to remove admin permissions from Evamarie.  EvaMarie tried a few more actions before she was disempowered.  These actions were done from the IP address of Danileo.  lchris continued to remove admin and moderator permissions.

There were more steps than I have shown here, because lchris went through the permissions step by step to make sure she didn’t miss any.  They look essentially the same and would take up pages, so I have included only a few examples.

On July 23rd. Pickled Tink checked the IP used by EvaMarie (doips = do IP search).  Following that, Pickled Tink “killed” the account of EvaMarie.

admin
logid
user
id
dateline
script
action
extrainfo
ipaddress
48403
99
(lchris)
1279568595
07 / 19 / 10 @ 2:43:15pm EST
admin
permissions
.php
edit
user id = 8036 (evamarie)
7x.xx.xx.xx9
(lchris)
48421
99
1279571479
07/19/10 @ 3:31:19pm EST
admin
permissions
.php
edit
user id = 8036 (evamarie)
7x.xx.xx.xx9
(lchris)
48434
8036
(Eva
Marie)
1279573080
07 / 19 / 10 @ 3:58:00pm EST
user.php
find

6x.xxx.xx.xx7
(Danileo)
48435
8036
1279573091
user.php
find
names

6x.xxx.xx.xx7
(Danileo)
48436
8036
(Eva
Marie)
1279573093
07 / 19 / 10 @ 3:58:13pm EST
user.php
view
user
user id = 2657
6x.xxx.xx.xx7
(Danileo)
48457
99
(lchris)
1279583010
07 / 19 / 10 @ 6:43:30pm EST
admin
permissions
.php
edit
user id = 8036 (evamarie)
7x.xx.xx.xx9
(lchris)
48507
99
1279584705
07 / 19 / 10 @ 7:11:45pm EST
admin
permissions
.php
edit
user id = 8036 (evamarie)
7x.xx.xx.xx9
(lchris)
48577
99
(lchris)
1279587039
07 / 19 / 10 @ 7:50:39pm EST
moderator
.php
edit
global
username = evamarie
7x.xx.xx.xx9
(lchris)
48782
99
(lchris)
1279653651
07 / 20 / 10 @ 2:20:51pm EST
moderator
.php
edit
global
user id = 8036
7x.xx.xx.xx9
(lchris)
48783
99
1279653651
moderator
.php
edit
global
username = evamarie
7x.xx.xx.xx9
(lchris)
48926
99
(lchris)
1279683315
07 / 20 / 10 @ 10:35:15pm EST
moderator
.php
edit
global
username = evamarie
7x.xx.xx.xx9
(lchris)
49807
94
(Pickled Tink)
1279915990
07 / 23 / 10 @ 3:13:10pm EST
user.php
edit
user id = 8036
8x.xx.xxx.x4
(Pickled Tink)
49808
94
(Pickled Tink)
1279916012
usertools
.php
doips
(do ip search)
user id = 8036
8x.xx.xxx.x4
(Pickled Tink)
49811
94
1279916084
user.php
remove
user id = 8036
8x.xx.xxx.x4
(Pickled Tink)
49812
94
(Pickled Tink)
1279916089
07 / 23 / 10 @ 3:14:49pm EST
user.php
kill
user id = 8036
8x.xx.xxx.x4
(Pickled Tink)

On July 19th, lchris began to remove admin and moderator permissions from roseym.  On July 27th, JudyOkla altered the record of roseym twice.

admin
logid
user id
dateline
script
action
extrainfo
ipaddress
48415
99
(lchris)
1279568637
07 / 19 / 10 @ 2:43:57pm EST
admin
permissions
.php
edit
user id = 8102 (roseym)
7x.xx.xx.xx9
(lchris)
48515
99
1279584731
admin
permissions
.php
edit
user id = 8102 (roseym)
7x.xx.xx.xx9
(lchris)
48548
99
(lchris)
1279586344
admin
permissions
.php
edit
user id = 8102 (roseym)
7x.xx.xx.xx9
(lchris)
48556
99
1279586845
07 / 19 / 10 @ 7:47:25pm EST
moderator
.php
edit
global
user id = 8102
7x.xx.xx.xx9
(lchris)
48557
99
1279586845
moderator
.php
edit
global
username = roseym
7x.xx.xx.xx9
(lchris)
48559
99
1279586892
moderator
.php
update
username = roseym
7x.xx.xx.xx9
(lchris)
48607
99
(lchris)
1279587287
07 / 19 / 10 @ 7:54:47pm EST
moderator
.php
edit
global
user id = 8102
7x.xx.xx.xx9
(lchris)
50833
250
(Judy
Okla)
1280291305
07 / 27 / 10 @ 11:28:25pm EST
user.php
edit
user id = 8102
9x.xxx.xxx.x7
(JudyOkla)
50834
250
1280291328
user.php
change
history
user id = 8102
9x.xxx.xxx.x7
(JudyOkla)
50837
250
1280291444
usertools
.php
doips
user id = 8102
9x.xxx.xxx.x7
(JudyOkla)
50838
250
(Judy
Okla)
1280291464
07 / 27 / 10 @ 11:31:04pm EST
user.php
change
history
user id = 8102
9x.xxx.xxx.x7
(JudyOkla)

Lchris removed admin and moderator permissions from the second kaydaniels account on the 19th and 20th of July.  On July 25th, 26th and on August 1st, JudyOkla altered the record of kaydaniels (8106) six times.

admin
logid
user
id
dateline
script
action
extrainfo
ipaddress
48406
99
(lchris)
1279568606
07 / 19 / 10 @
 2:43:26pm EST
admin
permissions
.php
edit
user id = 8106 (kaydaniels)
7x.xx.xx.xx9
(lchris)
48509
99
1279584711
07 / 19 / 10 @
7:11:51pm EST
admin
permissions
.php
edit
user id = 8106 (kaydaniels)
7x.xx.xx.xx9
(lchris)
48572
99
(lchris)
1279587000
07 / 19 / 10 @
 7:50:00pm EST
moderator
.php
edit
global
username = kaydaniels
7x.xx.xx.xx9
(lchris)
48574
99
1279587035
moderator
.php
update
username = kaydaniels
7x.xx.xx.xx9
(lchris)
48596
99
1279587250
07 / 19 / 10 @
7:54:10pm EST
moderator
.php
edit
global
username = kaydaniels
7x.xx.xx.xx9
(lchris)
48627
99
(lchris)
1279588235
admin
permissions
.php
edit
user id = 8106 (kaydaniels)
7x.xx.xx.xx9
(lchris)
48630
99
1279588241
07 / 19 / 10 @
8:10:41pm EST
admin
permissions
.php
edit
user id = 8106 (kaydaniels)
7x.xx.xx.xx9
(lchris)
48665
99
1279594076
moderator
.php
edit
global
username = kaydaniels
7x.xx.xx.xx9
(lchris)
48786
99
1279653657
moderator
.php
edit
global
username = kaydaniels
7x.xx.xx.xx9
(lchris)
48894
99
(lchris)
1279679863
07 / 20 / 10 @
9:37:43pm EST
admin
permissions
.php
edit
user id = 8106 (kaydaniels)
7x.xx.xx.xx9
(lchris)
48929
99
1279683324
moderator
.php
edit
global
username = kaydaniels
7x.xx.xx.xx9
(lchris)
50246
250
(Judy
Okla)
1280082957
07 / 25 / 10 @
1:35:57pm EST
user.php
change
history
user id = 8106
(kaydaniels)
9x.xxx.xxx.x7
(JudyOkla)
50674
250
1280174488
07 / 26 / 10 @ 3:01:28pm EST
user.php
change
history
user id = 8106
9x.xxx.xxx.x7
(JudyOkla)
51252
250
1280704676
user.php
edit
user id = 8106
9x.xxx.xxx.x7
(JudyOkla)
51253
250
(Judy
Okla)
1280704698
08 / 01 / 10 @
6:18:18pm EST
user.php
change
history
user id = 8106
9x.xxx.xxx.x7
(JudyOkla)
51254
250
1280704710
user.php
change
history
user id = 8106
9x.xxx.xxx.x7
(JudyOkla)
51255
250
1280704713
user.php
edit
user id = 8106
9x.xxx.xxx.x7
(JudyOkla)
51256
250
(Judy
Okla)
1280704758
08 / 01 / 10 @
6:19:18pm EST
user.php
change
history
user id = 8106
9x.xxx.xxx.x7
(JudyOkla)
51257
250
(Judy
Okla)
1280704767
08 / 01 / 10 @
 6:19:27pm EST
user.php
change
history
user id = 8106
9x.xxx.xxx.x7
(JudyOkla)
51258
250
1280704785
08 / 01 / 10 @
6:19:45pm EST
user.php
edit
access
user id = 8106
9x.xxx.xxx.x7
(JudyOkla)
51259
250
(Judy
Okla)
1280704799
08 / 01 / 10 @
6:19:59pm EST
resources
.php
view
user
user id = 8106
9x.xxx.xxx.x7
(JudyOkla)

Lchris removed admin and moderator permissions from Looie on July 19th and 20th.  On July 25th, Pickled Tink edited Looie’s account.  She did an IP search.  Then she “killed” the account of Looie.

admin
logid
user id
dateline
script
action
extra info
ipaddress
48409
99
(lchris)
1279568618
07 / 19 / 10 @ 2:43:38pm EST
admin
permissions
.php
edit
user id = 8108 (Looie)
7x.xx.xx.xx9
(lchris)
48511
99
1279584720
07 / 19 / 10 @ 7:12:00pm EST
admin
permissions
.php
edit
user id = 8108 (Looie)
7x.xx.xx.xx9
(lchris)
48566
99
1279586954
07 / 19 / 10 @ 7:49:14pm EST
moderator
.php
edit
global
user id = 8108
7x.xx.xx.xx9
(lchris)
48567
99
1279586954
moderator
.php
edit
global
username = Looie
7x.xx.xx.xx9
(lchris)
48569
99
(lchris)
1279586994
07 / 19 / 10 @ 7:49:54pm EST
moderator
.php
update
username = Looie
7x.xx.xx.xx9
(lchris)
48974
99
(lchris)
1279683813
07 / 20 / 10 @ 10:43:33pm EST
user.php
modify
user id = 8108
7x.xx.xx.xx9
(lchris)
49925
250
(Judy
Okla)
1279953802
07 / 24 / 10 @ 1:43:22am EST
user.php
view
user
user id = 8108
9x.xxx.xxx.x7
(JudyOkla)
50091
94
(Pickled
Tink)
1280043860
07 / 25 / 10 @ 2:44:20am EST
user.php
edit
user id = 8108
8x.xx.xxx.x4
(Pickled Tink)
50094
94
1280043889
07 / 25 / 10 @ 2:44:49am EST
usertools
.php
doips
(do IP
search)
user id = 8108
8x.xx.xxx.x4
(Pickled Tink)
50097
94
1280047394
07 / 25 / 10 @ 3:43:14am EST
user.php
edit
user id = 8108
8x.xx.xxx.x4
(Pickled Tink)
50098
94
(Pickled
Tink)
1280047464
07 / 25 / 10 @ 3:44:24am EST
user.php
remove
user id = 8108
8x.xx.xxx.x4
(Pickled Tink)
50099
94
(Pickled
Tink)
1280047473
07 / 25 / 10 @ 3:44:33am EST
user.php
kill
user id = 8108
8x.xx.xxx.x4
(Pickled Tink)

The final new account was jayme (8109).  On July 25th and 26th, JudyOkla altered the record of jayme six times.

admin
logid
user
id
dateline
script
action
extra info
ipaddress
50241
250
(Judy
Okla)
1280082905
07 / 25 / 10 @ 1:35:05pm EST
user.php
edit
user id = 8109
9x.xxx.xxx.x7
(JudyOkla)
50242
250
1280082909
07 / 25 / 10 @ 1:35:09pm EST
user.php
change
history
user id = 8109
9x.xxx.xxx.x7
(JudyOkla)
50253
250
1280083048
user.php
edit
user id = 8109
9x.xxx.xxx.x7
(JudyOkla)
50254
250
(Judy
Okla)
1280083051
07 / 25 / 10 @ 1:37:31pm EST
user.php
change
history
user id = 8109
9x.xxx.xxx.x7
(JudyOkla)
50667
250
1280174392
07 / 26 / 10 @ 2:59:52pm EST
user.php
edit
user id = 8109
9x.xxx.xxx.x7
(JudyOkla)
50668
250
(Judy
Okla)
1280174397
07 / 26 / 10 @
2:59:57pm EST
user.php
change
history
user id = 8109
9x.xxx.xxx.x7
(JudyOkla)
50669
250
1280174434
07 / 26 / 10 @ 3:00:34pm EST
user.php
change
history
user id = 8109
9x.xxx.xxx.x7
(JudyOkla)
50670
250
(Judy
Okla)
1280174441
07 / 26 / 10 @ 3:00:41pm EST
user.php
change
history
user id = 8109
9x.xxx.xxx.x7
(JudyOkla)
50677
250
1280174671
user.php
edit
user id = 8109
9x.xxx.xxx.x7
(JudyOkla)
50678
250
(Judy
Okla)
1280174675
07 / 26 / 10 @
3:04:35pm EST
user.php
change
history
user id = 8109
9x.xxx.xxx.x7
(JudyOkla)

It is clear that Pickled Tink knew about the admin accounts shortly after the events because she helped dispose of them.  She “killed” two of the accounts.  Before doing so, she did an IP search, so she also knew who used the accounts.

The way in which the new admin accounts were handled indicates that they were not legitimate secondary accounts. If they had been above board, there would have been no need to alter the records of those admins.  If they had been legitimate, there would have been no need for one of them to be “killed” by Danileo and for two to be “killed” by Pickled Tink.