-snip-
Well a couple things that should be noteworthy.
I certainly appreciate the summary. Sorry if I am a bit thick here.
-The address the person on Skype gave me was 1B6TUB1UDR5t8xN346CDJHkjof6iv356RL
-1B6TUB1UDR5t8xN346CDJHkjof6iv356RL was posted in giveaway threads by both CandyStripes and Ejaculation (a known alt of Candy)
Candy:
https://bitcointalk.org/index.php?topic=636191.msg7365211#msg7365211I'm in need of a loan again

(I hate having to take loans), some online LTC wallet scammed me and a buddy, and I need it to payback some shit before Wednesday. Payday is next Friday but I'll definitely payback by Saturday as that's when my local supplier is available to meet-up.
I loaned around 0.025 or so last time. I'm need of 0.03+ but I don't want to push the limit too much, send what you feel comfortable loaning.
Address: 1B6TUB1UDR5t8xN346CDJHkjof6iv356RL
Ejaculation:
https://bitcointalk.org/index.php?topic=291387.msg7184992#msg7184992Starting posts: 70
Bitcoin address: 1B6TUB1UDR5t8xN346CDJHkjof6iv356RL
-The above fact, in addition to the fact that b53b25770be47c13fee197b8a93b7c6f69102a17205fb8fed8dfee0c80d30751 was signed by both Candy's well known vanity address and the above address should reasonably prove that the person on Skype and Candy are one and the same.
I am not 100% certain about the way outputs have to be if one wanted to create a transaction together with another person but its certainly possible. E.g. coin transactions[1] do not link the inputs to a single person. You are probably right Im just reluctant to accept this as proof.
The person on Skype is the same person who, at one point was controlling convicted2008 because:
-At 10:41:06 I get a PM from convicted2008 confirming that he needs a loan
-At 10:41:08 I get confirmation via Skype that a PM was sent.
Ok we got convicted2008 linked to candy now. For easy reference
https://bitcointalk.org/index.php?topic=952699.0The reason I thought the account was sold is because:
-Starting on
this post, convicted2008 goes from posting exclusively in the altcoin sections to almost posting exclusively outside of the altcoin sections.
Allright, change in posting behaviour is a point. There is also e.g. this post which links to Tobey Collins again. The name can easily be changed though.
Linked convicted2008 to neonecrox13 via coinichiwa username. The account is currently up 0.03, so he lost >1 BTC there.
Here you go to the ones that didn't want the coins. Didn't mama ever teach you to always accept free gifts no matter what they are?
http://i.imgur.com/cQ3iNqf.pngDon't you wish you could go back in time now and say "Yes please, send those to "x" address and ty for .625btc" You know I'm not saying this would happen every time, but sometimes it does and you can tell this story LMAO!
convicted2008@ in background of the picture open again. Same Windows 8 desktop as here
I'm hanging onto my hat.

That did work. But I get 0 submitted and I"m running 8 threads. Does it take a while to submit a share?
http://imgur.com/jMM7sh4Does this look right? I'm running a i7 with a GEForce 740m
Username: Neonecrox13
The post you mentioned was 24.12.2014. The posts above are younger, the following posts are older.
Note the desktop
same here.
OFC I get this fucking error.
http://i.imgur.com/CwPFwS4.pngOFC Nobody knows how to fix it either. Well there goes my Emerald mining dreams. Back to Litecoin.
I think its enough now, I doubt the account was transfered just from the screenshots and the desktop seen on them. There is also the icon for the mail account in the last screenshot which is the same for the neonecrox13 account on coinichiwa.
-Starting on (around) the above post, the account starts posting heavily in the gambling sections, including the games and rounds section.
-Within a week of the above post the account appears to be engaging in trust farming in which he engages in a series of very small transactions.
Alt coins, gambling and trust farming / loan scams have something in common... quick coins. Alt coins didnt work out, switch to gambling, which did not work out either, switch to full blown scams? Just thinking out loud here. From the above the only link between candy and neon/convicted is the address.
Password was changed way later than the change of interest.
-snip-
What do you mean whit that phrase ? I've seen from the seclog that your password was changed :
- February 11, 2015, 11:22:11 PM - Convicted2008 - password changed
-snip-
At least 1 hour before the change of the password the account was still in control of convicted/neon. (Remember the desktop from the pictures above?) thus it was under control while asking for the loan. Would a hacker risk keeping the password in order to pull this off? I doubt it.
Other evidence:
-the convicted account has posted it's
convicted2008@live.com email address numerous times from well before I think it was sold, however it is not unheard of for people to sell an email address along with an account (although this is a bad practice) (
see this post for an example of this).
-the name 'toby collins' was used in one of the early posts of convicted, however the Facebook profile was not posted until 3 days after I think the account was sold.
-Facebook accounts are commonly sold in the digital goods section
-Facebook does not verify your identity when you create an account, therefore anyone can select any name, and I believe it is possible to change your name on Facebook as well.
Yes the name can be changed as long as you have linked the account to a phone number for verification.
-The last time convicted2008 was logged in was February 11, 2015, 11:25:11 PM, while Neonecrox13 was created February 11, 2015, 11:26:21 PM, however according to the
security log, the password was changed February 11, 2015, 11:22:11 PM which is a full 3 minutes before convicted was last logged in. Why would someone change the password to an account, stay logged in for exactly 3 minutes and then never use it again (unless he is trying to pretend that his account was hacked)?
Might as well be a timeout issue with the dates registered, the PM you requested however was send way earlier, which speaks against a hack.
Additionally:
-I find it very strange that the pictures were posted directly on Facebook, and additionally strange that they were not made public on Facebook (initially).
I don't have time now, however I am going to look into debunking the fact that a "toby collins" was convicted of assaulting a police officer in 2008.
I honestly dont know what to think anymore. They are all linked, yet candy would never post their real name and address, would they?
I worked ~2 hours on this post and I need a break. I see from the replies that have been posted since I started that you want to talk via skype. Ill read up on that tomorrow.
[1]
https://www.blocktrail.com/BTC/tx/e4abb15310348edc606e597effc81697bfce4b6de7598347f17c2befd4febf3b