Quote from: shorena on February 13, 2015, 10:06:15 PM

-snip-

Quote from: Quickseller on February 13, 2015, 06:09:19 PM

-The above fact, in addition to the fact that b53b25770be47c13fee197b8a93b7c6f69102a17205fb8fed8dfee0c80d30751 was signed by both Candy's well known vanity address and the above address should reasonably prove that the person on Skype and Candy are one and the same.

I am not 100% certain about the way outputs have to be if one wanted to create a transaction together with another person but its certainly possible. E.g. coin transactions[1] do not link the inputs to a single person. You are probably right Im just reluctant to accept this as proof.

You are correct that two addresses linked in e4abb15310348edc606e597effc81697bfce4b6de7598347f17c2befd4febf3b would likely not connect any two addresses (assuming that group of addresses only signed one transaction together. When linking addresses together because they both signed the same transaction you need to use a little bit of judgment. In the transaction in question, there were two inputs of .02 each from the 1candy address, and one .02 input from the other address, and the output was .05 to some other address and change of .0099 back to the 1candy address. The fact that there was only one output (besides the change output) and the fact that the change was sent back to the 1candy address would lead me to believe they are connected.

I think we have sufficiently determined that 1B6TUB1UDR5t8xN346CDJHkjof6iv356RL belongs to Candy via other means so arguing about this is only going to distract from the conversation. If necessary we can discuss there elsewhere later.

Quote from: Quickseller on February 13, 2015, 06:09:19 PM

The reason I thought the account was sold is because:
-Starting on this post, convicted2008 goes from posting exclusively in the altcoin sections to almost posting exclusively outside of the altcoin sections.

Quote from: shorena on February 13, 2015, 10:06:15 PM

-snip-
Allright, change in posting behaviour is a point. There is also e.g. this post which links to Tobey Collins again. The name can easily be changed though.
-snip-

I think its enough now, I doubt the account was transfered just from the screenshots and the desktop seen on them. There is also the icon for the mail account in the last screenshot which is the same for the neonecrox13 account on coinichiwa.

Okay so it is reasonable to say that based on the same OP and same general background from screenshots posted from convicted2008 that the account was probably not sold/transferred, however this is not conclusive.

Quote from: shorena on February 13, 2015, 10:06:15 PM

Quote from: Quickseller on February 13, 2015, 06:09:19 PM

-Starting on (around) the above post, the account starts posting heavily in the gambling sections, including the games and rounds section.
-Within a week of the above post the account appears to be engaging in trust farming in which he engages in a series of very small transactions.

Alt coins, gambling and trust farming / loan scams have something in common... quick coins. Alt coins didnt work out, switch to gambling, which did not work out either, switch to full blown scams? Just thinking out loud here. From the above the only link between candy and neon/convicted is the address.

I don't recall Candy ever being involved in any alt coins, additionally apparently some account farmers (myself not included) like to use the altcoin boards/threads to easily and quickly increase their activity/post count by cheering and/or pumping various alt coins.

I know for a fact that CandyStripes was trust farming with his own accounts, both from his lending thread and from him giving/receiving trust feedback from various other people without trades actually occurring. In the case of convicted2008, it looks like he was more engaged in the trading of gift cards with very trusted members, this is somewhat different however is still an indication of his likely intention of scamming in the future.

The sudden change in behavior could be an indication of unemployment/underemployment ad he was primarily selling things and was apparently spending more time (up from apparently zero) in bitcoin casinos (a sign a having a lot of free time). Having a sudden influx of free time is often caused by sudden unemployment which happens to be very high among felons in the US. Sudden unemployment generally associated with having a greater need for money which could lead to him being willing to do things like this (being willing to "rent" out his account). It would potentially be possible that he gave Candy his account password for him to "use" for whatever reason Candy claimed to be wanting to use it for (this is very much speculation).

Him giving out his password to someone would make sense because someone apparently knew his blockchain.info identifier(username), (but not necessarily his password), as well as his fortune jack password. He previously stated that he used the same password for his various accounts.

Another possibility (that is more speculation) is that he was paid by CandyStripes (or moreia who happens to also hate me because I was able to successfully shit on a number of his scams) to make it look like he is an alt of Candy when he is really not in order to discredit my abilities to call out scams. It would also fit in with the possibility that he is in greater need for money because of un(der)employment.

Quote from: shorena on February 13, 2015, 10:06:15 PM

Password was changed way later than the change of interest.

Quote from: redsn0w on February 12, 2015, 08:32:42 AM

-snip-
What do you mean whit that phrase ? I've seen from the seclog that your password was changed :

Code:

- February 11, 2015, 11:22:11 PM - Convicted2008 - password changed

-snip-

At least 1 hour before the change of the password the account was still in control of convicted/neon. (Remember the desktop from the pictures above?)

This is in fact very strange. This would corroborate both of my above theories. I am not 100% sure why whoever sent me the 1st PM changed the password on him like that.

Quote from: shorena on February 13, 2015, 10:06:15 PM

thus it was under control while asking for the loan. Would a hacker risk keeping the password in order to pull this off? I doubt it.

It really depends. If he wanted to prevent the account from having a "password was changed recently" tag for 3 days, and the account showing up on the security log for 30 days then he might leave the password as is. If he were to change the password then a hacker would need to wait at least 3 days, during which time the real owner could come forward claiming his account was hacked.

Quote from: shorena on February 13, 2015, 10:06:15 PM

-snip-

Quote from: Quickseller on February 13, 2015, 06:09:19 PM

Other evidence:
-the convicted account has posted it's convicted2008@live.com email address numerous times from well before I think it was sold, however it is not unheard of for people to sell an email address along with an account (although this is a bad practice) (see this post for an example of this).
-the name 'toby collins' was used in one of the early posts of convicted, however the Facebook profile was not posted until 3 days after I think the account was sold.
-Facebook accounts are commonly sold in the digital goods section
-Facebook does not verify your identity when you create an account, therefore anyone can select any name, and I believe it is possible to change your name on Facebook as well.

Yes the name can be changed as long as you have linked the account to a phone number for verification.

Quote from: Quickseller on February 13, 2015, 06:09:19 PM

-The last time convicted2008 was logged in was February 11, 2015, 11:25:11 PM, while Neonecrox13 was created February 11, 2015, 11:26:21 PM, however according to the security log, the password was changed February 11, 2015, 11:22:11 PM which is a full 3 minutes before convicted was last logged in. Why would someone change the password to an account, stay logged in for exactly 3 minutes and then never use it again (unless he is trying to pretend that his account was hacked)?

Might as well be a timeout issue with the dates registered, the PM you requested however was send way earlier, which speaks against a hack.

I still don't however see why the difference between when this account was created and when the convicted account was last active is so small if the convicted2008 account was actually hacked. I would guess/speculate that the time an account is last active is the last time you click a link (or manually visit a page on the forum - e.g. by manually typing a URL) when still logged in. I think the account was not actually hacked.

Below are additional PM's that I received from convicted after the initial one received (as well as my responses to him)

Quote from: Convicted2008 on February 11, 2015, 11:16:30 PM

Hey why the fuck u leave negative trust on me? I've never claimed to have any s3's? That needs to be corrected immediately.

This PM was sent 52 seconds after I made my scam accusation saying that convicted2008 is an alt of CandyStripes, I would doubt that he would have had enough time to read my scam accusation and send me a PM in that amount of time, it was probably a reaction to the feedback I left him, although based on when I received a Skype message about the negative trust I originally left him, it was only ~20 minutes after I left him negative feedback which is an extremely short time to notice negative trust.

Quote from: Quickseller on February 11, 2015, 11:18:28 PM

Quote from: Convicted2008 on February 11, 2015, 11:16:30 PM

Hey why the fuck u leave negative trust on me? I've never claimed to have any s3's? That needs to be corrected immediately.

Quote

He told me, among other things that he has 3 S4's that he can use as income to repay the loan

It says that you claimed to have 3 S4's

Quote from: Convicted2008 on February 11, 2015, 11:19:41 PM

Its says what? Where? I've never 1 time said I have s3's

Quote from: Quickseller on February 11, 2015, 11:20:45 PM

Quote from: Convicted2008 on February 11, 2015, 11:19:41 PM

Its says what? Where? I've never 1 time said I have s3's

Code:

[2/11/15, 5:30:51 PM] Neymar Dos Santos Jr.: my miners make money
[2/11/15, 5:30:55 PM] Neymar Dos Santos Jr.: one week maximum
[2/11/15, 5:31:16 PM] quick seller: what miner do you have?
[2/11/15, 5:31:21 PM] Neymar Dos Santos Jr.: s4
[2/11/15, 5:31:30 PM] quick seller: just one?
[2/11/15, 5:31:34 PM] Neymar Dos Santos Jr.: 3

yes you did

Quote from: Convicted2008 on February 11, 2015, 11:20:19 PM

2nd of all. I've never had a loan in my life. I don't know who your talking to or about, but this needs to be fixed ASAP.

I did not respond to this message

Quote from: Neonecrox13 on February 11, 2015, 11:29:19 PM

Hey, I don't know what's going on here. I am convicted2008. It logged me out and said that my account does not exist anymore. Now I'm searching for my posts that I done and someone said that I'm Candystripes. I have no clue who that is or what the fuck is going on but I'm gonna get to the bottom of it.

Quote from: Quickseller on February 11, 2015, 11:34:34 PM

Quote from: Neonecrox13 on February 11, 2015, 11:29:19 PM

Hey, I don't know what's going on here. I am convicted2008. It logged me out and said that my account does not exist anymore. Now I'm searching for my posts that I done and someone said that I'm Candystripes. I have no clue who that is or what the fuck is going on but I'm gonna get to the bottom of it.

Well you just changed your password, but I doubt that you were logged out.

You can post in my scam accusation against you if you want to discuss anything further.

Quote from: shorena on February 13, 2015, 10:06:15 PM

-snip-

I worked ~2 hours on this post and I need a break. I see from the replies that have been posted since I started that you want to talk via skype. Ill read up on that tomorrow.
-snip-

Thank you for putting so much time into this.

So I was able to resolve the IP address of the Skype account posted by the OP. I am not going to publish it right now, however it does show as belonging to a time warner cable and being located in Lexington, KY, which does match this guy's Facebook account.

I was also able to resolve the IP address of CandyStripes's Skype account, and his IP address is 24.150.101.228 which resolves back to Cogeco Cable and being in Ontario, Canada. While neither of these is 100% concrete, I do not believe that convicted2008 is actually one and the same of CandyStipes (although I think there is a very high probability that they are associated in some way).

I would say that, at best this person has extremely poor security procedures so when trading with him, there is a high probability that it is not actually him.

I would say it is more likely that this person is associated with CandyStripes in some way, and that he intentionally allowed his account to be accessed.

Regardless of the above, the fact remains that this person admitted to scamming a pharmacy by attempting to rob it and resorting to violence when caught. I would say that a 'trade with caution' tag is appropriate no matter which scenario is the most correct. I will most likely edit my feedback on this account in the future, however I want to allow some time for additional evidence to come out first. The fact that the feedback is negative is not going to change, but the comment that the OP is an alt of Candy may change.

Quote from: IronMarvel on February 13, 2015, 11:28:20 PM

Quote from: Neonecrox13 on February 13, 2015, 07:28:02 PM

Here is the newpaper blog that was about the last time I got into trouble http://ekbnews.blogspot.com/2007/11/pikeville-man-facing-several-charges.html

Like I said, I ended up getting convicted of assault on a police office because its the highest offense crime in the indictment (3rd degree Felony 1-5 years) I was sentenced to 5 years and prison and did every day of it except for the good time that was given to me. Making it a total of 39 months I was in prison.

Quote from: Neonecrox13 on February 13, 2015, 07:43:07 PM

Also here is a picture of my mugshot for when I got arrested for the pharamacy robbery.

http://kentucky.arrests.org/Arrests/Tobey_Collins_10603662/

Oh man, you make this all public only to proof that you are not Candystripes?? Respect!

CandyStripes is very hated and is likely a liability as I am fairly certain that he broke laws when trying to extort someone in the currency exchange section and is very likely to break laws in the future that will result in jail time if convicted of such.

Quote from: Mist on February 14, 2015, 05:38:33 AM

This is my main a account quickseller, if you wish to contact me personally i hang out on moneypot and JD's trollbox's. You can also talk to other people that know me. I just dont post alot, which is why. I've been a lurker for about a year, so honestly, dont treat me like im new just because my account is new.

Fair enough. Although I would say your situation is somewhat unusual. I would say that more people would likely create an account on bitcointalk and then eventually find various gambling sites, but there is nothing to say that the opposite never happens.