Quote from: Quickseller on February 13, 2015, 06:09:19 PM

-snip-
Well a couple things that should be noteworthy.

I certainly appreciate the summary. Sorry if I am a bit thick here.

Quote from: Quickseller on February 13, 2015, 06:09:19 PM

-The address the person on Skype gave me was 1B6TUB1UDR5t8xN346CDJHkjof6iv356RL
-1B6TUB1UDR5t8xN346CDJHkjof6iv356RL was posted in giveaway threads by both CandyStripes and Ejaculation (a known alt of Candy)

Candy: https://bitcointalk.org/index.php?topic=636191.msg7365211#msg7365211

Quote from: Candystripes on June 17, 2014, 04:58:39 PM

I'm in need of a loan again Sad

(I hate having to take loans), some online LTC wallet scammed me and a buddy, and I need it to payback some shit before Wednesday. Payday is next Friday but I'll definitely payback by Saturday as that's when my local supplier is available to meet-up.

I loaned around 0.025 or so last time. I'm need of 0.03+ but I don't want to push the limit too much, send what you feel comfortable loaning.

Address: 1B6TUB1UDR5t8xN346CDJHkjof6iv356RL

Ejaculation: https://bitcointalk.org/index.php?topic=291387.msg7184992#msg7184992

Quote from: Ejaculation on June 07, 2014, 05:35:00 PM

Starting posts: 70
Bitcoin address: 1B6TUB1UDR5t8xN346CDJHkjof6iv356RL

Quote from: Quickseller on February 13, 2015, 06:09:19 PM

-The above fact, in addition to the fact that b53b25770be47c13fee197b8a93b7c6f69102a17205fb8fed8dfee0c80d30751 was signed by both Candy's well known vanity address and the above address should reasonably prove that the person on Skype and Candy are one and the same.

I am not 100% certain about the way outputs have to be if one wanted to create a transaction together with another person but its certainly possible. E.g. coin transactions[1] do not link the inputs to a single person. You are probably right Im just reluctant to accept this as proof.

Quote from: Quickseller on February 13, 2015, 06:09:19 PM

The person on Skype is the same person who, at one point was controlling convicted2008 because:
-At 10:41:06 I get a PM from convicted2008 confirming that he needs a loan
-At 10:41:08 I get confirmation via Skype that a PM was sent.

Ok we got convicted2008 linked to candy now. For easy reference https://bitcointalk.org/index.php?topic=952699.0

Quote from: Quickseller on February 13, 2015, 06:09:19 PM

The reason I thought the account was sold is because:
-Starting on this post, convicted2008 goes from posting exclusively in the altcoin sections to almost posting exclusively outside of the altcoin sections.

Allright, change in posting behaviour is a point. There is also e.g. this post which links to Tobey Collins again. The name can easily be changed though.

Quote from: Convicted2008 on February 09, 2015, 03:21:24 AM

1AvwxMpmAxbEZNLv9tS1ExNphpekzM22wk

https://twitter.com/convicted2008/status/564624795728609280

Thx.

Quote from: Convicted2008 on February 03, 2015, 05:05:32 PM

I love this site 1.51btc win.

http://imgur.com/R23htxQ

Linked convicted2008 to neonecrox13 via coinichiwa username. The account is currently up 0.03, so he lost >1 BTC there.

Quote from: Convicted2008 on January 12, 2015, 01:58:42 AM

Here you go to the ones that didn't want the coins. Didn't mama ever teach you to always accept free gifts no matter what they are?

http://i.imgur.com/cQ3iNqf.png

Don't you wish you could go back in time now and say "Yes please, send those to "x" address and ty for .625btc" You know I'm not saying this would happen every time, but sometimes it does and you can tell this story LMAO!

convicted2008@ in background of the picture open again. Same Windows 8 desktop as here

Quote from: Convicted2008 on January 23, 2015, 04:18:16 PM

I'm hanging onto my hat. Tongue

That did work. But I get 0 submitted and I"m running 8 threads. Does it take a while to submit a share?

http://imgur.com/jMM7sh4

Does this look right? I'm running a i7 with a GEForce 740m

Quote from: Convicted2008 on December 29, 2014, 03:45:02 PM

Username: Neonecrox13

The post you mentioned was 24.12.2014. The posts above are younger, the following posts are older.

Note the desktop

Quote from: Convicted2008 on December 23, 2014, 05:08:39 AM

Someone explain this

http://i.imgur.com/px35gDu.png

I don't get block found. I get that message instead.

same here.

Quote from: Convicted2008 on December 22, 2014, 09:10:22 AM

OFC I get this fucking error.

http://i.imgur.com/CwPFwS4.png

OFC Nobody knows how to fix it either. Well there goes my Emerald mining dreams. Back to Litecoin.

Quote from: Convicted2008 on November 08, 2014, 08:15:55 PM

-snip-
http://imgur.com/tIq5jsb

Quote from: Convicted2008 on November 05, 2014, 03:28:31 AM

-snip-

http://imgur.com/Gs201x4

-snip-
convicted2008

I think its enough now, I doubt the account was transfered just from the screenshots and the desktop seen on them. There is also the icon for the mail account in the last screenshot which is the same for the neonecrox13 account on coinichiwa.

Quote from: Quickseller on February 13, 2015, 06:09:19 PM

-Starting on (around) the above post, the account starts posting heavily in the gambling sections, including the games and rounds section.
-Within a week of the above post the account appears to be engaging in trust farming in which he engages in a series of very small transactions.

Alt coins, gambling and trust farming / loan scams have something in common... quick coins. Alt coins didnt work out, switch to gambling, which did not work out either, switch to full blown scams? Just thinking out loud here. From the above the only link between candy and neon/convicted is the address.

Password was changed way later than the change of interest.

Quote from: redsn0w on February 12, 2015, 08:32:42 AM

-snip-
What do you mean whit that phrase ? I've seen from the seclog that your password was changed :

Code:

- February 11, 2015, 11:22:11 PM - Convicted2008 - password changed

-snip-

At least 1 hour before the change of the password the account was still in control of convicted/neon. (Remember the desktop from the pictures above?) thus it was under control while asking for the loan. Would a hacker risk keeping the password in order to pull this off? I doubt it.

Quote from: Convicted2008 on February 11, 2015, 10:35:55 PM

I've done really good here.

http://imgur.com/6B3nx0B

0.0667 profit

Quote from: Quickseller on February 13, 2015, 06:09:19 PM

Other evidence:
-the convicted account has posted it's convicted2008@live.com email address numerous times from well before I think it was sold, however it is not unheard of for people to sell an email address along with an account (although this is a bad practice) (see this post for an example of this).
-the name 'toby collins' was used in one of the early posts of convicted, however the Facebook profile was not posted until 3 days after I think the account was sold.
-Facebook accounts are commonly sold in the digital goods section
-Facebook does not verify your identity when you create an account, therefore anyone can select any name, and I believe it is possible to change your name on Facebook as well.

Yes the name can be changed as long as you have linked the account to a phone number for verification.

Quote from: Quickseller on February 13, 2015, 06:09:19 PM

-The last time convicted2008 was logged in was February 11, 2015, 11:25:11 PM, while Neonecrox13 was created February 11, 2015, 11:26:21 PM, however according to the security log, the password was changed February 11, 2015, 11:22:11 PM which is a full 3 minutes before convicted was last logged in. Why would someone change the password to an account, stay logged in for exactly 3 minutes and then never use it again (unless he is trying to pretend that his account was hacked)?

Might as well be a timeout issue with the dates registered, the PM you requested however was send way earlier, which speaks against a hack.

Quote from: Quickseller on February 13, 2015, 06:09:19 PM

Additionally:
-I find it very strange that the pictures were posted directly on Facebook, and additionally strange that they were not made public on Facebook (initially).

I don't have time now, however I am going to look into debunking the fact that a "toby collins" was convicted of assaulting a police officer in 2008.

I honestly dont know what to think anymore. They are all linked, yet candy would never post their real name and address, would they?

I worked ~2 hours on this post and I need a break. I see from the replies that have been posted since I started that you want to talk via skype. Ill read up on that tomorrow.

[1] https://www.blocktrail.com/BTC/tx/e4abb15310348edc606e597effc81697bfce4b6de7598347f17c2befd4febf3b