Pages:
Author

Topic: CANDYSTRIPES STOLE MY ACCOUNT "CONVICTED2008" - page 2. (Read 5995 times)

copper member
Activity: 2870
Merit: 2298
-snip-
-The above fact, in addition to the fact that b53b25770be47c13fee197b8a93b7c6f69102a17205fb8fed8dfee0c80d30751 was signed by both Candy's well known vanity address and the above address should reasonably prove that the person on Skype and Candy are one and the same.

I am not 100% certain about the way outputs have to be if one wanted to create a transaction together with another person but its certainly possible. E.g. coin transactions[1] do not link the inputs to a single person. You are probably right Im just reluctant to accept this as proof.
You are correct that two addresses linked in e4abb15310348edc606e597effc81697bfce4b6de7598347f17c2befd4febf3b would likely not connect any two addresses (assuming that group of addresses only signed one transaction together. When linking addresses together because they both signed the same transaction you need to use a little bit of judgment. In the transaction in question, there were two inputs of .02 each from the 1candy address, and one .02 input from the other address, and the output was .05 to some other address and change of .0099 back to the 1candy address. The fact that there was only one output (besides the change output) and the fact that the change was sent back to the 1candy address would lead me to believe they are connected.

I think we have sufficiently determined that 1B6TUB1UDR5t8xN346CDJHkjof6iv356RL belongs to Candy via other means so arguing about this is only going to distract from the conversation. If necessary we can discuss there elsewhere later.


The reason I thought the account was sold is because:
-Starting on this post, convicted2008 goes from posting exclusively in the altcoin sections to almost posting exclusively outside of the altcoin sections.
-snip-
Allright, change in posting behaviour is a point. There is also e.g. this post which links to Tobey Collins again. The name can easily be changed though.
-snip-


I think its enough now, I doubt the account was transfered just from the screenshots and the desktop seen on them. There is also the icon for the mail account in the last screenshot which is the same for the neonecrox13 account on coinichiwa.
Okay so it is reasonable to say that based on the same OP and same general background from screenshots posted from convicted2008 that the account was probably not sold/transferred, however this is not conclusive.
-Starting on (around) the above post, the account starts posting heavily in the gambling sections, including the games and rounds section.
-Within a week of the above post the account appears to be engaging in trust farming in which he engages in a series of very small transactions.

Alt coins, gambling and trust farming / loan scams have something in common... quick coins. Alt coins didnt work out, switch to gambling, which did not work out either, switch to full blown scams? Just thinking out loud here. From the above the only link between candy and neon/convicted is the address.
I don't recall Candy ever being involved in any alt coins, additionally apparently some account farmers (myself not included) like to use the altcoin boards/threads to easily and quickly increase their activity/post count by cheering and/or pumping various alt coins.

I know for a fact that CandyStripes was trust farming with his own accounts, both from his lending thread and from him giving/receiving trust feedback from various other people without trades actually occurring. In the case of convicted2008, it looks like he was more engaged in the trading of gift cards with very trusted members, this is somewhat different however is still an indication of his likely intention of scamming in the future.

The sudden change in behavior could be an indication of unemployment/underemployment ad he was primarily selling things and was apparently spending more time (up from apparently zero) in bitcoin casinos (a sign a having a lot of free time). Having a sudden influx of free time is often caused by sudden unemployment which happens to be very high among felons in the US. Sudden unemployment generally associated with having a greater need for money which could lead to him being willing to do things like this (being willing to "rent" out his account). It would potentially be possible that he gave Candy his account password for him to "use" for whatever reason Candy claimed to be wanting to use it for (this is very much speculation).

Him giving out his password to someone would make sense because someone apparently knew his blockchain.info identifier(username), (but not necessarily his password), as well as his fortune jack password. He previously stated that he used the same password for his various accounts.

Another possibility (that is more speculation) is that he was paid by CandyStripes (or moreia who happens to also hate me because I was able to successfully shit on a number of his scams) to make it look like he is an alt of Candy when he is really not in order to discredit my abilities to call out scams. It would also fit in with the possibility that he is in greater need for money because of un(der)employment.

Password was changed way later than the change of interest.

-snip-
What do you mean whit that phrase ? I've seen from the seclog that your password was changed :

Code:
- February 11, 2015, 11:22:11 PM - Convicted2008 - password changed
-snip-

At least 1 hour before the change of the password the account was still in control of convicted/neon. (Remember the desktop from the pictures above?)
This is in fact very strange. This would corroborate both of my above theories. I am not 100% sure why whoever sent me the 1st PM changed the password on him like that.
thus it was under control while asking for the loan. Would a hacker risk keeping the password in order to pull this off? I doubt it.
It really depends. If he wanted to prevent the account from having a "password was changed recently" tag for 3 days, and the account showing up on the security log for 30 days then he might leave the password as is. If he were to change the password then a hacker would need to wait at least 3 days, during which time the real owner could come forward claiming his account was hacked.
-snip-
Other evidence:
-the convicted account has posted it's [email protected] email address numerous times from well before I think it was sold, however it is not unheard of for people to sell an email address along with an account (although this is a bad practice) (see this post for an example of this).
-the name 'toby collins' was used in one of the early posts of convicted, however the Facebook profile was not posted until 3 days after I think the account was sold.
-Facebook accounts are commonly sold in the digital goods section
-Facebook does not verify your identity when you create an account, therefore anyone can select any name, and I believe it is possible to change your name on Facebook as well.

Yes the name can be changed as long as you have linked the account to a phone number for verification.

-The last time convicted2008 was logged in was February 11, 2015, 11:25:11 PM, while Neonecrox13 was created February 11, 2015, 11:26:21 PM, however according to the security log, the password was changed February 11, 2015, 11:22:11 PM which is a full 3 minutes before convicted was last logged in. Why would someone change the password to an account, stay logged in for exactly 3 minutes and then never use it again (unless he is trying to pretend that his account was hacked)?

Might as well be a timeout issue with the dates registered, the PM you requested however was send way earlier, which speaks against a hack.
I still don't however see why the difference between when this account was created and when the convicted account was last active is so small if the convicted2008 account was actually hacked. I would guess/speculate that the time an account is last active is the last time you click a link (or manually visit a page on the forum - e.g. by manually typing a URL) when still logged in. I think the account was not actually hacked.

Below are additional PM's that I received from convicted after the initial one received (as well as my responses to him)
-snip-

I worked ~2 hours on this post and I need a break. I see from the replies that have been posted since I started that you want to talk via skype. Ill read up on that tomorrow.
-snip-
Thank you for putting so much time into this.


So I was able to resolve the IP address of the Skype account posted by the OP. I am not going to publish it right now, however it does show as belonging to a time warner cable and being located in Lexington, KY, which does match this guy's Facebook account.

I was also able to resolve the IP address of CandyStripes's Skype account, and his IP address is 24.150.101.228 which resolves back to Cogeco Cable and being in Ontario, Canada. While neither of these is 100% concrete, I do not believe that convicted2008 is actually one and the same of CandyStipes (although I think there is a very high probability that they are associated in some way).

I would say that, at best this person has extremely poor security procedures so when trading with him, there is a high probability that it is not actually him.

I would say it is more likely that this person is associated with CandyStripes in some way, and that he intentionally allowed his account to be accessed.

Regardless of the above, the fact remains that this person admitted to scamming a pharmacy by attempting to rob it and resorting to violence when caught. I would say that a 'trade with caution' tag is appropriate no matter which scenario is the most correct. I will most likely edit my feedback on this account in the future, however I want to allow some time for additional evidence to come out first. The fact that the feedback is negative is not going to change, but the comment that the OP is an alt of Candy may change.


Here is the newpaper blog that was about the last time I got into trouble http://ekbnews.blogspot.com/2007/11/pikeville-man-facing-several-charges.html

Like I said, I ended up getting convicted of assault on a police office because its the highest offense crime in the indictment (3rd degree Felony 1-5 years) I was sentenced to 5 years and prison and did every day of it except for the good time that was given to me. Making it a total of 39 months I was in prison.


Also here is a picture of my mugshot for when I got arrested for the pharamacy robbery.

http://kentucky.arrests.org/Arrests/Tobey_Collins_10603662/

Oh man, you make this all public only to proof that you are not Candystripes?? Respect!

CandyStripes is very hated and is likely a liability as I am fairly certain that he broke laws when trying to extort someone in the currency exchange section and is very likely to break laws in the future that will result in jail time if convicted of such.

This is my main a account quickseller, if you wish to contact me personally i hang out on moneypot and JD's trollbox's. You can also talk to other people that know me. I just dont post alot, which is why. I've been a lurker for about  a year, so honestly, dont treat me like im new just because my account is new.
Fair enough. Although I would say your situation is somewhat unusual. I would say that more people would likely create an account on bitcointalk and then eventually find various gambling sites, but there is nothing to say that the opposite never happens.
sr. member
Activity: 434
Merit: 250
:)
This is my main a account quickseller, if you wish to contact me personally i hang out on moneypot and JD's trollbox's. You can also talk to other people that know me. I just dont post alot, which is why. I've been a lurker for about  a year, so honestly, dont treat me like im new just because my account is new.
copper member
Activity: 2870
Merit: 2298
Okay, I'm pretty sure I'm going to get called a "Candy alt" but i KNOW candy. This isn't him, he doesnt type like this. This isn't his style. While i can't 100% back his legitimacy, i don't think everyone should be using him as a fucking scapegoat for everything just because he is an easy target. I actually have done a couple deals with him, and they went well. He really is not a bad dude, (known him for about 7 months) I don't see any hardcore proof in here to be honest, so I'm gonna side with "candy is innocent" on this. Call me an alt, i dont give a damn.
Your account is only less than 4 months old. What is your "main" account? Why not vouch from an older account that you actually used to conduct business with him?
sr. member
Activity: 434
Merit: 250
:)
Okay, I'm pretty sure I'm going to get called a "Candy alt" but i KNOW candy. This isn't him, he doesnt type like this. This isn't his style. While i can't 100% back his legitimacy, i don't think everyone should be using him as a fucking scapegoat for everything just because he is an easy target. I actually have done a couple deals with him, and they went well. He really is not a bad dude, (known him for about 7 months) I don't see any hardcore proof in here to be honest, so I'm gonna side with "candy is innocent" on this. Call me an alt, i dont give a damn.
member
Activity: 112
Merit: 10
SAD - no longer active
Alright its 11:30 pm my time. I have to work tomorrow. I'm going to bed in just a few. I hope that we get to talk tomorrow Quickseller.
member
Activity: 112
Merit: 10
SAD - no longer active

Here is the newpaper blog that was about the last time I got into trouble http://ekbnews.blogspot.com/2007/11/pikeville-man-facing-several-charges.html

Like I said, I ended up getting convicted of assault on a police office because its the highest offense crime in the indictment (3rd degree Felony 1-5 years) I was sentenced to 5 years and prison and did every day of it except for the good time that was given to me. Making it a total of 39 months I was in prison.


Also here is a picture of my mugshot for when I got arrested for the pharamacy robbery.

http://kentucky.arrests.org/Arrests/Tobey_Collins_10603662/

Oh man, you make this all public only to proof that you are not Candystripes?? Respect!


All I'm trying to do is show that I honestly did not do what Quickseller had done to him from the convicted2008 account. I am not gonnna spend this much time and effort into proving that if it isn't true. I do appreciate the previous post 2 where they went through all that. YOU ARE GREATLY APPRECIATED. I am just waiting on Quickseller to want to talk on Skype. I hope that this way we can get this straighted out.
sr. member
Activity: 448
Merit: 250
★☆ QDice.net ★☆ Co-Owner

Here is the newpaper blog that was about the last time I got into trouble http://ekbnews.blogspot.com/2007/11/pikeville-man-facing-several-charges.html

Like I said, I ended up getting convicted of assault on a police office because its the highest offense crime in the indictment (3rd degree Felony 1-5 years) I was sentenced to 5 years and prison and did every day of it except for the good time that was given to me. Making it a total of 39 months I was in prison.


Also here is a picture of my mugshot for when I got arrested for the pharamacy robbery.

http://kentucky.arrests.org/Arrests/Tobey_Collins_10603662/

Oh man, you make this all public only to proof that you are not Candystripes?? Respect!
copper member
Activity: 1498
Merit: 1520
No I dont escrow anymore.
-snip-
Well a couple things that should be noteworthy.

I certainly appreciate the summary. Sorry if I am a bit thick here.

-The address the person on Skype gave me was 1B6TUB1UDR5t8xN346CDJHkjof6iv356RL
-1B6TUB1UDR5t8xN346CDJHkjof6iv356RL was posted in giveaway threads by both CandyStripes and Ejaculation (a known alt of Candy)

Candy: https://bitcointalksearch.org/topic/m.7365211
I'm in need of a loan again Sad (I hate having to take loans), some online LTC wallet scammed me and a buddy, and I need it to payback some shit before Wednesday. Payday is next Friday but I'll definitely payback by Saturday as that's when my local supplier is available to meet-up.

I loaned around 0.025 or so last time. I'm need of 0.03+ but I don't want to push the limit too much, send what you feel comfortable loaning.

Address: 1B6TUB1UDR5t8xN346CDJHkjof6iv356RL


Ejaculation: https://bitcointalksearch.org/topic/m.7184992

Starting posts: 70
Bitcoin address: 1B6TUB1UDR5t8xN346CDJHkjof6iv356RL


-The above fact, in addition to the fact that b53b25770be47c13fee197b8a93b7c6f69102a17205fb8fed8dfee0c80d30751 was signed by both Candy's well known vanity address and the above address should reasonably prove that the person on Skype and Candy are one and the same.

I am not 100% certain about the way outputs have to be if one wanted to create a transaction together with another person but its certainly possible. E.g. coin transactions[1] do not link the inputs to a single person. You are probably right Im just reluctant to accept this as proof.

The person on Skype is the same person who, at one point was controlling convicted2008 because:
-At 10:41:06 I get a PM from convicted2008 confirming that he needs a loan
-At 10:41:08 I get confirmation via Skype that a PM was sent.

Ok we got convicted2008 linked to candy now. For easy reference https://bitcointalksearch.org/topic/convicted2008-is-an-alt-of-candystripes-952699

The reason I thought the account was sold is because:
-Starting on this post, convicted2008 goes from posting exclusively in the altcoin sections to almost posting exclusively outside of the altcoin sections.

Allright, change in posting behaviour is a point. There is also e.g. this post which links to Tobey Collins again. The name can easily be changed though.


I love this site  1.51btc win.

http://imgur.com/R23htxQ

Linked convicted2008 to neonecrox13 via coinichiwa username. The account is currently up 0.03, so he lost >1 BTC there.

Here you go to the ones that didn't want the coins. Didn't mama ever teach you to always accept free gifts no matter what they are?

https://i.imgur.com/cQ3iNqf.png


Don't you wish you could go back in time now and say "Yes please, send those to "x" address and ty for .625btc"  You know I'm not saying this would happen every time, but sometimes it does and you can tell this story LMAO!

convicted2008@ in background of the picture open again. Same Windows 8 desktop as here

I'm hanging onto my hat. Tongue That did work. But I get 0 submitted and I"m running 8 threads. Does it take a while to submit a share?


http://imgur.com/jMM7sh4


Does this look right? I'm running a i7 with a GEForce 740m

Username: Neonecrox13


The post you mentioned was 24.12.2014. The posts above are younger, the following posts are older.

Note the desktop

Someone explain this

https://i.imgur.com/px35gDu.png


I don't get block found. I get that message instead.

same here.

OFC I get this fucking error.

https://i.imgur.com/CwPFwS4.png

OFC Nobody knows how to fix it either. Well there goes my Emerald mining dreams. Back to Litecoin.


-snip-

http://imgur.com/Gs201x4

-snip-
convicted2008

I think its enough now, I doubt the account was transfered just from the screenshots and the desktop seen on them. There is also the icon for the mail account in the last screenshot which is the same for the neonecrox13 account on coinichiwa.

-Starting on (around) the above post, the account starts posting heavily in the gambling sections, including the games and rounds section.
-Within a week of the above post the account appears to be engaging in trust farming in which he engages in a series of very small transactions.

Alt coins, gambling and trust farming / loan scams have something in common... quick coins. Alt coins didnt work out, switch to gambling, which did not work out either, switch to full blown scams? Just thinking out loud here. From the above the only link between candy and neon/convicted is the address.

Password was changed way later than the change of interest.

-snip-
What do you mean whit that phrase ? I've seen from the seclog that your password was changed :

Code:
- February 11, 2015, 11:22:11 PM - Convicted2008 - password changed
-snip-

At least 1 hour before the change of the password the account was still in control of convicted/neon. (Remember the desktop from the pictures above?) thus it was under control while asking for the loan. Would a hacker risk keeping the password in order to pull this off? I doubt it.

I've done really good here.

http://imgur.com/6B3nx0B


0.0667 profit

Other evidence:
-the convicted account has posted it's [email protected] email address numerous times from well before I think it was sold, however it is not unheard of for people to sell an email address along with an account (although this is a bad practice) (see this post for an example of this).
-the name 'toby collins' was used in one of the early posts of convicted, however the Facebook profile was not posted until 3 days after I think the account was sold.
-Facebook accounts are commonly sold in the digital goods section
-Facebook does not verify your identity when you create an account, therefore anyone can select any name, and I believe it is possible to change your name on Facebook as well.

Yes the name can be changed as long as you have linked the account to a phone number for verification.

-The last time convicted2008 was logged in was February 11, 2015, 11:25:11 PM, while Neonecrox13 was created February 11, 2015, 11:26:21 PM, however according to the security log, the password was changed February 11, 2015, 11:22:11 PM which is a full 3 minutes before convicted was last logged in. Why would someone change the password to an account, stay logged in for exactly 3 minutes and then never use it again (unless he is trying to pretend that his account was hacked)?

Might as well be a timeout issue with the dates registered, the PM you requested however was send way earlier, which speaks against a hack.

Additionally:
-I find it very strange that the pictures were posted directly on Facebook, and additionally strange that they were not made public on Facebook (initially).

I don't have time now, however I am going to look into debunking the fact that a "toby collins" was convicted of assaulting a police officer in 2008.

I honestly dont know what to think anymore. They are all linked, yet candy would never post their real name and address, would they?

I worked ~2 hours on this post and I need a break. I see from the replies that have been posted since I started that you want to talk via skype. Ill read up on that tomorrow.


[1] https://www.blocktrail.com/BTC/tx/e4abb15310348edc606e597effc81697bfce4b6de7598347f17c2befd4febf3b
copper member
Activity: 2870
Merit: 2298
Sounds fantastic. Send me a message on here or if you want to call me directly I can pm you my phone number. Or better yet. You seen my cable bill. My home phone number is on the bill. You can call me if you wish.
I don't wish to call you. Just talk on skype.
member
Activity: 112
Merit: 10
SAD - no longer active
Sounds fantastic. Send me a message on here or if you want to call me directly I can pm you my phone number. Or better yet. You seen my cable bill. My home phone number is on the bill. You can call me if you wish.
copper member
Activity: 2870
Merit: 2298
Yes I do have skype.



I don't have no account for skype. I have it on my computer if you want me to make a account and talk to you I will do that.

Also here is a picture of my mugshot for when I got arrested for the pharamacy robbery.

http://kentucky.arrests.org/Arrests/Tobey_Collins_10603662/

Oh here I do have a skype account. The username is Tobeynsteph
i will add you later. I just have a few questions I would like to ask you on skype.
member
Activity: 112
Merit: 10
SAD - no longer active
Yes I do have skype.



I don't have no account for skype. I have it on my computer if you want me to make a account and talk to you I will do that.

Also here is a picture of my mugshot for when I got arrested for the pharamacy robbery.

http://kentucky.arrests.org/Arrests/Tobey_Collins_10603662/

Oh here I do have a skype account. The username is Tobeynsteph
copper member
Activity: 2870
Merit: 2298
member
Activity: 112
Merit: 10
SAD - no longer active
Yes I do have skype.



I don't have no account for skype. I have it on my computer if you want me to make a account and talk to you I will do that.

Also here is a picture of my mugshot for when I got arrested for the pharamacy robbery.

http://kentucky.arrests.org/Arrests/Tobey_Collins_10603662/
copper member
Activity: 2870
Merit: 2298
Do you have Skype
member
Activity: 112
Merit: 10
SAD - no longer active
copper member
Activity: 2870
Merit: 2298
I have even stronger evidence that you are in fact Candystripes

Well, let's see it then, because this is going nowhere.
https://bitcointalksearch.org/topic/convicted2008-is-an-alt-of-candystripes-952699
Quote
-snip-

I removed my rating for Neonecrox13 and will change mine for the convicted account.

I am afraid the transaction does not proof that they are the same person. Although a transaction like that does not happen by chance.
Well a couple things that should be noteworthy.
-The address the person on Skype gave me was 1B6TUB1UDR5t8xN346CDJHkjof6iv356RL
-1B6TUB1UDR5t8xN346CDJHkjof6iv356RL was posted in giveaway threads by both CandyStripes and Ejaculation (a known alt of Candy)
-The above fact, in addition to the fact that b53b25770be47c13fee197b8a93b7c6f69102a17205fb8fed8dfee0c80d30751 was signed by both Candy's well known vanity address and the above address should reasonably prove that the person on Skype and Candy are one and the same.

The person on Skype is the same person who, at one point was controlling convicted2008 because:
-At 10:41:06 I get a PM from convicted2008 confirming that he needs a loan
-At 10:41:08 I get confirmation via Skype that a PM was sent.

The reason I thought the account was sold is because:
-Starting on this post, convicted2008 goes from posting exclusively in the altcoin sections to almost posting exclusively outside of the altcoin sections.
-Starting on (around) the above post, the account starts posting heavily in the gambling sections, including the games and rounds section.
-Within a week of the above post the account appears to be engaging in trust farming in which he engages in a series of very small transactions.

Other evidence:
-the convicted account has posted it's [email protected] email address numerous times from well before I think it was sold, however it is not unheard of for people to sell an email address along with an account (although this is a bad practice) (see this post for an example of this).
-the name 'toby collins' was used in one of the early posts of convicted, however the Facebook profile was not posted until 3 days after I think the account was sold.
-Facebook accounts are commonly sold in the digital goods section
-Facebook does not verify your identity when you create an account, therefore anyone can select any name, and I believe it is possible to change your name on Facebook as well.
-The last time convicted2008 was logged in was February 11, 2015, 11:25:11 PM, while Neonecrox13 was created February 11, 2015, 11:26:21 PM, however according to the security log, the password was changed February 11, 2015, 11:22:11 PM which is a full 3 minutes before convicted was last logged in. Why would someone change the password to an account, stay logged in for exactly 3 minutes and then never use it again (unless he is trying to pretend that his account was hacked)?

Additionally:
-I find it very strange that the pictures were posted directly on Facebook, and additionally strange that they were not made public on Facebook (initially).

I don't have time now, however I am going to look into debunking the fact that a "toby collins" was convicted of assaulting a police officer in 2008.
copper member
Activity: 1498
Merit: 1520
No I dont escrow anymore.

I removed my rating for Neonecrox13 and will change mine for the convicted account.

I am afraid the transaction does not proof that they are the same person. Although a transaction like that does not happen by chance.

Edit: added closing quote tag
copper member
Activity: 2870
Merit: 2298
I have even stronger evidence that you are in fact Candystripes

Well, let's see it then, because this is going nowhere.
https://bitcointalksearch.org/topic/convicted2008-is-an-alt-of-candystripes-952699

Quote
I understand that your business depends on your ability to sniff out scammers, but some of your reasoning here seems a little convoluted.
no it doesn't
legendary
Activity: 1932
Merit: 1737
"Common rogue from Russia with a bare ass."
I have even stronger evidence that you are in fact Candystripes

Well, let's see it then, because this is going nowhere.
I understand that your business depends on your ability to sniff out scammers, but some of your reasoning here seems a little convoluted.
Pages:
Jump to: