Wednesday 13 April 2011

Actions Speak Louder Than Words.

A brief synopsis of knudt's most recent blogs.....

JudyOkla and Danileo created six new accounts at forum.susan-boyle.com.  They were EvaMarie, kaydaniels (8101), roseym, kaydaniels (8106), Looie and jayme.  They proceeded to give them admin permissions.  Four of the six accounts performed actions as admins on July 18th-20th, including using “access masks” to override forum permissions.

Kaydaniels (8101) was used by JudyOkla on the evening of July 18th.  She moderated posts and modified announcements.

JudyOkla returned to her own account and modified the account of larryF, LonniR’s alter ego. She then edited her own admin permissions as well as those of DocRobbie and lChris.

Danileo logged in as EvaMarie.  The Kaydaniels account was apparently unsatisfactory so EvaMarie 'killed' the account of the first Kaydaniels, removing most (but not all) evidence.

Twelve mins later, JudyOkla switched from her own account to that of roseym.  She performed a variety of actions in the Admin Control Panel before returning to her own account again.

JudyOkla edited the account of 'Nugget' which was another account used by Hulapig.  Then she edited her own admin permissions again.

By 9.12pm, a new (second) account under the name of kaydaniels had been created.  This account was modified and edited by Danileo using the account of EvaMarie. 

JudyOkla edited forum permissions for a variety of threads, using access masks which override other permissions.  This included both Staff room and member threads.  Shortly after 11.00pm, JudyOkla resigned, followed soon after by Danileo.

A mere 10 mins after Danileo resigned, EvaMarie was back on the forum using an IP address of a proxy in Illinois.  EvaMarie edited the account of Looie, another of the newly-created admin accounts.  

EvaMarie returned after midnight on July 19th using yet another proxy, this one in the UK.  EvaMarie altered the record of the original account of Clix Pix.  Then she continued to edit Looie's account.  EvaMarie also edited access masks (permissions) for forum threads.

Then JudyOkla logged in as kaydaniels from her own IP.  She also edited Looie, edited permissions for the Red Room and altered the history for the account of Luz. She also modified/edited the account of jayme.

In the afternoon of July 19th, Danileo logged in as EvaMarie, this time from her own IP, to view the account of a member. 

On July 20th, kaydaniels used the same UK IP that EvaMarie had used, strongly indicating that this IP was a proxy. 

In mid August, JudyOkla and Danileo both admitted to creating new admin accounts but denied using them to change anything.  The evidence suggests otherwise.

One indication that the new admin accounts were not legitimate is the clean up used to hide the evidence.  The first kaydaniels account had been killed.  JudyOkla and Danileo both altered the records of the new admins.  

Pickled Tink viewed the IPs of EvaMarie and Looie, so she was aware of who had used them.  Then she “killed” the accounts.

On July 23rd Pickled Tink checked the IPs used by EvaMarie.  Then she killed that account.  On July 25th, Pickled Tink checked the IP for Looie and then killed that account as well.

A couple of weeks after killing EvaMarie and Looie, Pickled Tink posted the following in the 'Debunking Some Rumours' thread on the forum at SBFII:
"The Investigation in the issues around hacking will be followed through proper channels. We would be  grateful if folk could avoid speculating about “Who done it” as that is counterproductive and actually hinders rather than helps. The fact is that we do NOT know who did what, if anything, at this stage and so speculating and suggesting it might be A, B or C is unhelpful – everyone is innocent until there is evidence and incontrovertible  proof that they are guilty of something."
It appears from the record that Pickled Tink knew far more than she ever admitted.