2009-11-09 cvn-wikia-wookieepedia

At 12:28 EST (17:28 UTC), an unknown operator in our #cvn-wikia-wookieepedia channel gave op access through ChanServ to a known troll named JackieChan ( n=badass@200.55.248.82 ) immediately after they joined. The op'd user then kicked out all other members, cleared the ban list, and changed the channel topic (see text below). The channel was recovered soon thereafter, but kicking the bot disrupted RC service in the channel (its primary purpose) until 18:13 EST (23:13 UTC). See the logs below for further details.

We would like to know who op'd the troll, to take action as needed to prevent further disruption from a compromised account or malicious operator.

Suspects
The users listed below can assign op.

{| class="prettytable"
 * not suspected
 * CVNfounder_wikia (not present, last seen October 17)
 * Az1568 (idle throughout incident)
 * Cbrown1023 (idle throughout incident)
 * Kylu (idle throughout incident, staff investigating incident)
 * Pathoschild (not present, founder investigating incident, me)


 * unlikely suspects
 * Misza (not present)
 * Shanel (not present)


 * possible suspects
 * Darth_Culator (kickbanned previous incarnations of troll, was troll's first target upon gaining access)
 * Jack_Phoenix (active circa time of incident)

Timeline (EST)
#cvn-wikia-wookieepedia:
 * 11:47 – 12:10: Babushka ( badass@200.55.248.82 ) joins and is kickbanned by Culator.
 * 12:16 – 12:18: DannyDevito ( badass@200.55.248.82 ) joins and is kickbanned by Culator.
 * 12:28: JackieChan ( n=badass@189.63.218.79 ) joins the channel and is op'd by Chanserv. He immediately kickbans Culator and other users in the channel (including the bot), and clears the ban list.
 * 12:30 : JackieChan changes channel topic to "We are the Knights of Saint Elmo. We are legion. We are one. We do not forgive. We do not forget. We will crush anything that stands in our way. But we will be hailed as saviours of the internet. Sith Lords, MAN THE PLANET DESTRUCTOURS! Expect us. Knights of Saint Elmo are waiting."
 * 14:45: CVN staff are asked to join the channel. JackieChan is kickbanned, his bans lifted, topic restored.

#wookieepedia-social:
 * 12:15: BabushkaReturns ( n=badass@200.55.248.82 ) joins.
 * 12:16: BabushkaReturns renames himself to DannyDevito.
 * 12:18: DannyDevito renames himself to YourBansFail, says "Keep that in mind.", and quits.

#freenode:
 * 00:03 – 00:20: following investigation (this page), a freenode staff member is privately contacted for evidence from the server logs. They refuse to release the information without a group contact, but will try to expedite the already pending group contact form (GCF).
 * Nov 13, 23:29 – 23:35: freenode contact notes GCF queue is 'rather long', and that they haven't yet been able to speak with those who process it about expediting the GCF request.

#cvn-wikia-wookieepedia (incident)
[11:47] * Babushka (n=badass@200.55.248.82) has joined #cvn-wikia-wookieepedia [11:49] * ChanServ sets mode: +v Babushka [12:08] <+Starnes2> �10Whitelist�14 User:Atarumaster88 �10used edit summary "spam"�14 User talk:Princess Leia Organa Skywalker Solo (+423)�14 �10Diff:�12 http://starwars.wikia.com/index.php?diff=2824464&oldid=2824456�14 "/* Spamming */ " [12:09] * ChanServ sets mode: +o Culator|Away [12:09] * Retrieving #cvn-wikia-wookieepedia modes... [12:09] * Culator|Away sets mode: +b *Babushka*!*@* [12:10] * Babushka was kicked by Culator|Away (Culator|Away�) ... [12:16] * DannyDevito (n=badass@200.55.248.82) has joined #cvn-wikia-wookieepedia [12:17] * ChanServ sets mode: +o DannyDevito [12:17] * ChanServ sets mode: +o Culator|Away [12:17] * DannyDevito was kicked by Culator|Away (Culator|Away�) [12:17] * DannyDevito (n=badass@200.55.248.82) has joined #cvn-wikia-wookieepedia [12:17] * Culator|Away sets mode: +b *DannyDevito*!*@* [12:18] * DannyDevito was kicked by Culator|Away (Culator|Away�) [12:18] * Culator|Away sets mode: +b *!*@200.55.248.82 ... [12:28] * JackieChan (n=badass@189.63.218.79) has joined #cvn-wikia-wookieepedia [12:28] <+Starnes2> �03�IP��14 User:92.236.232.43 �03�edited��14 R2-D2 (-5)�14 �10Diff:�12 http://starwars.wikia.com/index.php?diff=2824480&oldid=2821000�14 "/* Abilities controversy */ Seriosuly? What is controversial about the droid's abilities? Nothing. Common sense people." [12:28] * ChanServ sets mode: +o JackieChan [12:28] * JackieChan sets mode: +b *!*@wikia/Darth-Culator [12:28] * You were kicked by JackieChan (JackieChan�) [12:28] * Attempting to rejoin channel #cvn-wikia-wookieepedia [12:28] * Unable to join channel (address is banned)

#wookieepedia-social (taunt)
[12:15] * BabushkaReturns (n=badass@200.55.248.82) has joined #wookieepedia-social [12:16] * BabushkaReturns is now known as DannyDevito [12:18] * DannyDevito is now known as YourBansFail [12:18]  Keep that in mind. [12:19] * YourBansFail (n=badass@200.55.248.82) Quit (Client Quit)

#cvn-wikia-wookieepedia (idle times)
[2009-11-09 15:28:33] === kibble  `` Casey Brown '' [2009-11-09 15:28:33] === kibble: member of #ubuntu, #wikimedia, +#countervandalism, #freenode, #wikimedia-tech, #mediawiki, +#defocus, #wikia, and #uncyclopedia [2009-11-09 15:28:33] === kibble: attached to irc.freenode.net `` http://freenode.net/ '' [2009-11-09 15:28:33] === kibble: away with message `` I'm not here [screen detached, sleep]... try memo or e-mail '' [2009-11-09 15:28:33] === kibble is identified to services [2009-11-09 15:28:33] === kibble is signed on as account Cbrown1023 [2009-11-09 15:28:33] === kibble: idle for 18 hours, 50 minutes, 36 seconds (on since Sunday, November 08, 2009 12:30:05 PM) [2009-11-09 15:28:33] --- End of WHOIS information for kibble. [2009-11-09 15:28:43] === The nickname `` kyl '' does not exist. [2009-11-09 15:28:51] === kylu[afk]  ``Kylu'' [2009-11-09 15:28:51] === kylu[afk]: member of #wikimedia-stewards and +#countervandalism [2009-11-09 15:28:51] === kylu[afk]: attached to irc.freenode.net `` http://freenode.net/ '' [2009-11-09 15:28:51] === kylu[afk] is identified to services [2009-11-09 15:28:51] === kylu[afk] is signed on as account kylu [2009-11-09 15:28:51] === kylu[afk]: idle for 16 hours, 34 minutes, 5 seconds (on since Sunday, November 08, 2009 5:43:46 PM) [2009-11-09 15:28:51] --- End of WHOIS information for kylu[afk]. [2009-11-09 15:29:15] === Az1568  `` Az1568 '' [2009-11-09 15:29:15] === Az1568: member of #wikimedia, +#countervandalism, #freenode, #wikimedia-tech, #mediawiki, +#defocus, #wikia, and #uncyclopedia [2009-11-09 15:29:15] === Az1568: attached to irc.freenode.net `` http://freenode.net/ '' [2009-11-09 15:29:15] === Az1568: away with message `` Away. [screen detached]..try email or skype. '' [2009-11-09 15:29:15] === Az1568 is identified to services [2009-11-09 15:29:15] === Az1568 is signed on as account Az1568 [2009-11-09 15:29:15] === Az1568: idle for 13 hours, 11 minutes, 31 seconds (on since Sunday, November 08, 2009 1:08:50 AM) [2009-11-09 15:29:15] --- End of WHOIS information for Az1568. [2009-11-09 15:29:29] Pathoschild: also keep in mind the idle times of those online [2009-11-09 15:29:53] everyone but the person in suspicion has 10+ hour idle time [2009-11-09 15:29:59] === ashley  `` I'm not a good person to get involved with [2009-11-09 15:29:59] === ashley: member of #uncyclopedia, #wikimedia-tech, +#countervandalism, #halopedia, and #mediawiki [2009-11-09 15:29:59] === ashley: attached to irc.freenode.net `` http://freenode.net/ '' [2009-11-09 15:30:00] === ashley: away with message `` not here '' [2009-11-09 15:30:00] === ashley is identified to services [2009-11-09 15:30:00] === ashley is signed on as account Jack_Phoenix [2009-11-09 15:30:00] === ashley: idle for 1 hour, 25 minutes, 20 seconds (on since Sunday, November 01, 2009 1:44:29 PM) [2009-11-09 15:30:00] --- End of WHOIS information for ashley.