Well, help would be welcome
I don't think statistical tests are the way to go, honestly.  I think that the numbers actually hurt this case.  Instead, I hope to develop tools that find patterns suggestive of quacking.  One of the main complaints is that these methods are untested, so I would first and foremost like to test them against real accounts on RFCU—before the ip check results are posted.  If I can establish a good track record there, then it should engender some confidence that these methods are reliable.

One way to do this is by making a battery of tests. When most of the tests do or do not suggest socking, I would post predictions. Over time, it should be possible to determine which tests are most strongly correlated with sock puppets among different classes of socks—and there are at least two classes: regular and proxy socks. Proxy socks are the difficult problem, but I suspect that there are editing patterns associated with them as well.  Luke