Well help would be welcome I don t think statistical tests are the way to go honestly I think that the numbers actually hurt this case Instead I hope to develop tools that find patterns suggestive of quacking One of the main complaints is that these methods are untested so I would first and foremost like to test them against real accounts on RFCU before the ip check results are posted If I can establish a good track record there then it should engender some confidence that these methods are reliable One way to do this is by making a battery of tests When most of the tests do or do not suggest socking I would post predictions Over time it should be possible to determine which tests are most strongly correlated with sock puppets among different classes of socks and there are at least two classes regular and proxy socks Proxy socks are the difficult problem but I suspect that there are editing patterns associated with them as well Luke