New lies from Libertyreserve

[Originally posted on Mar 5, 2009]

Some minutes ago Libertyreserve published their reaction on their blog, it is exactly what we expected: We are the culprits and clicked on some suspicious links, Libertyreserve is safe because they use McAfeee, Cisco and Prolexic.

Using any of these 3 companies does not give *any* guarantee if the software is bogged, as LR themselves admitted it when they shutdown their API system immediately after the hacks, then turned their website off during 4 days (For a SSL certificate update as they said, sure!).

We notice that LR does not reply to our individual complaints sent to their online support (Business department) about 3 days ago now.

LR says that due to our poor security, a hacker could get our access data, and so register an API in our account, then use it to wipe the balance.
This shows that not only LR wants to scam their users, but their team is also stupid: If a hacker would know our access data to create an API, he would have just to TRANSFER the funds from the account, why would he had created an API for this?

This perfectly confirms that there was a bug in the system of Libertyreserve: It was probably not possible for a hacker to enter our account BUT it was possible to remotely create an API, then he had just to use it to steal our money. Libertyreserve quickly admitted this fact by turning OFF the API and their website a total of 4 days.

By running a bugged system, Libertyreserve is fully responsible of our loss; their blog update and their "no reply policy" to any of our messages seems to show that they will not admit it. We are so going to legally draw the consequences.