2) After discovering the first theft, I changed all passwords and PINs to do with LR, and I did not leave them anywhere. I never used my keyboard to type them out so a key logger could not have got it.
From the hindsight is 20/20 department: If you had discovered that some unauthorized access (particularly theft) had occurred, your mindset should have switched to assuming that you have a compromised system.
Then with that assumption you then work towards regaining a secure environment before doing anything else from that point on.
After I was initially thinking that Liberty Reserve's on-screen keypad and other security measures were pretty decent, I then learned how they were all easily circumvented by a skilled attacker. See for more info:
-
http://bt.irlbtc.com/view/2574.0It is unfortunate that Liberty Reserve does not employ a multi-factor authentication such as those in use by Mt. Gox (YubiKey), TradeHill (DuoSecurity), Camp BX (SMS Text Message), and others. If they had, you would likely still have your LR funds.
Now, going forward, you still probably want to assume that your system has been compromised and has been in that compromised state for at least a week now. I'm not a security professional though. Perhaps someone else here can recommend how best to proceed from here.
