Dear vkeong,

I told phirate @ www.phirate.com about your drop 300 cards in 5 seconds claim and he proceed to delete your account.

However, it is not my intention to get your account deleted.

Attached herewith is a reply I got from him after I requested him to not delete your account.

QUOTE
From: PhiRatE

For openly admitting he was abusing the security system? I'm not really inclined to restore his account, however if you contact him and get:


a) A commitment not to abuse the security system again
b) A precise summary of the method he was using to perform the abuse sent to me at richard@redspider.co.nz


I will restore his account with a warning.


Peace.

Regards,
Deimos Tel`Arin (DTA) @ ahkong.net

I saw you admit it openly on a forum. Our policy is simple, your word is good enough for us, if you say that you breached the security (and the word CAN implies that you have tested this) we're more than happy to accept that as sufficient proof and punish you for it.

You have two choices if you wish to remain a member, and you only have these choices because Ahkong requested that we not ban you outright as we would normally do.

You must either:
1. Provide us with the details of the method you utilized to subvertEntrecard security or
2. Post publically on the same forum thread with the following exact wording:
"I wish to apologize to my fellow Entrecard users for undermining their faith in the Entrecard system in order to boost my ego. I do not in fact have a method for automatically dropping cards rapidly. I also apologize to the Entrecard programmer, who is in fact awesome."

If you wish, you can post-fix that statement with "Entrecard made me say this to get my account back".

You must also provide me with a scan or digital photograph of a piece of paper, signed and dated by you, with the following wording:

"I commit henceforth never to abuse, or claim to abuse, the security systems of Entrecard."

You may write this with as much scorn as you like, crayon is optional.

Alternatively, you can tell me to get lost, and your account will remain deleted. you have 48 hours to complete the above tasks before this offer closes.

Regards,
Richard.

No, your site was banned at deletion. We do not differentiate between actual security abuse and claimed security abuse, for the obvious reason that both are damaging to the reputation of the credit, and therefore both have a negative effect on our users.

The options I provided are the only means by which you may continue to interact with Entrecard, either by restoring our reputation or by providing information that allows us to further protect our users.

Proof of abuse is not relevant to this discussion, we have a statement from you in a public forum. This is equivalent to shouting Fire in a crowded theatre, even if you did not light a fire, it is still an offence.

We will not restore your account without a clear and unambiguous retraction in the same forum you made the statement in, and a  commitment in writing from you that will not make any further claims or attempts.

You have 39 hours remaining.

erm. i think the system would have a log.

It is our standard policy to require either a public retraction or details of the exploit used in the event of a public statement regarding a security breach with Entrecard, in those rare instances where we do not ban the user on the spot.

We accept that some users would prefer not to do this, in which case it is necessary for us to retain the ban on their account in order to protect the reputation and integrity of the Entrecard service for our members.

I understand that when you made that statement you did not expect to get called on it. Consider this an object lesson on just how seriously we take the security of the drop system. As a result of Ahkong lobbying on your behalf, we granted you an opportunity to retract your statement in order to have your account restored. I'd guess from this thread that you neither feel responsible for your actions and their consequences, nor do you intend to follow our requirements.

That's your choice. Nonetheless, as per our original offer, if you do choose to follow our requirements, please email me a link to the post in this forum and I will restore your account if you do so within the required timelimit.

Regards,
phi.

vkeong, as a developer myself, i can tell you that sometimes you JUST DON'T SEE the loophole in the system until someone found it and tells you.

even Facebook had loopholes for people to make money.

really la, if they know they would've fixed it. anyway - is dropping 300 cards in 5 minutes breaching of Entrecard policy? DID they have such rules against # of drops per second?

I think that's your only defence - are you in breach of any? Is it wrong to drop 300 cards in 5 minutes?

Dear vkeong,

I certainly did not ask phirate to delete your EntreCard account.

I only told phirate that there might be an EntreCard exploit, and gave him the relevant url.

For your information, EntreCard is coded by one programmer only - phirate.

I have no intention to "polish phirate's shoes".

I do not feel good about phirate deleting your EntreCard account just like that, which is why I requested him to restore your EntreCard account.

Also, stop clicking on my Google Adsense Ads already, thank you.

Oh, besides backstabbing me, now you are also accusing me of clicking your adsense? LMAO. You do things ar, no evidence one hor? You simple accuse ppl doing things?

FYI I have adblock plus installed, so when I drop entrecards I don't have to load their stupid adsense/projectwonderful/nuffnang/advertlets/spott for faster website loading

OBVIOUSLY you have more enemies than you think. And still, you want to make more enemies LOL.

Oh Phirate, you are the programmer? No wonder you want me to do all the nonsense things to get my account back

If you are not smart enough to find the loop hole, you can beg me to tell you. Maybe I can consider I am very sure out of the 7k members, there are many who know this trick. Awesome... omg you think you are awesome   

@goldfries:
He mentioned 5 second, not 5 minutes.

"I wish to apologize to my fellow Entrecard users for undermining their faith in the Entrecard system in order to boost my ego. I do not in fact have a method for automatically dropping cards rapidly. I also apologize to the Entrecard programmer, who is in fact awesome."

Yes, I am accusing you of clicking my Google Adsense Ads.

Yes, I have no evidence to back up my accusation.

No, I do not simply accuse people of doing things.

Entrecard:
I saw you admit it openly on a forum. Our policy is simple, your word is good enough for us, if you say that you breached the security (and the word CAN implies that you have tested this) we're more than happy to accept that as sufficient proof and punish you for it.

....

1. Provide us with the details of the method you utilized to subvertEntrecard security or....