Hacker News Reader

It'd probably be easier to build a BTC-related website, let it grow a bit, then empty the wallets of everyone visiting it. It'd probably also be easier to compromise an existing site and throw your code/exploit up. I wouldn't try building a worm, that's for sure.

I'm worried about the bitcoin client being in c++ rather than java because that seems to make a remote code execution vulnerability a lot more likely.

Later this year there will be an awesome NodeJS version with native wrappers (Mac, ...).

There is a BTC client written in Java, though it is very immature still. An employee from Google made it. http://code.google.com/p/bitcoinj/