Hacker News Reader

It's not really comparable to Pwn2Own. Pwn2Own's only vector of attack is by finding flaws in the software directly.

All of these wallet service companies employ people and many, many successful hacks are performed by exploiting the people involved / mistakes the people make.

So while software with enough hardening can eventually get to a state that's quite safe, as long as people are an active part of the security chain, you're going to have valid attack vectors.

Agreed, people are far easier targets than systems, unless the systems are negligently unsecured.

There have also been attacks on Bitcoin companies that exploited their hosting company's procedures or lax handling by their employees. Securing this stuff is fundamentally hard.

How are attacks on $yourbitcoinservice supposed to make $mynewbitcoinservice safer?

Because $mynewbitcoinservice will realize, "whoa, we should make sure we are hack-proof," and then use HTTPS to make sure they are hack-proof.

Hmmmm, I don't think "use HTTPS" is going to cut it in this case...

Instawallet used HTTPS.

Growing pains.