Hacker News Reader

If you had sql injection rights in the database, there would be no need to trade; you would just insert a few nice rows in the db for yourself, mark yourself 'super trusted' and then initiate a withdrawal. This wasn't a SQL injection attack in my opinion.

View on HN

Hmm, but what if the attacker wasn't in it for the $currency?

What if he were in it to destroy Mt. Gox, as they say, "for the lulz"?

Making all their customers angry and causing a run on their escrow accounts might just do it more effectively than trying to withdraw whatever could be obtained through their online trading platform.

I agree - I think this has the earmark of a competitor exchange - to crash and destroy Mt. Gox so they can take the business.

Reply on news.ycombinator.com