On ycombinator zhoutong claims he didn't set the LastPass password:
http://news.ycombinator.com/item?id=4240408Well I do agree with you that Bitcoinica was not 100% secure. This hack really has nothing to do with the app or its infrastructure.
- I didn't set the password. - I didn't have the power to change the password. - I shouldn't have access to the account.
The root cause is LastPass account being stolen.
Then who chose to set the LastPass password as the mtgox api key? Tihan?