i heard in some documentary that Mt.Gox used to store the clients private keys in pure unencrypted text files.. wild days..