This is so wrong. Hacking an online account does not necessarily involve hacking the user's computer. If your HN password is "password" or "hn", I won't need to spy on your files to get in your online account.

If you are using secure OS, like *nix, there is really not much opportunity to spy on your files for outsider. The article is ignorant, like most of the stuff on Wired, and in fact is more encouraging script kiddies to play, than educating users how to employ better practices to protect themselves online. Instead of mentioning Zeus, it would be better to explain users the basics of public key cryptography.