Okian Warrior writes "Attendees to this year's New York Comic Con convention were allowed to pre-register their RFID-enabled badges online and connect their social media profiles to their badges — something, the NYCC registration site explained, that would make the 'NYCC experience 100x cooler! For realz.' Most attendees didn't expect "100x cooler" to translate into 'we'll post spam in your feed as soon as the RFID badge senses that you've entered the show,' but that seems to be what happened."

Iddo Genuth writes "If you love to go on camping trips and want to charge your mobile phone, tablet or even camera there is a new solution on the way which can do that anywhere day or night and all you need to do is light a little fire and have a few drops of water. The FlameStower efficiently captures excess heat from a gas burner or campfire to charge almost any USB-powered device: cell phones, GPS units and even cameras by using the thermal deferential between the fire and water and the whole thing is already collecting money on Kickstarter (and if you are really handy you can even make a DIY version yourself)."

An anonymous reader writes with word that two of the more intriguing memes of recent times have been outed as elaborate performance art. Bizarre Twitter-centric entities @Horse_ebooks and Pronunciation Book aren't really inexplicable, it turns out: "[These feeds] have been running for the past several years, both have the hallmarks of automation, chugging along anonymously and churning out disjointed bits of text in a very spam-like fashion, but neither is as it appears." The Escapist has a bit more, now that the horse is out of the bag.

Hugh Pickens DOT Com writes "Reuters reports that nineteen companies caught writing fake reviews on websites such as Yelp, Google Local and CitySearch have been snared in a year-long sting operation by the New York Attorney General and will pay $350,000 in penalties. The Attorney General's office set up a fake yogurt shop in Brooklyn, New York, and sought help from firms that specialize in boosting online search results to combat negative reviews. Search optimization companies offered to post fake reviews of the yogurt shop, created online profiles, and paid as little as $1 per review to freelance writers in the Philippines, Bangladesh and Eastern Europe. To avoid detection the companies used 'advanced IP spoofing techniques' to hide their true identities. 'This investigation into large-scale, intentional deceit across the Internet tells us that we should approach online reviews with caution,' said Attorney General Eric Schneiderman. 'More than 100 million visitors come to Yelp each month, making it critical that Yelp protect the integrity of its content,' said Aaron Schur, Yelp's Senior Litigation Counsel."

Beardydog writes "SkyOS, the commercial, alternative OS created almost entirely by Robert Szeleney, became free (as in beer) sometime last month. Alternative OS enthusiasts can be forgiven for missing it, as the website has been largely derelict, and the forums overrun with spam, since the project was halted in 2009. It's not clear from the announcement whether the ISO available is the traditional build, or the version rebuilt around Linux. The post announcing the free version provides a license name ('public') and registration code that must be entered during setup. While it isn't quite the open-sourcing that most followers hoped for, it's heartening to know SkyOS won't be completely lost in the mists of time." For a blast from the past, check out our old stories about SkyOS.

cold fjord sends news that a study by Coverity has found open-source Python code to contain a lower defect density than any other language. "The 2012 Scan Report found an average defect density of .69 for open source software projects that leverage the Coverity Scan service, as compared to the accepted industry standard defect density for good quality software of 1.0. Python's defect density of .005 significantly surpasses this standard, and introduces a new level of quality for open source software. To date, the Coverity Scan service has analyzed nearly 400,000 lines of Python code and identified 996 new defects — 860 of which have been fixed by the Python community."

New submitter hmilz writes "I've been using procmail for years to filter my incoming mail, and over time a long list of spam patterns was created. The good thing about the patterns is, there are practically no false positives, and practically no false negatives, i.e. I see each new spam exactly once, and lose no legit mail. This works by using an external spam-patterns file, containing one pattern per line, and running an 'egrep -F' against it. As simple as this is, with a long pattern list this becomes rather slow and CPU consuming. An average mail currently needs about 15 seconds to be grepped. In other words, this has become quite clumsy over time, and I would like to replace it by a more (CPU, hence energy) efficient method. I was thinking about a small indexed database or something. What would you recommend and use if you were me? Is sqlite something to look at?"

Gunkerty Jeb writes "Kelihos, the peer-to-peer botnet with nine lives, keeps popping up with new capabilities that enable it to sustain itself and make money for its keepers by pushing spam, harvesting credentials and even stealing Bitcoins. According to a number of sources, Kelihos is now leveraging legitimate and freely available security services that manage composite blocking lists (CBLs) to determine if a potential victim's IP address has previously been flagged as a spam source or as a proxy."

First time accepted submitter georgeaperkins writes "A man targeted by marketing companies is making money from cold calls with his own premium-rate phone number. So far he's made £300 profit following a £10+VAT initial investment. The premium rate regulator has 'strongly discouraged' the practice, as it violates the code of practice. Nevertheless, the novel idea is sure to resonate with everyone worn down by mindless cold calling!"

ananyo writes "Thomson Reuters has uncovered a Brazilian self-citation cartel in which editors of journals cited each other to boost their impact factors. The cartel grew out of frustration with the system for evaluating graduate programs, which places too much emphasis on publishing in 'top tier' journals, one of the editors claims. As emerging Brazilian journals are in the lowest ranks, few graduates want to publish in them. This vicious cycle, in his view, prevents local journals improving. Both the Brazilian education ministry and Thomson Reuters have censured the journals. The ministry says articles from the journals published in 2012-12 will not count in any future assessment, and Thomson Reuters has suspended their impact factors."

hypnosec writes "If you are a BlackBerry owner, navigate to BlackBerry World (or just visit the website) and you will find that developer S4BB has developed over 47k apps for the BB platform. Unsurprisingly, most of them are just spammy apps that don't add any value. Apps like 'Restart Me Free,' 'Daily Quote,' 'Lock for SMS,' 'Search for Amazon,' 'Silent Foto Free' are just a few among the thousands of apps on BlackBerry World that actually have no utility whatsoever. BlackBerry announced back in May that developers were increasingly interested in making apps for the platform, and that BlackBerry World had more than 120,000 apps. This raises questions about the authenticity of the claims, and about the approval process that's been accepting these apps. S4BB may have a few useful apps for the platform, but that doesn't mean all of their apps are of 'A' quality. A statement from BlackBerry said, 'Developers in all app stores employ a number of different monetization tactics. BlackBerry World is an open market for developers and we let market forces dictate the success or failure of these tactics.'"

Nerval's Lobster writes "When Ars Technica editor Nate Anderson sat down to write The Internet Police, Edward Snowden hadn't yet decided to add some excitement to the National Security Agency's summer by leaking a trove of surveillance secrets to The Guardian. As a result, Anderson's book doesn't mention Snowden's escapade, which will likely become the security-and-paranoia story of the year, if not the decade. For anyone unaware of the vast issues highlighted by Snowden's leak, however, The Internet Police is a handy guide to the slow and unstoppable rise of the online security state, as well as the libertarian and criminal elements that have done their level best to counter that surveillance." Read below for the rest of Nerval's Lobster's review.

mask.of.sanity writes "Researchers have developed a signature system being examined by Twitter that hold promise to cut down on the amount of fake accounts used to deliver spam and malware. The signatures were developed during a study into the semi-underground market of fake accounts and was subsequently used by Twitter to eliminate an impressive 95 percent of several million accounts identified in the research. It applied elements like account names, the timing of the account creation, and browser identifiers to identify fake accounts. The 10-month study found that the creation of fake accounts at its peak represented 60 percent of all new accounts. (Paper here.)"

tsu doh nimh writes "The success of social networking community Twitter has given rise to an entire shadow economy that peddles dummy Twitter accounts by the thousands, primarily to spammers, scammers and malware purveyors. But new research on identifying bogus accounts has helped Twitter to drastically deplete the stockpile of existing accounts for sale, and holds the promise of driving up costs for both vendors of these shady services and their customers. Krebsonsecurity.com writes about a paper (PDF) being released today at the USENIX conference that details how researchers spent almost a year and $5,000 buying up accounts from 27 twitter account merchants, and then built templates to help Twitter detect accounts sold by these merchants — all with the aim of getting more of these bot accounts shut down before they can be used to spam legitimate Twitter users. The story goes into great detail on the lengths to which these account merchants will go to evade Twitter's anti-bot security measures."

theodp writes "Over at Popular Science, Tom Foste takes a look at the $79 Leap Motion controller and inventors David Holz and Michael Buckwald, best friends since they were fifth graders in Florida. Potential applications for the device are many, as proof-of-concept demos ranging from controlling Windows 8 (video) to driving JPL's Athlete Rover (video) show. 'If we're successful and build something that is a fundamentally better way to interact with a computer, there are essentially an unlimited number of use cases,' Buckwald says. 'Eventually, anything that has a computer could be controlled with it—every laptop, every desktop, every smartphone, every tablet, every TV, every surgical station, every robot, potentially even a Leap in every car.' And even if 'it's got some growing pains to experience,' writes Ars Technica's Lee Hutchinson, 'it's cool-it's extremely cool. It's not yet a game-changing interface device, but it could be.'"

Bennett Haselton writes "How did a $400-billion company ship millions of units of a phone with a calendar app that displays the wrong date, a texting app that can't reply to group texts, a screen capture function that doesn't work, and a phone app that won't let me use the keypad unless the speakerphone is on? The answer, perhaps, suggests deeper questions about why market forces fix certain problems but not others, and what to do about it." Read on for the rest of Bennett's thoughts.

An anonymous reader writes "David Reese provides an interesting analysis of just how far Canada's new anti-spam legislation goes, and its implications for business. This may provide a valuable template for citizens of other countries, and may also encourage Canadians to prepare for the inevitable push-back from spammers. It is not clear from this analysis whether the legislation would affect telemarketing, but even if it does not it provides a useful precedent for future regulation in that area."

Last week you had a chance to ask Jon "maddog" Hall about his work on Project Caua and FOSS in general. Below you'll find his answers to those questions.

An anonymous reader writes "The head of Google's webspam team, Matt Cutts, has blogged about one of his colleagues receiving an email offering SEO services to help the web site www.google.com. The irony wasn't lost on Matt, who has blogged about these emails before. As this article points out, if ever there was evidence that the people who send many of these emails haven't done their homework, this is it."

sfcrazy writes "As expected Samsung has updated its Ultrabook family giving direct competition to Apple's MacBook Pro and MacBook Air. When Apple launched its MacBook Air with 12 hours of battery life every one was looking at only one company to outdo Apple and that company was Samsung and the leading Android maker did not disappoint. With the launch of ATIV Book 9 Plus featuring:

* 256GB SSD (seems 128GB would be the base model)
* 3200x1800 resolution
* Touch Screen
* Haswell Processor
* 12 Hours battery life
* More 'standard' ports as compared to Apple's proprietary ports."