wiredmikey writes "As any IT security department knows, social networks pose a significant threat to users across the board as they blindly click links which often lead to spam or other malicious sites that could result in malware infection. In a move to further protect users of the world's largest social networking site, Facebook is adding a new feature to help protect users from links to these malicious sites. Starting today, when a Facebook user clicks on a link it will be checked against a database from Websense in an attempt to determine if the link is malicious. If the link is determined to be risky, the user will be given the choice to continue at their own risk, return to the previous screen, or get more information on why it was flagged as suspicious."

Trailrunner7 writes "Earlier this week, Microsoft released an announcement about the disruption of the Kelihos botnet that was responsible for spam messages, theft of sensitive financial information, pump-and-dump stock scams, and distributed denial-of-service attacks. The botnet had a complex, multi-tiered architecture as well as a custom communication protocol and three-level encryption. Kaspersky Lab researchers did the heavy lifting, reversing the protocol and cracking the encryption and then sink-holing the botnet. The company worked closely with Microsoft's Digital Crimes Unit (DCU), sharing the relevant information and providing them with access to our live botnet tracking system."

Trailrunner7 writes with an excerpt from an article in Threatpost: "Continuing its legal assault on botnet operators and the hosting companies that the criminals use for their activities, Microsoft has announced new actions against a group of people it contends are responsible for the operation of the Kelihos botnet. The company has also helped to take down the botnet itself and says that Kelihos's operators were using it not only to send out spam and steal personal information but also for some more nefarious purposes."

itwbennett writes "People trying to email information about the Wall Street protests on Monday using Yahoo mail, found themselves on the receiving end of messages from Yahoo claiming 'suspicious activity'. ThinkProgress.org has a YouTube video of users trying to send emails that mention the 'OccupyWallSt.org' web site, which seemed to be the magic phrase to get your email blocked. Via Twitter, Yahoo announced the blockage was now fixed, but 'there may be residual delays.'"

AmyVernon writes "This piece from RWW got me thinking about whether, when you sign up for access to a site, you're actually signing up to get a slew of email spam from them. The single opt-in is still really popular, which I've noticed because I often check the box indicating I don't want further emails from a company or publisher. I always assume that giving my actual email address means I'm going to get spam-type emails from whomever. It still surprises me that most people don't. But it does raise a good question: Shouldn't you be able to sign up for something without automatically being signed up for a never-ending stream of 'updates?'"

An anonymous reader writes "The price of a pair of hearing aids in the U.S. ranges from $3,000 to $8,000. To the average American household, this is equivalent to 2-3 months of income! While the price itself seems exorbitant, what is even more grotesque is its continuous pace of growth: in the last decade the price of an average Behind the Ear hearing aid has more than doubled. To the present day, price points are not receding — even though most of its digital components have become increasingly commoditized. Is this a hearing aid price bubble?"

www.sorehands.com writes "Back in 2006, e360Insight and David Linhardt obtained an $11.7M judgment against Spamhaus, an international anti-spam organization. The judgment was subsequently appealed and reduced to $27,002. That judgment was appealed yet again, and the appeals court has now vacated the earlier number and entered a judgment against Spamhaus in the amount of $3. (Yes, three dollars.) As you may recall, e360's oral arguments for the latest appeal were not well received by the court." The ruling itself is a fairly entertaining diatribe about how e360 shot itself in the foot repeatedly and with enthusiasm throughout the case, and contains gems like this: "By failing to comply with its basic discovery obligations, a party can snatch defeat from the jaws of certain victory."

hellkyng writes with a transcript of interesting chat logs in Krebs on Security. From the article: "Leaked online chats between the co-owners of the world's largest pharmacy spam operation reveal the extent to which illicit organizations in Russia purchase political protection, and bribe public officials into initiating or stalling law enforcement investigations."

Trailrunner7 writes "There has been a huge spike in spam volume in the last few days, including a massive amount of malicious spam with infected attachments, and researchers say that levels of junk mail are now far higher than they were before the takedown of the notorious Spamit affiliate program last fall. The huge spike comes at a time when spam should, in fact, be dropping because of the takedown of the Rustock botnet, the Spamit network and other botnets. 'From the beginning of August, we have observed a huge surge of malicious spam which far exceeds anything we have seen over the past two years, including prior to the SpamIt takedown last October. The majority of the malicious spam comes from the Cutwail botnet, although Festi and Asprox are among the other contributors,' M86 researcher Rodel Mendrez said."

jfruhlinger writes "Today's programmers have much more advanced languages and more forgiving hardware to play with — but it seems many have forgotten some of the lessons their predecessors picked up in a more resource-constrained era. Newer programmers are less adept at identifying hardware constraints and errors, developing thorough specifications before coding, and low-level skills like programming in assembly language. You never know when a seemingly obsolete skill will come in handy. For instance, Web developers who cut their teeth in the days of 14.4 Kbps modems have a leg up in writing apps for laggy wireless networks."

itwbennett writes "Notorious spam king Sanford Wallace is facing federal fraud charges for allegedly breaking into the Facebook accounts of 500,000 victims in 2008 and 2009 and using the stolen credentials to post 27 million spam messages. The charges are outlined in an indictment, filed July 6 but made public Thursday after Wallace turned himself in to federal authorities. If convicted, Wallace could get more than 16 years in prison."

Eric Smalley writes "If you're like most people, you give yourself high ratings when it comes to figuring out when someone's trying to con you. Problem is, most people aren't actually good at it — at least as far as detecting fake positive consumer reviews. Fortunately, technology is poised to make up for this all-too-human failing. Cornell University researchers have developed software that they say can detect fake reviews (PDF)."

Lucas123 writes "Adding NAND flash memory to a PC does more for performance than DRAM and costs less, according to a new study. As the price difference between the two memory types widens, NAND flash will become the memory of choice in the PC. The effects of NAND flash adoption are already being felt in the DRAM market, as revenue in 2011 is expected to decline 11.8%."

Orome1 writes "Spammers today favor compromised accounts for sending spam, gradually shifting distribution away from botnets, according to Commtouch. The changed tactic has emerged as spam levels dropped dramatically, following several high-profile botnet takedowns. Spammers are now using a combination of malware and phishing to compromise legitimate accounts and then using these accounts to send low-volume spam outbreaks."

twoheadedboy writes "Yahoo has come under fire for updating its terms and conditions so it can scan user emails. The move has attracted the attention of notable privacy group Big Brother Watch, which has called on the email provider to scrap the feature altogether. Yahoo says it is only doing the scanning to identify spam and better target ads, but that still hasn't put people off from criticizing the firm."

We've sometimes seen malware sources broken down by country; now a Dutch study attempts to increase the resolution of that information. An anonymous reader writes with some bits gleaned from the recently published study (PDF): "Seoul is the most criminal city on the Internet, followed by Taipei and Beijing. When the population of the top 20 cities is taking into account, Chelyabinsk , in Russia, tops the list, followed by Buenos Aires and Kuala Lampur. These results were found by researchers from the from the University of Twente and Quarantainenet, a security company from the Netherlands. The researchers also found that analyzing attacks' origin at the city level [Original, in Dutch] instead of country level reveals interesting findings. For example, the U.S. ranked #3 in the list of the most criminal countries for the reporting period, while no major U.S. city was found among the most evil ones, while only one European city was listed among the top 20 cities, but 8 EU countries were among the most criminal. It was also observed that the list of criminal cities remains stable over a period time and that when the attack type is taken into account, 50% of the most evil cities remains the same."

dkd903 writes "Yesterday, many users of Google+ noticed Google spamming their inbox with multiple email notifications in very quick succession. Earlier today, Vic Gundotra, Head of Social at Google, explained what was causing it – Google ran out of disk space on the server that keeps track of notifications."

jfruhlinger writes "If you first went on line in the '90s, you probably remember a time when every e-mail you received was exciting, or at least relevant, and was worthy of your personal attention. One brave writer decided to take that approach to his present-day overflowing inbox. He read every email he received and dealt with them all, either by replying, filing, or unsubscribing. He even scanned his spam filter for false positives. It was a lot harder than he thought it would be."

itwbennett writes "Making money in spam isn't as easy as it used to be. 'It's not something financially feasible for anyone to even consider,' said Robert Soloway, who in his heyday made $20,000/day as a spammer. 'Spam — the Internet's original sin — dropped for the first time ever at the end of 2010,' writes IDG News Service's Robert McMillan. 'In September, Cisco System's IronPort group was tracking 300 billion spam messages per day. By April, the volume had shrunk to 34 billion per day, a remarkable decline.' Soloway says spam filters have become too good."

flibbidyfloo writes "Sony has sent an email to current and former subscribers to its long-running MMO Star Wars Galaxies explaining that the service will be shut down in December. Here's an excerpt from the email: 'We write to you today to inform you that on December 15, 2011, Sony Online Entertainment (SOE) and LucasArts will end all services (MMO and Trading Card Game) for Star Wars Galaxies (SWG). The shutdown of SWG is a very difficult decision, but SOE and LucasArts have mutually agreed that the end of 2011 is the appropriate time to end the game ... In addition, we will be discontinuing the sale of all Star Wars Galaxies Trading Card Game (TCG) digital card packs as of today, June 24, 2011. Loot cards will not be redeemable in the SWG MMO after September 15, 2011. The TCG will continue to operate until the final service closure on December 15, 2011.'"