The last two weeks have been super-hectic in Brian Aker's life, but we finally have his responses to your questions ready to share with you...Read more of this storyat Slashdot.

  greenrom writes "I work for a small company as a software developer. While investigating a bug in one of our products, I found source code on a website that was nearly identical to code used in our product. Even the comments were the same. It's obvious that a developer at our company found some useful code on the web and copied it. The original author didn't attach any particular license to the code. It's just 200 lines of code the author posted in a forum. Is it legitimate to use source code that's publicly available but doesn't fall under any particular license? If not, what's the best way to deal with this kind of situation? Since I'm now the only person working on this code, there's no practical way to report the situation confidentially. I'm new to the company, and the developer who copied the code is the project lead. Reporting him to management doesn't seem like a good career move. I could rewrite the copied code without reporting him, but since the product is very close to release it would be difficult to make a significant change without providing some justification."Read more of this storyat Slashdot.

  Invisible Pink Unicorn writes "Researchers at the National Institute of Standards and Technology (NIST) have discovered a phenomenon long thought not to exist. They have demonstrated a mechanical fatigue process that eventually leads to cracks and breakdown in bulk silicon crystals. Silicon — the backbone of the semiconductor industry — has long been believed to be immune to fatigue from cyclic stresses because of the nature of its crystal structure and chemical bonds. However, NIST examination of the silicon used in microscopic systems that incorporate tiny gears, vibrating reeds and other mechanical features reveals stress-induced cracks that can lead to failure. This has important implications for the design of new silicon-based micro-electromechanical system (MEMS) devices that have been proposed for a wide variety of uses. The article abstract is available from Applied Physics Letters."Read more of this storyat Slashdot.

  Stony Stevenson sends in word on the most massive "SEO poisoning" seen to date. The attack was directed at Google in particular and resulted in tens of thousands of Web pages hosting exploits showing up on the first page of Google searches for thousands of common terms (PDF). Sunbelt Software blogged about the attack on Monday after investigating it for months. By Wednesday Google had removed tens of thousands of malware-hosting pages from its index.Read more of this storyat Slashdot.

  coondoggie passed us another Network World link, this one discussing the FBI's newest offensive against botnets. They're calling it Operation Bot Roast II. Apparently it's already been quite successful, leading to indictments, search warrants, and the uncovering of some '$20 million in economic loss. writes "Today, botnets are the weapon of choice of cyber criminals. They seek to conceal their criminal activities by using third party computers as vehicles for their crimes. In Bot Roast II, we see the diverse and complex nature of crimes that are being committed through the use of botnets," said FBI Director Robert S. Mueller. "Despite this enormous challenge, we will continue to be aggressive in finding those responsible for attempting to exploit unknowing Internet users." I can't help but think, though: how many more of these things are out there that this 'sting' didn't touch?Read more of this storyat Slashdot.

  sfjoe writes "Are spammers giving up the game? Google seems to think so. In an article at Wired, Google, '... says that spam attempts, as a percentage of e-mail that's transmitted through its Gmail system, have waned over the last year'. They think their own filters are so good that spammers aren't even trying anymore. 'Other experts disagree with Google, pointing out that overall spam attempts continue to rise. By most estimates, tens of billions of spam messages are sent daily. Yet for most users, the amount of spam arriving in their inboxes has remained relatively flat, thanks to improved filtering.'"Read more of this storyat Slashdot.

  Bergkamp10 writes "Australia's University of Technology in Queensland has created a groundbreaking new system that can detect invisible intruders on wireless LANs. Wireless networks have been almost impossible to thoroughly secure as they possess no clearly defined boundaries, instead they are defined by the quality and strength of the receiving antenna. QUT Information Security Institute researcher Dr Jason Smith has invented a new system to detect eavesdropping on unencrypted networks or active hijackings of computer sessions when a legitimate user who is logged onto the network leaves the connection. Smith has created a series of monitoring techniques that when used together can detect both attackers and configuration mistakes in network devices."Read more of this storyat Slashdot.

  Josh Fink writes "The Guardian has an interesting piece on 'Akill', a teenager from New Zealand who was the ringleader of a hacking ring. The economic impact of the ring may have totaled £9.7m. 'The teenager was the "head of an international spybot ring that has infiltrated computers around the world with their malicious software', Martin Kleintjes told New Zealand national radio ... The FBI estimates that more than 1m computers have been infected, and puts the combined economic losses at more than $20m (£9.7m).' Eight people have been charged, pleaded guilty or have been convicted since June. The FBI really has been putting a crackdown on botnets / spyware recently."Read more of this storyat Slashdot.

  Brian Cartmell writes "An article at the Minneapolis — StarTribune site covers a significant setback for the Hormel food company, in a case that's being closely watched by security companies across the country. Seattle-based Spam Arrest has gone up against the creator of the food substance in court, fighting for the right to use the word spam in its company name. The US Trademark Trial and Appeal board has sided with the spam fighters, agreeing that consumers of the Spam product would never confuse the food with junk email. 'Derek Newman, Spam Arrest's attorney, said the decision opens the door for many other anti-spam software companies ... "Spam Arrest fought this battle for the whole software industry," Newman said.'"Read more of this storyat Slashdot.

  jbrodkin writes "A new McAfee report finds that 120 countries, notably the United States and China, are regularly launching Web-based espionage campaigns. Government-sponsored cyber attacks against enemy countries are becoming more common, targeting critical systems including electricity, air traffic control, financial markets and government computer networks. This year, Russia allegedly attacked Estonian government news and bank servers, while China was accused of hacking into the Pentagon. A McAfee researcher says this trend will accelerate, noting 'it's easier to attack government X's database than it is to nuke their troops.'"Read more of this storyat Slashdot.

  An anonymous reader writes "The rumor mill is already raging over the potential functionality and capacity for Google's online storage service we talked about earlier this week (the company says 'it makes sense' to put all its Web apps under the same umbrella). But Internet rights advocates are now crying foul over liability issues, a probable lack of encryption and an cash-cow model that could scan all your personal data for advertising keywords. From the article: "'Google would be wise to offer users an option to encrypt your information,' says Nimrod Kozlovski, a professor of Internet law at Tel Aviv University. 'It really needs to have really detailed explanations of what the legal expectations are for storing your info.'""Read more of this storyat Slashdot.

  The Consumerist site is featuring a follow-up to their Geek Squad porn collectors story, a feature we discussed back in July. According to Consumerist, Best Buy set up their own rigorous internal investigation to catch the culprits soon after these revelations became public. At that point, of course, employee morale went out the window. Draconian interrogation methods were apparently used, and innocent employees lost their jobs. "There were three Geek Squad members fired from my store including myself. The first two were fired for burning a non-copyrighted CD for another employee on a non company issued blank CD-R. I admitted in my interrogation that I was aware of this, and that I stopped these events after that occurrence. I was fired for being aware of this non copyrighted CD being copied. To quote, I did not provide the proper example of leadership. Keep in my mind I removed over 100 illegal tools and pirated discs upon my arrival as supervisor, as well as some remnants of an internal porn scandal."Read more of this storyat Slashdot.

  narramissic writes "A report released Thursday by the Electronic Frontier Foundation (EFF) finds that Comcast continues to use hacker-like techniques to slow down customers' connections to some P-to-P (peer-to-peer) applications. The EFF said that Comcast appears to be injecting RST, or reset, packets into customers' connections, causing connections to close. 'The investigators say that their tests confirmed an earlier one conducted by the Associated Press that showed that Comcast is interfering with BitTorrent traffic. BitTorrent is a protocol used to efficiently distribute the online transmission of large files, and some entertainment companies have partnered with its creators to distribute its content online. Comcast has said that it doesn't block BitTorrent, or any kind of content.'" If you're the type that always looks for a silver lining, Comcast's skulduggery may be pushing Congress to reconsider Net Neutrality.Read more of this storyat Slashdot.

  The time-honored tradition of code scavanging has long been a way for new programmers to "break in" to a new language or task that they may not want to build from the ground up. The re-use of old code, cleaned up and tweaked to a new purpose can help developers learn many useful skills and accomplish tasks quickly, especially for small tasks that aren't of vital importance. One blogger wondered if this process could be formalized and tools could be built to help foster and enable code scavanging on a mass level. Is this a viable option, or are there just too many things to consider?Read more of this storyat Slashdot.