An anonymous reader notes a recent post on the SANS Institute's Internet Storm Center site estimating the time to infection of an unpatched Windows machine on the Internet — currently about 4 minutes. The researcher stipulated that the sub-5-minute estimate was valid for an unpatched machine in an ISP netblock with no NAT or firewall. The researcher, Lorna Hutcheson, called for others to post data on time-to-infection, and honeypot researchers in Germany did so the same day. They found longer times to infection, an average of 16 hours. Concludes the ISC's Hutchinson: "While the survival time varies quite a bit across methods used, pretty much all agree that placing an unpatched Windows computer directly onto the Internet in the hope that it downloads the patches faster than it gets exploited are odds that you wouldn't bet on in Vegas."

sm62704 notes a Reuters story reporting that eBay has beat Tiffany in court in a "knockout" decision. If this had gone the other way, not only would eBay be in trouble (especially after the loss of a similar case in France), but so would Net commerce as a whole. Tiffany seems certain to appeal. "All of Tiffany's trademark infringement claims against eBay were rejected — a knockout blow to the four-year-old lawsuit that had been closely watched by Internet companies as well as luxury goods makers seeking to stop the sale of counterfeit products online. Tiffany & Co. had alleged that eBay turned a blind eye to the sale of fake Tiffany silver jewelry on its site. EBay had countered that it was not in a position to determine which goods were knock-offs... and had said the jeweler did not adequately participate in eBay's programs that help brand owners prevent fraud. The judge... said he was 'not unsympathetic' to Tiffany and others who have invested in building their brands only to see them exploited on the Web. But he said the law was clearly on eBay's side."