Feeds

Extra spam and malware security for bit.ly

Sophos, VeriSign and Websense to provide belt and braces

Providing a secure and efficient Helpdesk

Bit.ly has partnered with security firms to bolt improved anti-spam and malware protection onto the URL shortening service.

VeriSign’s iDefense IP reputation service will be used to screen against links that point to blacklisted sites hosting exploits, malicious code, botnet command and control servers or other nefarious activity.

Websense Threatseeker cloud service will be used to peer behind the web content behind bit.ly links in real time, using behaviour-based tools and reputation data to detect URLs linked to spamvertised sites or phishing attacks.

Sophos is also chipping in by playing sweeper with behavioral-analysis technology designed to proactively detect spam and malware.

In addition to partnering with three well established security firms, bit.ly is also offering users a chance to download a preview plug-in, and is publicising its abuse reporting service (abuse@bit.ly) as explained in a blog posting here.

URL shortening services like bit.ly allow users to convert a lengthy Web address into a much shortened link. The popularity of these services have soared with the growing use of Twitter and other social media websites. More than two billion shortened URLs were created in October alone, according to Websense.

These shortened URLs may be convenient but pose a risk by camouflaging the destination website, a factor hackers and virus writers have already exploited to a limited extent. By partnering with the three security firms, bit.ly hopes to nip this nascent problem in the bud before it gets out of hand.

Twitter began using Google's Safe Browsing API to provide warning to users following links to blocklisted sites back in August. Bit.ly's partnership with securiy firms is aimed at much the same problem but arguably provides a deeper level of protection. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
SMASH the Bash bug! Apple and Red Hat scramble for patch batches
'Applying multiple security updates is extremely difficult'
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
prev story

Whitepapers

A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.