Maybe that's how they don't get banned by their hosting provider. Once reports start coming in, they pretend to be a honest establishment.

Weirdly, in Firefox 7zip.com is blocked but www.7zip.com isn't. If you type '7zip' in the address bar and then press Ctrl+Enter to go to the address, you'll get owned, because that key-combo adds the www at the beginning.

I have a mild case of tinnitus - most of the time I'm blissfully unaware of it unless it's very quiet. 20 years ago I used to play video games (PC) for long periods with headphones. I never liked loud music so I don't think I set the volume too high, but maybe with headphones the damage can accumulate over time even within the safe limits.

Definitely. Each comment has 4 pieces of data - username, website, email and message body. I would assume the email is the actual username on the network and the website+ the username string are salt and signature that verifies the authenticity of the message. Short messages are probably links to other vulnerable blogs and the long ones contain actual payload.

I'd guess a network like that is nefarious in nature.

You can use the Awesome Bar to search open tabs: just prefix your query with '%'.

More search tips can be found here: https://support.mozilla.org/en-US/kb/awesome-bar-search-fire...

Would EMET have stopped any of the browser or kernel exploits?

It's unfortunate that Microsoft's security blog ( https://blogs.technet.microsoft.com/srd/ ) rarely posts EMET success stories. Is it not that effective?