Like I said, all mining pools are vulnerable to block withholding attacks. All pools.

Whether bad software is still out there, I don't know. But as we have seen, it can happen.

Bad hardware is very unlikely. All the ASICs I heard of so far simply look for anything from diff 1 and up. Doing something else would require more logic on the chip.