and once again op has touched the weakness of BTC. So here goes.
Software does exist that will not report a block. Not a rumor not fake it is as real as mining itself.
It was created by accident and truly hurt BTC Guild before it was discovered. Most likley cost me around .2-.3btc personally as I was underpaid due to the accidental with holding. Along with many other btcguild miners.
The pools have not resolved this issue no solve has been found. The only solve is solo mine since the only person hurt by with holding is the one that found the block.
Here is the simple math a big pool with deep pockets that has that software can attack a small pool and hurt its luck.
Most likely this will kill bit coin in the long run.
So to the op this could be simple bad luck/variance or this could be a deep pockets pool attacking a weaker small pool.
Your only prevention is to solo mine or don't mine. Or do what I do put mining power in five pools.
While block withholding attacks are indeed real, they don't account for the swings in reported hash rate. If as you say large pools have it in for the little guys, then you wouldn't see the sizable swings in hash rate of 40PH/s either way. Yes, there would be some impact, but that impact would be a negative swing in the rate since the larger pool would have dedicated a portion of its own hash rate to perform the attack.
This falls under the category of conspiracy theory. Did it happen in the past? It did indeed, on both BTCGuild and Eligius (at least those are the only pools to have documented it having occurred). It was one particular miner using an incorrectly written custom version of mining software that did not submit shares that would solve blocks.
Stating that a block withholding attack will be the demise of bitcoin is, while possible, not a very likely scenario in even the most conspiratorial camp. Remember, the attack has to come from the MINER not the pool in general. It's not like GHash.io could suddenly take their entire 50PH/s (or whatever they have mining there now) and decide to perform the attack on Slush, for example. They could potentially take their OWN hardware and alter it in such a way. However, this brings up the next question: why would they? Performing such an attack undercuts their own bottom line at the same time it tries to undermine the luck of another pool. It's just plain stupidity to purposefully execute this kind of attack. All you gain by it is the *hope* that people mining on the other pool will jump ship. That's it.
Your last sentence is great advice: spread out your hashes. Put some on multiple pools. It should help decrease the variance for you as a miner.