Weekly security post

1. HTTP Strict Transport Security in Firefox 4 - http://bit.ly/cou1FC

2. DLL Hijacking Fact and Fiction - http://bit.ly/cbFGNm

3. Short passwords are they safe? - http://bit.ly/bwXuyI

4. Wicked widget hacks Network Solutions - http://bit.ly/baFnjk

5. Smudge password attacks on Droids - http://zd.net/agQg2D

6. Smart phones and attackers - http://bit.ly/byVLe9

7. Location based services raise risk - http://bit.ly/bB6LyJ

This week's security briefing

1. Silent update for Firefox - http://bit.ly/cT4jlL

2. Black hat video stream hacked - http://bit.ly/9WGTZ7

3. Safari bug used to jailbreak iPhones - http://bit.ly/b7SvD7

4. More password research - http://bit.ly/cnred5

5. Browser privacy mode not so private - http://bit.ly/bIJxSA

6. Safari locked backed down - http://bit.ly/axQRTj

Bad Communication - Example by a vendor

I actually received the following as shocking as it sounds after not getting any response from a delivery vendor and then after months of frustration posting a tweet about the vendor.

Your twitter message is very cute. In spite of what you might think, we have a thriving business with hundreds of satisfied customers that have dealt with us for many years.

In explanation as to why you have not gotten a phone call back, on several occasions I told XXX that XXX was not interested in servicing your equipment or placing it under a service contract. That in no way means that your equipment cannot be supported. XXX has many other dealers and support personnel that can best address your needs. I have forwarded XXX's contact information directly to XXX on several occasions.

XXX was simply a contracted, installing agent for the company you purchased the equipment from. Our only obligation was to satisfy the 90-day warranty period, which we did.

Being that this matter has been forwarded to XXX for follow-up on many occasions, I did not feel it was necessary to commit any more time or energy related to your attempts for service and support on this equipment. I also happen to know that XXX has all of XXX's representative's contact information. Perhaps your "tweets" should be directed at XXX or the company you purchased the equipment from, and not a personal attack on me. If your "tweet" was a way to get a response from me, now you have it. I would appreciate it if you would refrain from contacting me or XXX in the future. In addition, it would be sincerely appreciated if your slanderous "tweets" ceased as well. You should contact the company you purchased the equipment from, or XXX directly.

Business Object OnDemand

Our experience -- http://bit.ly/cBTQuS