posted at: 17:02 | path: /rant | permanent link | 0 comments

Recently, I had to return a product (RMA) via UPS, the vendor graciously provided a six-digit UPS account number to bill the shipping expenses to.

Service was efficient and I could have been a happy customer if ... well, UPS send an invoice couple of days later and charged 9 eur for ... not or incorrect stating the UPS account number on the freight bill. Conversation with customer service revealed that

1. there is no way (for a customer) to check a customer number
2. customer support is not supposed to look up a customer number nor disclose any information regarding a customer number
3. customer support is supposed to explicitly inform you that you have to cover any charges that may arise, and specifically have to point you the 9 eur service charge for filling in an incorrect customer number
4. by signing the freight bill you accept the general terms and conditions (in German: Allgemeine Geschäftsbedingungen, AGB) which refer to a tariffs document (40+ pages) which indeed sets a 9 eur service charge for failing to provide a correct customer number

I really wonder who came up this that ingenious process. It sounded like they have more complaints in that area...

posted at: 22:32 | path: /rant | permanent link | 0 comments

MasterCard SecureCode is a Bad Feature, by Dale Phurrough
Mastercard Securecode Rant, by Andy Davidson
Verified by Visa - cause for concern, by Ashley Friedlein
Verified by Visa considered bad?, Joel on Software discussion
Verified by Visa (Veriphied Phishing?), by antiworm

And to cite Dan Kaminsky (on 2006 data): "26 % of the Top 50 banks operate insecurely; all but one use a picture of a lock to assure users the link is safe."

Background info:
Wikipedia on 3-D Secure Wikipedia on MasterCard SecureCode (german)

posted at: 14:51 | path: /rant | permanent link | 0 comments

I'm trying to buy a BeagleBoard via Digi-key:

"Thank you for your order. However, before we process your order I need to know if the parts will be for any military or government applications. Also, be more specific with what you will be doing with the parts.
Regards, International Sales Representative Digi-Key Corporation"
WTF?

posted at: 23:26 | path: /rant | permanent link | 0 comments

rudd-o: The DNS fiasco
halvar:
On Dan's request for "no speculation please"
Kaminsky's DNS Issue Accidentally Leaked?

posted at: 11:03 | path: /rant | permanent link | 0 comments