I agree with this. How is it facebook's responsibility if the user's wireless network is unprotected? Of course the companies are silent. It's not their vulnerability and it's nothing new, it's been like that since forever. Encrypting all traffic for them is expensive and breaks functionality. What are they supposed to say, to warn users? Something along the lines of: "Warning, HTTP session hijacking has become REAL USER FRIENDLY recently."