It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
General discussion (archive)Firesheep(7 posts)(7 posts)
(7 posts)
Pages:
1
This is my favourite topic
Posted October 25, 2010
Just came across this, Firesheep is a Firefox extension which when enabled, lets you connect to any wifi network, and someone will visit a site known to Firesheep (Twitter, Facebook, you know, those kinds). It will capture logged in accounts to those sites on the network, double-click and you're logged in AS THEM.

Why?

Because these sites don't use SSL. Quoting from the developer:

Facebook is constantly rolling out new "privacy" features in an endless attempt to quell the screams of unhappy users, but what's the point when someone can just take over an account entirely? Twitter forced all third party developers to use OAuth then immediately released (and promoted) a new version of their insecure website. When it comes to user privacy, SSL is the elephant in the room.
Oh. Shit.
Posted October 25, 2010
jesus
Posted October 25, 2010
Hypothetically, the security for such transmissions is the responsibility of the user because its within the local network and if they neglect encryption then its their own fault for being idiots. Similarly, its not facebook's fault if someone plugs a cable into your wired network and conducts a man in the middle attack.

That said, SSL wouldn't kill them
Posted October 25, 2010
It'll be interesting to see how many get documented downloading and using Firesheep and what they use it for.
Posted October 25, 2010
I imagine this will see a lot of use on college campuses.
Posted October 25, 2010
If your facebook or twitter profile allows your security to be comprimised you have already failed.
Posted October 25, 2010
I'm torn. This would be a great gag to pull on my friends, but I don't want to upset them, either...
Pages:
1
This is my favourite topic
Community
General discussion (archive)Firesheep(7 posts)(7 posts)
(7 posts)