Saturday, April 19, 2014
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
HTC Hired Ex-Samsung Marketing Officer
Xbox One Wolrdwide Sales Cross 5 million
Samsung Works With GLOBALFOUNDRIES On 14 nm FinFET Offering
Facebook To Find Nearby Friends
Console Sales Lift AMD's First Quarter Results
LG Expands 'Second Screen' TV Ecosystem With Open-Source SDK
Amazon Announces Kindle Service For Samsung Devices
Nokia Halts Sales Of Lumia 2520 Tablet
Active Discussions
help questions structure DVDR
Made video, won't play back easily
Questions durability monitor LCD
Questions fungus CD/DVD Media, Some expert engineer in optical media can help me?
CD, DVD and Blu-ray burning for Android in development
IBM supercharges Power servers with graphics chips
Werner Vogels: four cloud computing trends for 2014
Video editing software.
 Home > News > General Computing > Firefox...
Last 7 Days News : SU MO TU WE TH FR SA All News

Tuesday, October 26, 2010
Firefox Extension Steals Facebook, Twitter, Sessions


A Firefox extension called "Firesheep" was presented today at Toorcon 12, demontrating how easy it is for attackers to access accounts belonging to other users on the same network.

When logging into a website, users usually start by submitting their username and password. The server then checks to see if an account matching this information exists and if so, replies back to them with a "cookie" which is used by the browser for all subsequent requests.

It's extremely common for websites to protect users' password by encrypting the initial login, but surprisingly uncommon for websites to encrypt everything else. This leaves the cookie (and the user) vulnerable. HTTP session hijacking (sometimes called "sidejacking") is when an attacker gets a hold of a user's cookie, allowing them to do anything the user can do on a particular website. On an open wireless network, cookies are basically shouted through the air, making these attacks extremely easy.

This is a widely known problem that has been talked about to death, yet very popular websites continue to fail at protecting their users. The only effective fix for this problem is full end-to-end encryption, known on the web as HTTPS or SSL. Facebook is constantly rolling out new "privacy" features in an endless attempt to quell the screams of unhappy users, but what's the point when someone can just take over an account entirely? Twitter forced all third party developers to use OAuth then immediately released (and promoted) a new version of their insecure website. When it comes to user privacy, SSL is the elephant in the room.

Firesheep is a Firefox extension designed to demonstrate just how serious this problem is.

According to the demontration, after installing the extension, a new sidebar appears on Mozilla's Firefox browser. After connecting to any open wifi network. As soon as anyone on the network visits an insecure website known to Firesheep, their name and photo will be displayed. By double-clicking on someone, and you're instantly logged in as them.

Firesheep is free, open source, and is available now for Mac OS X and Windows, with Linux support to be on the way.


Previous
Next
Mobile Gaming Market Worth 10 Billion Dollars by 2014        All News        Garmin and ASUS Terminate Mobile Handset Alliance
Google Funds Digital Journalism Innovation     General Computing News      Wi-Fi Direct Launches Today

Get RSS feed Easy Print E-Mail this Message

Related News
New Firefox Beta Is Faster, Simplified and Easier to Customize
Mozilla Kills Metro Firefox Development Plan
Mozilla Firefox OS Expands To More Devices
Firefox To Show Ads On New Tab Page Tiles
Firefox for Windows 8 Touch Beta Released
Mozilla Previews New Firefox OS App Launcher For Android
Firefox Adds New Social Partners
Geeksphone Details 'Revolution' Dual-boot Android - Firefox OS Smartphone
This Tablet Runs On Firefox OS
Mozilla Launches Open Web Device Compliance Review Board
Firefox OS Launches in More European Countries
Mozilla Debuts The 'Australis' User Interface For Firefox

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2014 - All rights reserved -
Privacy policy - Contact Us .