Thursday, November 26, 2015
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Panasonic's CX Ultra HD Smart TVs Bring 4K Closer To Home
New LG Ray Smartphone Focuses On Photo Shooting
HP Profit Lower Than Expected
Police Arrests Fifth Suspect In TalkTalk Hack Investigation
Toshiba Develops Fast 3D Metal Printer
ECS LIVA X2 Mini PC Runs Windows 10
Memory-Tech Ready To Start Mass Production Of UHD Blu-ray Disc
New Nokia 230 and Nokia 230 Dual SIM Phones Coming Next Month
Active Discussions
roxio issues with xp pro
How to back up a PS2 DL game
Copy a protected DVD?
How to burn a backup copy of The Frozen Throne
Help make DVDInfoPro better with dvdinfomantis!!!
Copied dvd's say blank in computer only
menu making
Optiarc AD-7260S review
 Home > News > General Computing > Firefox...
Last 7 Days News : SU MO TU WE TH FR SA All News

Tuesday, October 26, 2010
Firefox Extension Steals Facebook, Twitter, Sessions

A Firefox extension called "Firesheep" was presented today at Toorcon 12, demontrating how easy it is for attackers to access accounts belonging to other users on the same network.

When logging into a website, users usually start by submitting their username and password. The server then checks to see if an account matching this information exists and if so, replies back to them with a "cookie" which is used by the browser for all subsequent requests.

It's extremely common for websites to protect users' password by encrypting the initial login, but surprisingly uncommon for websites to encrypt everything else. This leaves the cookie (and the user) vulnerable. HTTP session hijacking (sometimes called "sidejacking") is when an attacker gets a hold of a user's cookie, allowing them to do anything the user can do on a particular website. On an open wireless network, cookies are basically shouted through the air, making these attacks extremely easy.

This is a widely known problem that has been talked about to death, yet very popular websites continue to fail at protecting their users. The only effective fix for this problem is full end-to-end encryption, known on the web as HTTPS or SSL. Facebook is constantly rolling out new "privacy" features in an endless attempt to quell the screams of unhappy users, but what's the point when someone can just take over an account entirely? Twitter forced all third party developers to use OAuth then immediately released (and promoted) a new version of their insecure website. When it comes to user privacy, SSL is the elephant in the room.

Firesheep is a Firefox extension designed to demonstrate just how serious this problem is.

According to the demontration, after installing the extension, a new sidebar appears on Mozilla's Firefox browser. After connecting to any open wifi network. As soon as anyone on the network visits an insecure website known to Firesheep, their name and photo will be displayed. By double-clicking on someone, and you're instantly logged in as them.

Firesheep is free, open source, and is available now for Mac OS X and Windows, with Linux support to be on the way.

Mobile Gaming Market Worth 10 Billion Dollars by 2014        All News        Garmin and ASUS Terminate Mobile Handset Alliance
Google Funds Digital Journalism Innovation     General Computing News      Wi-Fi Direct Launches Today

Get RSS feed Easy Print E-Mail this Message

Related News
Firefox Now Available On iOS
Mozilla Engances Yahoo Search Experience for Firefox
Firefox Now Offers More On Private Browsing
Firefox To Switch Away From Plugins
Mozilla Tests Private Browsing with Tracking Protection in Firefox Beta
Firefox for iOS Now Available for Preview
Mozilla Tests New Private Browsing and Add-ons Features
Firefox Attacks Microsoft Over Default Browser in Windows 10
First Panasonic Smart TVs Powered by Firefox OS Debut
Orange Launches Firefox OS Smartphones in Africa
Firefox OS Expands with More Partners, Devices
Mozilla Moves To Exclude Flash From Firefox

Most Popular News
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2015 - All rights reserved -
Privacy policy - Contact Us .