Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Firesheep Simplifies Stealing Logins
InformationWeek ^

Posted on 11/08/2010 8:19:41 PM PST by Gomez

click here to read article


Navigation: use the links below to view more comments.
first 1-2021-4041-52 next last

1 posted on 11/08/2010 8:19:43 PM PST by Gomez
[ Post Reply | Private Reply | View Replies]

To: Gomez
FireSheep notifier here
2 posted on 11/08/2010 8:21:52 PM PST by Gomez (shibboleet)
[ Post Reply | Private Reply | To 1 | View Replies]

To: ShadowAce; Swordmaker

ping


3 posted on 11/08/2010 8:23:03 PM PST by Gomez (shibboleet)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Gomez
How about putting this in English?
4 posted on 11/08/2010 8:32:10 PM PST by 23 Everest (A gun in hand is better than a cop on the phone.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: 23 Everest

Your FR account can be taken over by someone on the same network, including WiFi hotspors, with a few mouse clicks.


5 posted on 11/08/2010 8:39:58 PM PST by Gomez (shibboleet)
[ Post Reply | Private Reply | To 4 | View Replies]

To: 23 Everest

6 posted on 11/08/2010 8:44:57 PM PST by Gomez (shibboleet)
[ Post Reply | Private Reply | To 4 | View Replies]

To: 23 Everest

If you use a WiFi connection anywhere, even if it is encrypted, but otherwise shared among everyone at the coffee shop you’re at, this utility makes it automatic to steal your Free Republic, Amazon, Facebook, etc. login. It doesn’t matter if you logged in using “https” if you are brought back to a “http” screen afterward, as that is what Yahoo Mail and Hotmail even do to you.

In short, you are screwed if you don’t use a VPN. Good luck putting together a cheap, easy VPN for all of your friends.


7 posted on 11/08/2010 8:46:14 PM PST by ConservativeMind ("Humane" = "Don't pen up pets or eat meat, but allow infanticide, abortion, and euthanasia.")
[ Post Reply | Private Reply | To 4 | View Replies]

To: Gomez

That’s not my screenshot.


8 posted on 11/08/2010 8:46:41 PM PST by Gomez (shibboleet)
[ Post Reply | Private Reply | To 6 | View Replies]

Comment #9 Removed by Moderator

To: Gomez
There have been over 671,000 downloads of Firesheep to date.

(Almost) all your airport and coffee-shop WiFi logins are belong to Firesheep.

So when does John Robinson release https://www.freerepublic.com?

10 posted on 11/08/2010 11:40:06 PM PST by TChad
[ Post Reply | Private Reply | To 1 | View Replies]

To: Gomez; ~Kim4VRWC's~; 1234; 50mm; Abundy; Action-America; acoulterfan; AFreeBird; Airwinger; ...
Warning Network & Internet Security PING!

Please!
No Flame Wars!
Discuss technical issues, software, and hardware.
Don't attack people!

Don't respond to the Anti-Apple Thread Trolls!
 PLEASE IGNORE THEM!!!

 


All Computer Warning Ping!

If you want on or off the Mac Ping List, Freepmail me.

11 posted on 11/09/2010 12:20:49 AM PST by Swordmaker (This tag line is a Microsoft product "insult" free zone.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Gomez

BTTT


12 posted on 11/09/2010 3:18:38 AM PST by kitkat
[ Post Reply | Private Reply | To 1 | View Replies]

To: rdb3; Calvinist_Dark_Lord; GodGunsandGuts; CyberCowboy777; Salo; Bobsat; JosephW; ...

13 posted on 11/09/2010 5:08:01 AM PST by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 1 | View Replies]

To: kitkat

bttt


14 posted on 11/09/2010 5:10:50 AM PST by comps4spice (Ding Dong the Witch (Pelosi) is dead! Olbermann too!)
[ Post Reply | Private Reply | To 12 | View Replies]

To: Gomez
That’s not my screenshot.

Man up. You posted it. Take responsibility.

:)

15 posted on 11/09/2010 5:12:48 AM PST by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 8 | View Replies]

To: ConservativeMind
even if it is encrypted, but otherwise shared among everyone at the coffee shop you’re at, this utility makes it automatic to steal your Free Republic, Amazon, Facebook, etc. login.

Partially true. If you log into a site using SSL (HTTPS) and the site reverts to non-SSL after the login, you're at risk. If you're on a banking website, for instance, that offers HTTPS before, during, and after login, you're (relatively) safe. If you're on an unsecured network, your packets can be sniffed, but if the data is encrypted in transit, they can't decrypt it.

WPA2 with SSL is safe; WEP with SSL is not if you leave the SSL session; no wireless security with SSL is insecure; WPA2 without SSL is also insecure. Essentially keep yourself on secure wireless networks and use SSL encryption or VPN to prevent data breaches.

16 posted on 11/09/2010 5:22:50 AM PST by rarestia (It's time to water the Tree of Liberty.)
[ Post Reply | Private Reply | To 7 | View Replies]

BFL.


17 posted on 11/09/2010 6:30:54 AM PST by zeugma (Ad Majorem Dei Gloriam)
[ Post Reply | Private Reply | To 1 | View Replies]

To: 23 Everest

Thank you. I don’t go to wifi hot spots, so I thought I was safe, this makes me think not so?


18 posted on 11/09/2010 6:41:43 AM PST by brytlea (Jesus loves me, this I know.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: ConservativeMind

I”m sorry, what is a vpn?


19 posted on 11/09/2010 6:43:01 AM PST by brytlea (Jesus loves me, this I know.)
[ Post Reply | Private Reply | To 7 | View Replies]

To: brytlea

VPN = “virtual private network”


20 posted on 11/09/2010 6:45:59 AM PST by Logic n' Reason (You can roll a turd in powered sugar; that don't make it a jelly donut)
[ Post Reply | Private Reply | To 19 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-4041-52 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson