Home > slashdot > Firefox Extension Makes Social-Network ID Spoofing Trivial

Firefox Extension Makes Social-Network ID Spoofing Trivial

October 25th, 2010 10:14 admin Leave a comment Go to comments

Orome1 writes “A simple-to-use Firefox plugin presented yesterday at Toorcon in San Diego has hit the security world with the realization that squabbles about Facebook’s changing privacy settings and various privacy breaches simply miss the point. ‘When it comes to user privacy, SSL is the elephant in the room,’ said Eric Butler, the developer of the extension in question, dubbed Firesheep. By installing and running it, anyone can ‘sniff out’ the unencrypted HTTP sessions currently allowing users on that network segment to access social networks, online services and other website requiring a login, and simply hijack them and impersonate the user.”

Source: Firefox Extension Makes Social-Network ID Spoofing Trivial

Related Articles:

  1. Firefox Extension HTTPS Everywhere Does What It Sounds Like
  2. Microsoft Explains Mystery Firefox Extension
  3. Firefox Extension BlackSheep Detects And Protects You From Firesheep
  4. Firesheep Countermeasure Tool BlackSheep
  5. Microsoft Hides Firefox Extension In Toolbar Update
blog comments powered by Disqus
YOYOYOOYOYOYO