News for hackers. Stuff that matters.

A comment on Firesheep: Easy HTTP session hijacking from within Firefox. Parent comment

Re:Firesheep: Easy HTTP session hijacking from within Firefox by gilaniali on Sunday October 24, 2010 @09:48PM (#1828065)
On Mac OS X, it gives an error saying: Run --fix-permissions first.

Run with which command? and how?

[ Parent | on HN ]
Re:Firesheep: Easy HTTP session hijacking from within Firefox by xorglorb on Sunday October 24, 2010 @10:58PM (#1828277)
I found the binary "firesheep-backend" in:

    ~/Library/Application Support/Firefox/Profiles/<profile>.default/extensions/[email protected]/platform/Darwin_x86-gcc3
I ran both:

    ./firesheep-backend --fix-permissions
and

    sudo ./firesheep-backend --fix-permissions
and it still asks me to run it with "--fix-permissions". I guess it's time to go digging around in the source to try and find out what it wants me to do.

EDIT:

After a bit of digging, I found out that running it with --fix-permissions really just chowns the binary to root then setuid's it. I don't see anything wrong with it on the surface, but I'll keep digging.

[ Parent | on HN ]
Re:Firesheep: Easy HTTP session hijacking from within Firefox by zemaj on Tuesday October 26, 2010 @01:33AM (#1833156)
FYI if you're still looking into this, this comment helped me http://codebutler.com/firesheep#comment_5843350

I have filevault turned on. Moving the binary out of my home folder (and adding a symbolic link) solved the problem.

[ Parent | on HN ]
Re:Firesheep: Easy HTTP session hijacking from within Firefox by gilaniali on Sunday October 24, 2010 @11:24PM (#1828350)
There is an another firesheep-backend at /firesheep-backend.dSYM/Contents/Resources/DWARF inside the Darwin folder. However this one wont run using ./

Any ideas?

[ Parent | on HN ]
Re:Firesheep: Easy HTTP session hijacking from within Firefox by xorglorb on Monday October 25, 2010 @12:10AM (#1828483)
I believe that it is a file containing debug info, not an actual program, so you can't run it.
[ Parent | on HN ]
Re:Firesheep: Easy HTTP session hijacking from within Firefox by StavrosK on Monday October 25, 2010 @10:47AM (#1830000)
I have the same problem, nothing I do works, it just tells me to fix the permissions...
[ Parent | on HN ]