Firesheep: Easy HTTP session hijacking from within Firefox

Re:Firesheep: Easy HTTP session hijacking from within Firefox by kijinbear on Sunday October 24, 2010 @10:43PM (#1828237)

Be careful when trying this out. You could be breaking a law or two...

[ Parent | on HN ]

Re:Firesheep: Easy HTTP session hijacking from within Firefox by jorgem on Sunday October 24, 2010 @11:53PM (#1828439)

Also don't web-mail your friends to tell them about the new accounts you just broke into :) At least not on that open wireless connection.

[ Parent | on HN ]

Re:Firesheep: Easy HTTP session hijacking from within Firefox by chrisbroadfoot on Monday October 25, 2010 @12:16AM (#1828506)

Good thing GMail has SSL enabled by default ;)

[ Parent | on HN ]

Re:Firesheep: Easy HTTP session hijacking from within Firefox by cdine on Monday October 25, 2010 @12:45AM (#1828593)

Yup, they're one of our examples of a "good" setup. However, Google leaks iGoogle and some other things (Latitude, address book, reader, ...)

[ Parent | on HN ]

Re:Firesheep: Easy HTTP session hijacking from within Firefox by itsnotvalid on Monday October 25, 2010 @05:30AM (#1829131)

However they don't share the same session cookie for different service as far as I know (which they negotiate that through TLS protected link) Likewise they have also made several other services TLS only (e.g. calendar, docs)

[ Parent | on HN ]