Firesheep: Easy HTTP session hijacking from within Firefox

Re:Firesheep: Easy HTTP session hijacking from within Firefox by xorglorb on Sunday October 24, 2010 @10:58PM (#1828277)

I found the binary "firesheep-backend" in:

    ~/Library/Application Support/Firefox/Profiles/<profile>.default/extensions/[email protected]/platform/Darwin_x86-gcc3

I ran both:

    ./firesheep-backend --fix-permissions

and

    sudo ./firesheep-backend --fix-permissions

and it still asks me to run it with "--fix-permissions". I guess it's time to go digging around in the source to try and find out what it wants me to do.

EDIT:

After a bit of digging, I found out that running it with --fix-permissions really just chowns the binary to root then setuid's it. I don't see anything wrong with it on the surface, but I'll keep digging.

[ Parent | on HN ]

Re:Firesheep: Easy HTTP session hijacking from within Firefox by zemaj on Tuesday October 26, 2010 @01:33AM (#1833156)

FYI if you're still looking into this, this comment helped me http://codebutler.com/firesheep#comment_5843350

I have filevault turned on. Moving the binary out of my home folder (and adding a symbolic link) solved the problem.

[ Parent | on HN ]

Re:Firesheep: Easy HTTP session hijacking from within Firefox by gilaniali on Sunday October 24, 2010 @11:24PM (#1828350)

There is an another firesheep-backend at /firesheep-backend.dSYM/Contents/Resources/DWARF inside the Darwin folder. However this one wont run using ./

Any ideas?

[ Parent | on HN ]

Re:Firesheep: Easy HTTP session hijacking from within Firefox by xorglorb on Monday October 25, 2010 @12:10AM (#1828483)

I believe that it is a file containing debug info, not an actual program, so you can't run it.

[ Parent | on HN ]

Re:Firesheep: Easy HTTP session hijacking from within Firefox by StavrosK on Monday October 25, 2010 @10:47AM (#1830000)

I have the same problem, nothing I do works, it just tells me to fix the permissions...

[ Parent | on HN ]