News for hackers. Stuff that matters.

A comment on Firesheep: Easy HTTP session hijacking from within Firefox. Parent comment

Re:Firesheep: Easy HTTP session hijacking from within Firefox by jorgem on Sunday October 24, 2010 @11:53PM (#1828439)
Also don't web-mail your friends to tell them about the new accounts you just broke into :) At least not on that open wireless connection.
[ Parent | on HN ]
Re:Firesheep: Easy HTTP session hijacking from within Firefox by chrisbroadfoot on Monday October 25, 2010 @12:16AM (#1828506)
Good thing GMail has SSL enabled by default ;)
[ Parent | on HN ]
Re:Firesheep: Easy HTTP session hijacking from within Firefox by cdine on Monday October 25, 2010 @12:45AM (#1828593)
Yup, they're one of our examples of a "good" setup. However, Google leaks iGoogle and some other things (Latitude, address book, reader, ...)
[ Parent | on HN ]
Re:Firesheep: Easy HTTP session hijacking from within Firefox by itsnotvalid on Monday October 25, 2010 @05:30AM (#1829131)
However they don't share the same session cookie for different service as far as I know (which they negotiate that through TLS protected link) Likewise they have also made several other services TLS only (e.g. calendar, docs)
[ Parent | on HN ]