News for hackers. Stuff that matters.

A comment on Firesheep: Easy HTTP session hijacking from within Firefox. Parent comment

Re:Firesheep: Easy HTTP session hijacking from within Firefox by cdine on Monday October 25, 2010 @12:11AM (#1828487)
I love SSH tunnels, but in regards to this particular problem, it really just pushes the problem off to wherever you ssh tunnel terminates. Do you trust you server operator? ISP? This is addressed in our presentation, here (VPN's are essentially doing the same thing): http://codebutler.github.com/firesheep/tc12/#20
[ Parent | on HN ]
Re:Firesheep: Easy HTTP session hijacking from within Firefox by flexterra on Monday October 25, 2010 @12:31AM (#1828546)
Totally agree!

But right now I'm more worried about a co-worker or stranger in a Starbucks taking over my personal Facebook or Gmail account than my server operator trying to spy on me.

[ Parent | on HN ]
Re:Firesheep: Easy HTTP session hijacking from within Firefox by jdunck on Monday October 25, 2010 @12:42AM (#1828578)
I trust my server operator much more than anyone squatting on attwifi, yes.
[ Parent | on HN ]