News for hackers. Stuff that matters.

A comment on Firesheep: Easy HTTP session hijacking from within Firefox. Parent comment

Re:Firesheep: Easy HTTP session hijacking from within Firefox by cdine on Monday October 25, 2010 @12:48AM (#1828598)
It's 100% open source! Please feel free to review it.

http://github.com/codebutler/firesheep

It doesn't currently do anything with passwords, it's only pulling out cookies from HTTP Response headers. But it would be trivial to also get passwords in non-HTTPS requests for logins with the same method.

[ Parent | on HN ]
Re:Firesheep: Easy HTTP session hijacking from within Firefox by staktrace on Monday October 25, 2010 @10:13AM (#1829849)
Again, not assuming you're evil, but it's possible that the compiled binary (.xpi) was not created from the source posted on the github account :)
[ Parent | on HN ]
Re:Firesheep: Easy HTTP session hijacking from within Firefox by chrisbroadfoot on Monday October 25, 2010 @02:07AM (#1828758)
Indeed. Sorry if I implied that you were doing evil things.

People should also be aware of the security implications of installing various software on their system. :)

[ Parent | on HN ]