News for hackers. Stuff that matters.
Re:Firesheep: Easy HTTP session hijacking from within Firefox by cdine on Monday October 25, 2010 @12:51AM (#1828602)
Most sites don't properly invalidate sessions when you log out, you can't protect yourself as well as you think. See our slide on this topic:

http://codebutler.github.com/firesheep/tc12/#18

Re:Firesheep: Easy HTTP session hijacking from within Firefox by amanuel on Monday October 25, 2010 @03:43AM (#1828950)
Excellent points on the slideshow. The general lack of care on this topic among web companies is worrisome.