News for hackers. Stuff that matters.

A comment on GitHub moves to SSL, but remains Firesheepable. Parent comment

Re:GitHub moves to SSL, but remains Firesheepable by sh1mmer on Wednesday November 03, 2010 @09:29PM (#1867213)
Even if Github's implementation was misconfigured at first the right thing would be to inform them, wait for the fix and _then_ blog about how to do it successfully.

Posting zero day exploits is not big or clever. Github's public transition to SSL should have encouraged people to not use Firesheep to try and snoop on their users' traffic. While a false sense of security doesn't help anyone, this kind of blogging remains more actively destructive than helpful.

[ Parent | on HN ]
Re:GitHub moves to SSL, but remains Firesheepable by pjhyett on Wednesday November 03, 2010 @09:39PM (#1867242)
I don't know the Firesheep guys personally to determine their motivation behind not informing us prior to releasing the extension, but I'm very surprised Netcraft acted this way.

People seem to be jumping on this issue with zero regard for what I think is just common courtesy to site owners.

[ Parent | on HN ]