News for hackers. Stuff that matters.
Re:Tunisia invades, censors Facebook, other accounts by mustpax on Saturday January 08, 2011 @06:30AM (#2082869)
Are they using fake SSL certificates or do we have to wait for another year before a government launches a major attack like that?
[ Parent | on HN ]
Re:Tunisia invades, censors Facebook, other accounts by lewkster on Sunday January 09, 2011 @10:10AM (#2085569)
the war on democracy continues http://goo.gl/xGMhg

arresting Pirate Party bloggers http://goo.gl/FP0xb

[ Parent | on HN ]
Re:Tunisia invades, censors Facebook, other accounts by mohawk on Saturday January 08, 2011 @05:43AM (#2082817)
so i guess the solution is to only use https://www.facebook.com/ to login?
[ Parent | on HN ]
Re:Tunisia invades, censors Facebook, other accounts by mustpax on Saturday January 08, 2011 @06:33AM (#2082875)
Facebook cookies are not marked SSL only. That would be a temporary and unreliable fix.
[ Parent | on HN ]
Re:Tunisia invades, censors Facebook, other accounts by mike-cardwell on Saturday January 08, 2011 @09:08AM (#2083055)
People could use the HTTPS-Everywhere Firefox addon. HTTPS-Everywhere rulesets can also be configured to add the secure flag to cookies. The main Facebook ruleset doesn't do that because certain pages can't be accessed via HTTPS on Facebook still, however there is a second ruleset disabled by default which you can enable which adds the secure flag and breaks a few unimportant pages.
[ Parent | on HN ]
Re:Tunisia invades, censors Facebook, other accounts by pmorici on Saturday January 08, 2011 @08:14AM (#2082993)
Sounds like they are using firesheep.
[ Parent | on HN ]