Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Firesheep: Easy HTTP session hijacking from within Firefox

codebutler.com

Post reply on HN
Print view View original

21–30 of 356 posts

Re: Firesheep: Easy HTTP session hijacking from within Firefox

#22

Post by audidude »

atomical wrote: post #12

Is there another application besides the FF extension to dump the packets and process them? How does this work? EDIT: Sorry, I asking specifically how this FF extension works.

libpcap http://github.com/codebutler/firesheep/blob/master/backend/s...

Re: Firesheep: Easy HTTP session hijacking from within Firefox

#23

Post by gilaniali »

EricButler wrote: post #10
ianhawes wrote: post #4

This looks really cool. I can't wait to try this out. Very nice work, Eric.

Thanks! If you or anyone has any problems, email me (eric@codebutler.com) with the details.

On Mac OS X, it gives an error saying: Run --fix-permissions first.

Run with which command? and how?

Re: Firesheep: Easy HTTP session hijacking from within Firefox

#24

Post by zemaj »

marcuswestin wrote: post #15

The sidebar is not showing up for me after installing and restarting. Firefox 3.6.11 OS X 10.6 firesheep-0.1-1.xpi

Same setup. Sidebar shows for me after selecting it from the View -> Sidebar menu, however it pops up with a message that says "Run --fix-permissions first." Not sure where I'm supposed to run this flag.

Re: Firesheep: Easy HTTP session hijacking from within Firefox

#26

Post by StavrosK »

leftnode wrote: post #5

I thought the title of this submission was slightly misleading. This is not a security vulnerability from within Firefox, it's a Firefox plugin to reveal security vulnerabilities in a wide range of websites.

For what it's worth, I got that it was an extension or other Firefox tool. Your interpretation didn't occur to me.

Re: Firesheep: Easy HTTP session hijacking from within Firefox

#27

Post by dennisgorelik »

On the other hand, stealing somebody's real life identity is not that hard either. But it does not happen too often, in part because it's illegal. Stealing somebody's cookie on the Internet is a crime just as is stealing somebody's driver's license. Although technical solution to this security hole is desirable, it's not the only solution available.

Re: Firesheep: Easy HTTP session hijacking from within Firefox

#28

Post by StavrosK »

Groxx wrote: post #13

Nice . A solid demonstration to show next time your webmaster doesn't want to set up SSL everywhere. That said, the current cartel-like setup of certificate authorities (protection money and everything!) makes SSL annoying and expensive if you want the browser to not have a fit. Especially for small-scale projects. But there's really no excuse for larger sites.

You can get SSL certificates for free for one domain, and they work with all browsers (except Opera, IIRC). Also, you can use Perspectives for Firefox, which I think is much better than the current system.

Re: Firesheep: Easy HTTP session hijacking from within Firefox

#29

Post by StavrosK »

EricButler wrote: post #10
ianhawes wrote: post #4

This looks really cool. I can't wait to try this out. Very nice work, Eric.

Thanks! If you or anyone has any problems, email me (eric@codebutler.com) with the details.

I can't wait for this to become available for linux, good job!
Post reply on HN