Firesheep Firefox add-on and security threat

[sathish.k]

You might want to think twice before logging into Facebook and Twitter over an open WiFi internet connection. There is a Mozilla Firefox add-on Firesheep that allows cookie data to be revealed in clear text so to capture the user name and password which can lead to a HTTP session hijacking .
Using HTTPS for these sites are more secure.

There are some Firefox extension like Force-TLS, HTTPS everywhere allows your browser to change HTTP to HTTPS on sites that you indicate in the Firefox Add On “Preferences” menu, protecting your login information and ensuring a secure connection when you access social sites. Blacksheep is an another add-on which detects Firesheep Use on Wireless Networks.

[sathish.k]

You might have heard of techniques like FireSheep(Firefox addon) which lets others in the same network as you with access to your Facebook account.

Now Facebook has finally added the ability to access the site via a HTTP Secure (HTTPS) connection, which should increase security for users and will reduce other sniffing attacks.

Easy steps to enable https to your Facebook account:

1. Login to your Facebook account and go to Account tab
2. Go to Account Settings
3. Go to Account Security and click to change the settings
4. Enable "Browse Facebook on a secure connection (https) whenever possible" option under 'Secure Browsing (https)' and save

image.jpg (25.58 KiB) Viewed 5457 times

[latha]

Thanks Sathish for the detailed info. Will take necessary precautions.