Hacking your Facebook account . . .

[Bateluer]

http://www.cnn.com/2010/TECH/mobile/11/01/firesheep.wifi.security/index.html

Can now be done by CNN 'tech' writers. I posted about Firesheep a week ago, and was ignored. Tested it myself on saturday at Barnes and Noble, and yes, it works about as easily as Amy Gahran writes.

I know everyone on AT, at least, most of AT, already knows the dangers with open wifi, but I'm also going to bet that every here knows a dozen people who are oblivious.

 

[mizzou]

that chick is fucking hot on that front page


wtf am i reading?


EDIT: on a side note, whenever I use WIFI in areas, I make sure i have a vanilla bones computer with me or I put absolutely everything to private folders just to keep unmotivated gawkers out

 

[tRaptor]

Maybe using something like AnchorFree would work?

 

[Bateluer]

that chick is fucking hot on that front page


wtf am i reading?


EDIT: on a side note, whenever I use WIFI in areas, I make sure i have a vanilla bones computer with me or I put absolutely everything to private folders just to keep unmotivated gawkers out

Of course, if you logged into Facebook, you just gave away everything it in to any idiot that knows how to install a FF add on.

 

[Brainonska511]

I see that this is an issue for open wireless networks, but could someone use something like Firesheep to hijack your account if you're on an encrypted wireless network (such as a large one run by a university)?

 

[Leros]

I see that this is an issue for open wireless networks, but could someone use something like Firesheep to hijack your account if you're on an encrypted wireless network (such as a large one run by a university)?

I tried. The ARP spoofing didn't work on my university's network.

 

[Brainonska511]

I tried. The ARP spoofing didn't work on my university's network.

That's nice to know. My current school's network is WPA2 encrypted. I wonder what kind of fun I could have had at my undergrad school, where the network was unencrypted and you just needed to enter a username/password in browser to be connected.

 

[Bateluer]

I see that this is an issue for open wireless networks, but could someone use something like Firesheep to hijack your account if you're on an encrypted wireless network (such as a large one run by a university)?

Not with Firesheep, that would take some skill and knowledge. Firesheep is strictly for the open wifis, found at nearly ever coffee shop, book store, numerous fast food restaurants, some municipalities, etc.

 

[SSSnail]

I bet you she's now a "leet hax0r".

 

[0roo0roo]

you could hack anandtech as well, no forced ssl on here.

kinda sad for a tech site.

 

[mjrpes3]

I don't dare use a public network without routing everything through home or work VPN.

 

[JEDIYoda]

you could hack anandtech as well, no forced ssl on here.

kinda sad for a tech site.

You actually have no vclue, do yaz?

Why would any site advertise what they have as far as encryption or protection against hackers....

Just as I thought.....no clue at all...

 

[cirrrocco]

So I tried it out. Does it store the user name and pwd somewhere? How can I find that. Isnt that the main thing.

 

[0roo0roo]

You actually have no vclue, do yaz?

Why would any site advertise what they have as far as encryption or protection against hackers....

Just as I thought.....no clue at all...

so whats anandtech forums special magic?

do tell...