Skip to main content

Hack facebook account

By

Firesheep

Firesheep is an open source firefox extension that can be used to hijack HTTP Sessions. When logging into a website you usually start by submitting your username and password. The server then checks to see if an account matching this information exists and if so, replies back to you with a "cookie" which is used by your browser for all subsequent requests.
It's extremely common for websites to protect your password by encrypting the initial login, but surprisingly uncommon for websites to encrypt everything else. This leaves the cookie (and the user) vulnerable. HTTP session hijacking (sometimes called "sidejacking") is when an attacker gets a hold of a user's cookie, allowing them to do anything the user can do on a particular website. On an open wireless network, cookies are basically shouted through the air, making these attacks extremely easy.
This is a widely known problem that has been talked about to death, yet very popular websites continue to fail at protecting their users. The only effective fix for this problem is full end-to-end encryption, known on the web as HTTPS or SSL. Facebook is constantly rolling out new "privacy" features in an endless attempt to quell the screams of unhappy users, but what's the point when someone can just take over an account entirely? Twitter forced all third party developers to use OAuth then immediately released (and promoted) a new version of their insecure website. When it comes to user privacy, SSL is the elephant in the room.
Today at Toorcon 12 I announced the release of Firesheep, a Firefox extension designed to demonstrate just how serious this problem is.
After installing the extension you'll see a new sidebar. Connect to any busy open wifi network and click the big "Start Capturing" button. Then wait.
As soon as anyone on the network visits an insecure website known to Firesheep, their name and photo will be displayed:


Double-click on someone, and you're instantly logged in as them.
That's it.
Firesheep is free, open source, and is available now for Mac OS X and Windows. Linux support is on the way.
Websites have a responsibility to protect the people who depend on their services. They've been ignoring this responsibility for too long, and it's time for everyone to demand a more secure web. My hope is that Firesheep will help the users win.
To download firesheep click here:  

FIRESHEEP DOWNLOAD
Labels:

Comments

Post a Comment

Popular posts from this blog

Ipad apps: AppStart Review

By
AppStart For iPad Review Free for a limited time only , AppStart for iPad is a terrific app by the folks over at  AppAdvice.com  that’s meant to serve as a starter guide for new iPad users and owners. The promotion is only available for a limited time as customers flock to pick up their iPad 2s this week. Whether you’ve had your iPad since launch day or you just picked one up, AppStart For iPad is a detailed and comprehensive guide for the most popular and useful ways to utilize your iPad in addition to recommending a few apps to get your feet wet. When you first open the app, the home screen is displayed in a clean grid of buttons for you to tap-in and find out everything there is to do with the iPad. Each grid-box allows you to open up a mini-guide for how you can use your iPad as an eReader, home theater, radio, nightstand, magazine, or social media hub. Within each mini-guide, the folks over at App-Advice also throw in their suggestions for both free and paid apps that re...
49 comments
Read more

How to turn off Ringbacks on Rogers

By
Rogers just update you to the latest iPhone value pack, or figure out some other way to stick you with their ringbacks service, and you’re desperate to find out how to turn it off? They don’t want to make it easy — they want you to pay money for more Ringbacks — but after over an hour of waiting on 3 different customer service and tech support reps, I got the answer. Here it is: From your Rogers iPhone, text 555 with the word OFF. You’ll get an autoreponder with a link to http://rogers.com/ringbacksoff Tap the link. You need to be on Rogers’ network (i.e. not Wi-Fi) to access this page! Scroll down to the bottom and turn OFF both Ringbacks and Voice Greetings. (Yes, Ringbacks are so annoying they require and additionally annoying Voice Greeting to beg the people who call you not to hang up while they’re annoyed by the Ringback.) Rogers tried to get me to give Ringbacks a chance, saying if I loved the Beatles and my friends new I loved the Beatles, I could entertain them w...
Post a Comment
Read more

Samsung Galaxy S3 Release Date

By
Samsung Galaxy S3 Debut at MWC 2012 in February It’s that time of the year as we cross over to the New Year. With less than a year ago since the Samsung Galaxy S2 was released, we begin another journey as Samsung is preparing to launching it’s next great smartphone, Samsung Galaxy S III. ETNews reports that Samsung will be debuting the successor of Galaxy S2, Samsung Galaxy S3, at the Mobile World Congress (MWC) 2012 in Barcelona, Spain Feb. 27th – March 1st 2012. This will be up against the superb Google’s Samsung Galaxy Nexus that was recently released As previously leaked, the new Samsung Galaxy S3 is expected to pack a 2.0GHz quad-core processor, 2GB of RAM, 10 megapixel camera with full 1080p video capabilities, 32GB of internal storage and also launch with Android 4.0 ICS installed. The Galaxy S II is still the reigning fastest selling Samsung smartphone to date when it launched in 2011 and sold over 3 million in under 55 days. Seeing that it will be debuted in Fe...
6 comments
Read more