Jump to content

  • Log in with Facebook Log in with Twitter Log In with Google      Sign In   
  • Create Account

Toggle shoutbox Shoutbox Open the Shoutbox in a popup

@  JeremyStCyr : (06 January 2023 - 12:09 AM)

i told someone of my subs on youtube recently i plan on taking a break least to april so during my break i will be working on that

@  JeremyStCyr : (06 January 2023 - 12:08 AM)

Pretz i just messaged my host, and i asked about wiping out this whole enitre site, why? i want to bring WolfpackArcade back stronger than ever, with the vBulletin, which will support v3arcade and ibproarcade and all the games will work once again, and it will be a ultimate game site dedicated to ibpro and downloads.

@  rg : (05 January 2023 - 09:57 PM)

Welcome to the forums marvin :)

@  JeremyStCyr : (02 January 2023 - 11:22 PM)

Sane to you Fanta

@  Fanta : (31 December 2022 - 07:13 PM)

Happy new year! :D

@  JeremyStCyr : (09 December 2022 - 03:40 PM)

Hey Fanta

@  Fanta : (09 December 2022 - 03:22 PM)

Hello Jeremy :D

@  JeremyStCyr : (21 April 2022 - 05:08 PM)

Your group has been fixed to donator kyle thank you!

@  rg : (21 April 2022 - 04:47 PM)

Welcome to the forums kylek :)

@  rg : (20 April 2022 - 12:11 PM)

Welcome to the forums commode59 :)

@  rg : (13 January 2022 - 11:05 AM)

Welcome to the forums west :)

@  JeremyStCyr : (25 October 2021 - 04:49 PM)

1 second

@  kmatt : (24 October 2021 - 10:33 AM)

I bought a gamepack, how do I get the download files?

@  kmatt : (23 October 2021 - 02:31 PM)

hi

@  rg : (23 October 2021 - 02:29 PM)

Welcome to the forums kmatt :)

@  bluethunder : (11 August 2021 - 03:18 PM)

long time no see

@  Belle : (27 May 2021 - 04:16 PM)

Ok

@  JeremyStCyr : (27 May 2021 - 12:00 PM)

Yes i want no more gimmicks, similar to what i been doing on YouTube, so its gonna be jeremystcyr.com

@  Belle : (26 May 2021 - 07:26 PM)

Different name?

@  JeremyStCyr : (26 May 2021 - 06:14 PM)

even though this site will redirect


(View All Videos) Toggle Members Videos


Toggle Scoreboard
ibProArcade Scoreboard

marvin has obtained a high score of 1478 Jan 05 2023 10:07 PM Playing penguins Revenge Play Now!                marvin has obtained a high score of 603.9 Jan 05 2023 10:04 PM Playing Dangerous Dave Part 1 : Mole Surfing Play Now!                Belle has obtained a high score of 14635 Sep 16 2022 12:45 PM Playing Power Solitaire Play Now!                Harmony has obtained a high score of 59940 Jul 17 2022 03:29 AM Playing Power Solitaire Play Now!                Belle has obtained a high score of 57140 Jul 08 2022 05:08 PM Playing Mahjongg 3D Tile Set 1 Play Now!                Belle has obtained a high score of 10500 Jul 08 2022 04:42 PM Playing Cosmic Switch Play Now!                Belle has obtained a high score of 54300 Jun 19 2022 02:19 PM Playing Mahjong 3D (042) Chrome - Deep Well Play Now!                Belle has obtained a high score of 23680 Jun 19 2022 01:44 PM Playing Mahjongg 3D (010) Classic - Cat And Mous Play Now!                Belle has obtained a high score of 34180 Jun 19 2022 11:41 AM Playing Mahjongg 3D (225) Ancient Doorway - Ston Play Now!                Belle has obtained a high score of 329 Jun 19 2022 10:54 AM Playing Mahjong Lianlian Girl Play Now!                Belle has obtained a high score of 5160 Jun 19 2022 05:11 AM Playing The Bridge Mahjong Play Now!                Belle has obtained a high score of 61820 Jun 19 2022 05:10 AM Playing Mahjongg 3D (068) Stone - The Dude Play Now!                Belle has obtained a high score of 16030 Jun 19 2022 04:54 AM Playing Cartoon Candy Play Now!                Belle has obtained a high score of 40260 Jun 18 2022 08:27 PM Playing The Secret Life of Pets Numbers Play Now!                Belle has obtained a high score of 1410 Jun 18 2022 07:44 PM Playing Persepolis - Spot the Difference Play Now!                Belle has obtained a high score of 79600 Jun 18 2022 07:33 PM Playing Kung Fu Panda 3 - Hidden Spots Play Now!                Belle has obtained a high score of 1530 Jun 18 2022 06:54 PM Playing Magic Stone Play Now!                Belle has obtained a high score of 118170 Jun 17 2022 08:30 PM Playing Animals Crush Unlimited Play Now!                Belle has obtained a high score of 946 Jun 17 2022 08:19 PM Playing Solitario Play Now!                Belle has obtained a high score of 589 Jun 17 2022 07:46 PM Playing Master of 3 Peak Play Now!                
Photo
- - - - -

Firesheep - Making Facebook/Twitter account hijacking easy


  • Please log in to reply
2 replies to this topic

#1 Lord Anubis

Lord Anubis

    Newbie

  • Full Access
  • Pip
  • 5 posts

Posted 27 November 2010 - 11:34 AM

Firesheep - Making Facebook/Twitter account hijacking easy


When logging into a website you usually start by submitting your username and password. The server then checks to see if an account matching this information exists and if so, replies back to you with a "cookie" which is used by your browser for all subsequent requests.

It's extremely common for websites to protect your password by encrypting the initial login, but surprisingly uncommon for websites to encrypt everything else. This leaves the cookie (and the user) vulnerable. HTTP session hijacking (sometimes called "sidejacking") is when an attacker gets a hold of a user's cookie, allowing them to do anything the user can do on a particular website. On an open wireless network, cookies are basically shouted through the air, making these attacks extremely easy.

This is a widely known problem that has been talked about to death, yet very popular websites continue to fail at protecting their users. The only effective fix for this problem is full end-to-end encryption, known on the web as HTTPS or SSL. Facebook is constantly rolling out new "privacy" features in an endless attempt to quell the screams of unhappy users, but what's the point when someone can just take over an account entirely? Twitter forced all third party developers to use OAuth then immediately released (and promoted) a new version of their insecure website. When it comes to user privacy, SSL is the elephant in the room.

Today at Toorcon 12 I announced the release of Firesheep, a Firefox extension designed to demonstrate just how serious this problem is.

After installing the extension you'll see a new sidebar. Connect to any busy open wifi network and click the big "Start Capturing" button. Then wait.




As soon as anyone on the network visits an insecure website known to Firesheep, their name and photo will be displayed:




Double-click on someone, and you're instantly logged in as them.



That's it.



Its not hard to comprehend the far-reaching ramifications of this tool. Anytime youre using an open Wi-Fi connection, anyone can swiftly access some of your most private, personal information and correspondence (i.e. direct messages, Facebook mail/chat) at the click of a button. And you will have no idea.

This is how it works. If a site is not secure, it keeps track of you through a cookie (more formally referenced as a session) which contains identifying information for that website. The tool effectively grabs these cookies and lets you masquerade as the user.

Apparently many social network sites are not secured, beyond the big two, Foursquare, Gowalla are also vulnerable. Moreover, to give you a sense of Firesheeps scope, the extension is built to identify cookies from Amazon.com, Basecamp, bit.ly, Cisco, CNET, Dropbox, Enom, Evernote, Facebook, Flickr, Github, Google, HackerNews, Harvest, Windows Live, NY Times, Pivotal Tracker, Slicehost, tumblr, Twitter, WordPress, Yahoo, Yelp. And thats just the default setting anyone can write their own plugins, according to the post.

Firesheep is free, open source, and is available now for Mac OS X and Windows. Linux support is on the way.

Websites have a responsibility to protect the people who depend on their services. They've been ignoring this responsibility for too long, and it's time for everyone to demand a more secure web. My hope is that Firesheep will help the users win.





#2 pitukasalman

pitukasalman

    Newbie

  • Full Access
  • Pip
  • 5 posts

Posted 02 December 2010 - 01:58 PM

wow anybody tried this? i dont like fb anyway, by using fb we just make the owner mark zuckenberg richer, it is better we create own site

#3 starman_uk

starman_uk

    Newbie

  • Full Access
  • Pip
  • 5 posts

Posted 19 January 2011 - 08:44 PM

ohmy.gif well that puts mo off using open wifi hot spots sad.gif

Yet again facebook shows that it is very insecure, and i am glad i stopped using FB about a year ago.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users