Firesheep susceptibility

Does anyone have any info on Firesheep, the new hackers' tool? Is there any susceptibility vis-a-vis Safari?? Any protective solutions???

I appreciate any info. Thanks in advance. 🙂
--
Mick

iPhone 3GS, iOS 4

Posted on Nov 9, 2010 9:59 AM

Reply
4 replies

Nov 9, 2010 10:09 AM in response to mickBelker

Firesheep is a Firefox plug in used by hackers that will packet sniff the network they are on (hence it's use on open Wifi spots like at Starbucks). It can can easily be used (trust me, I tested it, a script kiddie can do it) to pick up and steal an authenticated session from many popular sites (social sites, shopping sites, etc), thus if you are on an open wifi network and lets say browse to Amazon to go buy something, when you log in, they can capture your session and also log in as you and thus shop under your account. If you go to lets Say Facebook, they too can then access your account. If you log off your session, their session will also die but that is you actually clicking the logoff option on the site.

There isn't much you can do about it and yes it is doing packet sniffing of the network so doesn't matter what browser you use, it is an issue with just how web traffic is and sites and sessions.

Same rules apply as they always do, when using a publicly open network, DON'T sign into anything.

Nov 9, 2010 11:20 AM in response to mickBelker

On the desktop, you can install a plug-in(Force TLS) for Firefox that forces websites to use SSL encryption throughout the entire session if that site supports it. Facebook normally uses SSL encryption only when you initially sign in. After that, it drops to unencrypted sessions. This is bad because facebook uses cookies to verify your identity every time you change pages on facebook and if sent over unencrypted networks, can easily be sniffed. At this moment, there are no plug-ins that I know of that support Safari on the desktop or iOS.

To be safe, don't sign in or visit websites that transmit personal information unencrypted while connected to public wi-fi sites.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Firesheep susceptibility

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.