Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Firefox Extension Allows Anyone to Steal Logins over Insecure Networks

08 Nov 2010   #11
Fayla

Windows 7 Professional 64 Bit SP1
 
 

Really, you should never visit important web sites that require login or shop online while your computer is connected to an unsecured wifi hot spot.

...I installed a counter Firefox addon for this after hearing about it and it just forced TLS on certain web-sites-- and that produced errors in my browser, as some sites rejected the TLS connection outright.

But I did realize something, if you have the noscript addon installed, you don't need an additional addon to stop this. Simply by going into the options of noscript > Advanced > HTTPS, you can define which web-sites you want to force a SSL connection on and even have Firefox encrypt all the cookies you send over SSL for certain web-sites (in case you drop out of secure mode for some reason.)


My System SpecsSystem Spec
.
08 Nov 2010   #12
Tepid

Win 7 Ultimate 32bit
 
 

This is not going to change much of anything.

The largest majority of users on the Net are not security conscious. If they were, there would be far fewer Virus/Malware/Spyware issues than there are.

Sorry, people in general don't give a crap as long as they can login at a starbucks for free and get their latte.
And as for Facebook and the ilk (i mean like), those people are even dumber.
Why do I say that? Simple.

When people insist on continuing to use a site that has a habit of marking all of your private data not private till you go in and change it, leaving it wide open for all to see? Your an idiot. And you deserve what you get. Sorry if that is too blunt for some, but facts are facts. It's a completely stupid thing to continue using such site. And if you are doing it? Well, as they say, "If the shoe fits."
My System SpecsSystem Spec
09 Nov 2010   #13
Borg 386

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
 
 
Protecting yourself from the Firesheep extension

Quote:
Derek Schauland took the Firesheep extension for Firefox out for a spin, and discovered how easy it makes stealing credentials on open wireless networks. Here is his take on how to protect yourself.
Read more

Hacking made easy: Protecting yourself from the Firesheep extension | IT Security | TechRepublic.com
My System SpecsSystem Spec
.

10 Nov 2010   #14
Fayla

Windows 7 Professional 64 Bit SP1
 
 

It's more like what can these major web-sites do to protect their end users. Not enough sites offer encryption across the board.

Really, this is a new face to a old problem. The network we use now was designed over twenty years ago and it had the goal of open-ness in mind, not security.

SSL, TLS, certificates are nothing but patchwork to try to secure a system that was designed to be completely open and security-less.
My System SpecsSystem Spec
10 Nov 2010   #15
madtownidiot

 

The best thing you can do to protect your privacy when using a laptop in a public place is to use a VPN. If you don't want to pay for a VPN service, you can create a VPN server at home or set your home computer up for remote access.
My System SpecsSystem Spec
13 Nov 2010   #16
richc46

Microsoft Community Contributor Award Recipient

Windows 10, Home Clean Install
 
 
FireFox Extension Firesheep Lets Hackers Get Into Your Social Accounts

Just found out about this security threat. It made me concerned and I dont even use hot spots
Firesheep In Wolves’ Clothing: Extension Lets You Hack Into Twitter, Facebook Accounts Easily
My System SpecsSystem Spec
13 Nov 2010   #17
madtownidiot

 

Firesheep isn't even the half of it.. just an example made written by a skilled hacker to demonstrate one aspect of the vulnerabilities of public wifi.
My System SpecsSystem Spec
14 Nov 2010   #18
jimbo45

Linux CENTOS 7 / various Windows OS'es and servers
 
 

Quote   Quote: Originally Posted by slam View Post
Yup, I heard about this, but there's also a counter firefox entension that prevents this. It's generally not a good idea to go on sites that require login through public unsecure networks anyway.
?

How then do you login to an Online Bank via the Internet.

Most Banks have decent security but to reach their sites you still have to use the public internet -- so I'm confused as to what you actually mean here about logging in via public unsecure networks -- after all isn't the Internet just one gigantic public Network.

Cheers
jimbo
My System SpecsSystem Spec
14 Nov 2010   #19
RJ12

Windows 7 Home Premium x64
 
 

Quote   Quote: Originally Posted by jimbo45 View Post
Quote   Quote: Originally Posted by slam View Post
Yup, I heard about this, but there's also a counter firefox entension that prevents this. It's generally not a good idea to go on sites that require login through public unsecure networks anyway.
?

How then do you login to an Online Bank via the Internet.

Most Banks have decent security but to reach their sites you still have to use the public internet -- so I'm confused as to what you actually mean here about logging in via public unsecure networks -- after all isn't the Internet just one gigantic public Network.

Cheers
jimbo
I believe they mean unsecured WiFi Networks
My System SpecsSystem Spec
15 Nov 2010   #20
swarfega

Windows 7 Professional 64-bit
 
 

So is there an extension you can install to counter this? Can other extension based browsers suffer from this as well?

Firefox is getting more and more insurecure.
My System SpecsSystem Spec
Reply

 Firefox Extension Allows Anyone to Steal Logins over Insecure Networks




Thread Tools




Similar help and support threads
Thread Forum
Cannot Install Windows Media Player Extension In Firefox
Well, I know this is an old problem and I overcame it once before but like the ignoramus I sometimes am I failed to bookmark or otherwise save the solution. I know it involves either creating or copying a folder from C\Program Files x86\Mozilla (Mozilla Firefox?), perhaps a plugin folder, and then...
General Discussion
firefox add-on/extension to save previous session windows/tabs ?
hi folks, does anyone know a good add-on / extension for ff which 'saves' your open windows/tabs. i tell u why. when i use ccleaner to empty the cache/clear cookies etc. and then restart ff, all my open previous windows are gone. and yes, i have enabled in tools in ff: save last open windows/tabs...
Browsers & Mail
Malware aimed at social networks may steal your reality
Malware aimed at social networks may steal your reality - Computerworld Blogs Does this bother anyone else?
Chillout Room
Looking for a Firefox extension .......
....... that opens a balloon when a word or words are highlighted. The balloon contains icons for Google, Bing and 2 or 3 other search engines. Had this installed but lost it and can't find it when searching for Add-ons. Anyone recognise it and know its name? Found another one that copies...
Browsers & Mail
Mozilla/Foxfire - Insecure Java Plugin in Firefox
Mozilla is disabling older versions of the Java Deployment Toolkit plugin for Firefox users, in a bid to block attacks against a newly-discovered Java security hole that attackers have been exploiting of late to install malicious code. Please read the rest of the story Mozilla Disables Insecure...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 05:57.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App