Firefox Extension Allows Anyone to Steal Logins over Insecure Networks

[jav]

Why everyone is stuck with the idea that it only affects public wifi?

It can affect anything from public wifi, your home network and even to your VPN.

Of course maybe "Firesheep" cant do it, but it is really really easy to create sniffer which can do it. Hell As far as I know it has been created about 5-10 years ago?

So is there an extension you can install to counter this? Can other extension based browsers suffer from this as well?

Firefox is getting more and more insurecure.

How is it getting insecure?
It is nothing to do with firefox. It is even nothing to do with OS.
It is all about Internet and how we "almost always" send plain http....

Yup, I heard about this, but there's also a counter firefox entension that prevents this. It's generally not a good idea to go on sites that require login through public unsecure networks anyway.

?

How then do you login to an Online Bank via the Internet.

Most Banks have decent security but to reach their sites you still have to use the public internet -- so I'm confused as to what you actually mean here about logging in via public unsecure networks -- after all isn't the Internet just one gigantic public Network.

Cheers
jimbo

Yes, that the thing I was talking about.
It is nothing to do with open wifi.

I maybe the guy who works on your ISP.
And I may know that there is a some bank which does not use encryption to his login or session cookie. (I can't imagine if there is... :sarc: )
I will just set up my sniffer to look for packets from and to that bank's site.
See, you can use super encrypted network at your home, but if site doesn't use encryption it is useless.

For years it has been said that sending sensitive or private information in plain http is insane.
It is not a news...

5-10 years and all Internet will move to encryption... (this is along with user education is THE solution to most of our privacy problems)

 

[Tepid]

Actually,, I have a feeling (And you read it here first, dated and time stamped for future reference)

Some countries are not allowed to use above certain levels of Encryption for what I can guess they would say is National Security?

it's coming here soon too. If your local spook can't read your encrypted info, then it will be illegal.