The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
151 views

Is hijacking of Facebook sessions possible when having physical access to a computer?

I have tested programs like SSLStrip or dSploit that hijack a Facebook session. This is: if the user logs in and the computer running the interceptor program (i.e: dSploit) is onto the same network ...
0
votes
0answers
18 views

Tomato keeps asking for password

I flashed my router to Tomato a couple years ago and it's been great until I forwarded my website through it and started getting hit with loads of brute force attacks. That prompted me to enable ...
1
vote
1answer
376 views

MITM attack, Replay Attack, TCP Session Hijacking [closed]

I was going over the internet reading about types of attacks on a computer system and I can not differentiate between MITM, Replay and TCP Session Hijacking. They appear to be the same. Sniff the data ...
1
vote
3answers
3k views

Yahoo Mail vulnerability resulting in emails with no subject and a single link

Lately I've gotten random emails from friends with Yahoo Mail (or sbcglobal.net, which uses Yahoo Mail) without a subject and some random URL that I'm not going to click on. At first I thought that ...
1
vote
1answer
110 views

What should I consider when shopping for a private VPN?

I frequently rely on public wireless connections when I'm on the road, so to minimize the risk of session hijacking and packet sniffers I would like to start routing all of my connections through a ...
0
votes
1answer
879 views

regarding Firesheep filters

I downloaded it just to check it out, since the concept (showing that many websites need to go to SSL) was pretty cool. I was wondering, however, what the filter was and how does tcp port 80 differ ...
0
votes
2answers
127 views

Does logging out kill the session on the server's side

When I log in to a website, an active session is created on the server and my browser retains its "logged in" state by sending the identifier of that session to the server on each request. The ...
0
votes
2answers
432 views

OS X 10.6: Disallow non-VPN connections on wireless?

With the recent rise in awareness of HTTP session hijacking, surfing the internet on a public wireless network has become quite perilous. At my university, the wireless network is totally open --- no ...
5
votes
4answers
355 views

What can I do to protect myself against Firesheep?

In the SU chat yesterday is was raised that the newly released FF plugin Firesheep makes it very easy (obviously it was already possible, just difficult) for an attacker to session sidejack another ...