Public WiFi Not safe.

[AphexDreamer]

Your information just got much easier to steal.

"Today at Toorcon 12 I announced the release of Firesheep, a Firefox extension designed to demonstrate just how serious this problem is."

Source

 

[Fourstaff]

This, my friend, is the reason why I only use the public wifi for news and such.

 

[Mussels]

how interesting.


i may use this at work and have some fun

 

[MikeTyson]

Does this work on private WiFi networks as well? Say if someone had your network key, could they do the same thing?

 

[Mussels]

Does this work on private WiFi networks as well? Say if someone had your network key, could they do the same thing?

no, cause its encyrpted then. it only works if the wifi is unsecured.

 

[MikeTyson]

no, cause its encyrpted then. it only works if the wifi is unsecured.

Ah shit, I was hoping to have some fun

 

[PhysXerror]

Hmm, Very interesting

 

[Mussels]

Ah shit, I was hoping to have some fun

my work wifi is unencrypted, and we have a few slackers who use their iphones for facebook... fun will be had

 

[Easy Rhino]

hrm. interesting. don't banks and other transaction sites encrypt everything? so it wouldn't be much use unless you have a facebook fetish.

 

[[Ion]]

This could be interesting....school wifi is unencrypted

 

[Wrigleyvillain]

In other news, water is wet.

 

[MT Alex]

This also just in, Facebook is for dorks

 

[streetfighter 2]

In other news, water is wet.

This.

This also just in, Facebook is for dorks

This.

/Thread

 

[BrooksyX]

This also just in, Facebook is for dorks

Dang, must be a lot of dorks in the world

 

[human_error]

Time to find me some coffee bars. The number of people going there for the "free, open, public wifi" is a goldmine for demonstrating this.

Maybe if i take a projector with me and have a massive screen of me logged in as them as they leave to educate them in personal security. Or maybe I'll just post "I'm an idiot and don't understand the risks of public wifi" on their walls.

 

[Wrigleyvillain]

Dang, must be a lot of dorks in the world

Sad, but true.

 

[Breathless]

Sad, but true.

Metallica tribute

 

[Ripper3]

This might work on encrypted networks, with pre-shared key or with login, as they're not much more secure than WEP, truth be told.
You could use Wireshark, and have a field day capturing every bit transmitted. Wireshark will work on encrypted networks just fine, as I have witnessed someone doing once before, capturing transmissions over a WPA2 network that used user logins rather than PSK, which is standard affair for companies and schools.

 

[PVTCaboose1337]

I have been using Cain and Able for years to get websites people visit, passwords, you name it. Even over a WPA2 network with PSK, you can get the websites they visit. No problem!

 

[guitarfreaknation]

my work wifi is unencrypted, and we have a few slackers who use their iphones for facebook... fun will be had

I don't think AphexDreamer meant to encourage such behavior

 

[jasper1605]

thus the reason why I turn off the wi-fi on my router

 

[AphexDreamer]

I don't think AphexDreamer meant to encourage such behavior

Not at all.

 

[scaminatrix]

Not a very nice thing to promote...
Oh well, I'll give it a try anyway lol

 

[Mussels]

this program/plugin doesnt let you steal the passwords, it just lets you log in as them so long as they are logged in on the same wifi as you.


you cant use it to do any serious damage.

 

[AphexDreamer]

this program/plugin doesnt let you steal the passwords, it just lets you log in as them so long as they are logged in on the same wifi as you.


you cant use it to do any serious damage.

Serious nah... But complete control over facebook, the POWER!!!!

Also under preference its got a pretty decent list of sites you can steal logins as.

Amazon
Live
Yahoo
Dropbox

If someone isn't careful you can have full access to their email and Amazon!

And with dropbox, their files too!