Facebook and twitter Hack

[Elimentals]

If you use to opening your Facebook on your laptop, think twice about it when you on a public wireless network, even if that network use WPA2. People on the same network as you can capture your details and log in and even modify your data without any need for passwords.

There is a couple of Applications out already to use this exploit from Firesheep Firefox add-on to Faceniff a Android application that allows you to capture and access accounts.

Any account that use normal HTTP is at risk.
Facebook, Twitter, Flickr even google accounts are at risk.

Example see Faceniff in action

[video=youtube;3bgwVM7t_s4]http://www.youtube.com/watch?v=3bgwVM7t_s4[/video]

Firesheep in action

[video=youtube;O3NAM8oG1WM]http://www.youtube.com/watch?v=O3NAM8oG1WM[/video]

 

[Khanridhwaan]

:wtf:

 

[bullzeye.za]

Not new info, but just goes to show how easy it is to break http authentication ( If someone on your local network has authenticated already )

If you logout though, all users with that specific cookie will be logged out too. So that's at least something.