Slashdot Mirror
Firesheep Countermeasure Tool BlackSheep
Orome1 writes "Slashdot already covered Firesheep, the Firefox extension that makes it easier to steal logins and take over social media and email accounts after users log in from a WiFi hotspot or even their own unprotected network. Zscaler researchers have created, and are now offering to every consumer, a free Firefox plugin called BlackSheep, which serves as a counter-measure. BlackSheep combats Firesheep by monitoring traffic and then alerting users if Firesheep is being used on the network. BlackSheep does this by dropping 'fake' session ID information on the wire and then monitors traffic to see if it has been hijacked."
Or you could just force tls/ssl on sites that support it and render firesheep useless. Because you know, being alerted that your information just got stolen is much better than using proper security in the first place.... or not.
Get a web developer
shouldn't it be called Firefox?
Oh wait...
Don't most big email and social network sites use a secure login, so that it won't work for firesheep? Are there any examples of large ones that don't? Thanks.
Since this extension only *informs* and does nothing else, such as actively disrupt Firesheep's functionality, you will still be busted if doing insecure communication on the network, see this warning suddenly pop up, and are already using Twitter/Facebook/...? And in this case, you would have to "ZOMGQUIT!!!" to have any chance of being safe.
For how long can a session be hijacked anyway? If you close your browser, is the seesion instantly invalidated? Or only after like 5 minutes? I mean, in that case, Blacksheep could scream all it wants, and you'll still be a potential victim even if it warned you and you closed your browser (or tab).
Beware: In C++, your friends can see your privates!
...what happens when you're on an unencrypted network and the FireSheep user picks the correct session ID anyway? I'd imagine choosing an encrypted network is still the better way to go.
See also: Sheepsafe. http://github.com/nicksieger/sheepsafe ... it's a simple Ruby script that automates setting up a SOCKS proxy for you on untrusted networks. I think it's only setup to work w/ OSX right now, but should be pretty simple to adapt to other unixy OSes.
New Zealanders rejoise :) so much sheep :)))
People worrying about Firesheep, or any other form of password sniffing, all make one crucial wrong assumption, and it's that any aspect of their digital life is of any interest whatsoever. The truth is, unless you're someone who matters, nobody cares about your rambling on your blog, your Facebook account or your Facebook friends, what you tweet about, your nickserv password on IRC or your POP3 email password. Nobody... cares...
And if you're someone who matters (no, really, no you), someone probably made sure your digital details are pretty secure for you. As for those who are very VERY important and famous, they have nothing to worry about, as their Twitter or Facebook accounts are usually fake, with one of their staff behind the keyboard, so they look cool and digital and in touch with their constituency to get more votes at the next election.
Finally, those who might have something to hide from, say, the law, already know how to encrypt their partitions, run ssh tunnels or use TOR, and do that in a bar with a laptop using an insecure Wifi hotspot. Nobody can sniff any password from them if they stay careful.
So in short, if you're a harmless Joe Blow, you can stop worrying about securing your digital presence: it only makes you look suspect if your computer or your communications are investigated for any reason. Your place in the Who's Nobody pretty much ensures your security and anonymity on the internet.
"A door is what a dog is perpetually on the wrong side of" - Ogden Nash
Begun, the sheep wars have.
"BlackSheep" could not be installed because it is not compatible with your Firefox build type (Linux_x86-gcc3). Please contact the author of this item about the problem.
This firefox extension from the EFF will force an HTTPS connection if possible. It works with Firefox (ie keeps the connection in https mode throughout the session, not just during the login).
The English word fart is one of the oldest words in the English vocabulary.
- http://www.net-security.org/secworld.php?id=10096
You forget the '4chan' part of the problem. They will use this to ruin your (however unimportant you think it is) life and just for giggles.
How long until Firesheep implements something that detects a Blacksheep trap, and doesn't respond to it? Will Blacksheep then implement a detection detector?
Let's say you have a house. You keep valuable things in it, but you don't have a front door. Anyone can just walk in.
In particular, you've regularly noticed shifty-looking people entering your house carrying a large black bag in order to steal your stuff.
Now from this, you might draw the conclusion that it is time to get a door and lock it.
Or you could set up a sophisticated system of cameras and image analyzing software that will scan everyone walking down your street and sound a loud alarm if one of them is carrying a large black bag.
For bonus points, overspecialize the system so that it only reacts to black bags, but not green ones.
I'd rather have this blacksheep myself.
If it tells you the IP, any thoughts on a tool to shut down that IP? Or find out who is using it? I guess you could always go to the person who is in charge of the network and block their computer from reconnecting - but ofter times in a public WIFI, there isn't anyone.
Personally, I would love to knock some kid over the head after finding out he is trying to steal my account/session.
Not because I care enough to use it to try to protect the 'sheep'. But I know that somebody will.
I can't wait to be at Starbucks when a socially awkward 17 year old stands up triumphantly to save the day by alerting everyone that there is a 'Firesheeper' in the building hijacking their cookies!
Note: "BlackSheep" could not be installed because it is not compatible with your Firefox build type (Linux_x86-gcc3).
ac
That's not much of a tripwire, since your odds of activating it are sorta low.
What about FireShepherd which actively jams Firesheep?
No need to worry folks, the FireSheep guys will come up with SheepDog which will make sure that BlackSheep stays the hell put dagnabbit and you'll be able to spy on your friends again in no time.
~Syberz
http://www.imdb.com/title/tt0779982/
LMAO
putting the 'B' in LGBTQ+
if someone is waiting to hijack YOUR session with firesheep, and you are not using encryption for authentication, there is NOTHING you can do to predict it.
Sheep Wars
BlackSheep is not a counter-measure, it doesn't attack Firesheep. It is only a detector.
1) I can sniff and use the credentials later. Matter of fact, I would _only_ do that as I _know_ the other guy is active atm.
2) It tells you if you are being sniffed after the fact
3) Use a VPN while on public, shared networks. Always.