Premium Essay

Firesheep

In:

Submitted By manhuan
Words 1132
Pages 5
Introduction

I came across an article dates back to 2011. The title of this article is called “New Hacking Tools Pose Bigger Threats to Wi-Fi Users”. The title of this article basically sums up what the type of threat it is and a general idea of what the article will be about. Turns out there were more to this title than I thought because the person imposing the threat is a network security expert, a white hat hacker.
Network Threat

A security expert by the name of Eric Butler decided to release a free hacking tool called Firesheep, onto the Internet. Firesheep is an add-on of Mozilla Firefox, which means a Firefox browser has to be installed, to use this software. What is so intriguing about this tool is, no hacking experience is required, and anyone that downloaded this software will be able to hijack login information on an open wireless network.
Threat materialized Firesheep was basically designed to targeted sites like Facebook, Twitter, Flicker, Amazon, eBay, etc. Sites that didn’t fully implemented HTTPS. HTTPS stands for Hypertext Transfer Protocol Secure, it is a communication protocols that provides encryption communications between its sender and its receiver. Websites that don’t support HTTPS or doesn’t fully use HTTPS are at risk of exposing their users’ information during their session with the site.
Firesheep nourished on websites without HTTPS. Because it provided Firesheep users with no limitation to amount of account logins they can obtained in a single day. Although Firesheep is mainly a threat to unsecured open wireless networks, however it can also become very much of a threat in secured networks as well. If a user really wanted to, he or she can easily downloaded free Wi-Fi hacking software, to crake and obtain Wi-Fi passwords from secured networks.
There are also high-powered Wi-Fi antennas that enable Wi-Fi signals to be

Similar Documents

Premium Essay

Computer Threat You Did Not Know

...10 Computer Threats You Didn't Know About 1. Fake Tech-Support Calls You might get an unsolicited phone call from a tech-support representative claiming to be from Microsoft or another big-name IT corporation. But the caller won't be who he claims to be. After warning you that "suspicious activity" has been detected on your computer, he'll offer to help once you give him the personal information he requires to get his job done. That job isn't fixing your computer. In fact, he's really just after your personal information. If you receive a call like this, hang up, call the company the bogus technician claimed to be from, and report the incident to a legitimate representative. If there really is a problem, they'll be able to tell you; if not, you just thwarted a data thief. 2. DNS Redirection Internet service providers (ISPs) such as Time Warner Cable and Optimum Online claim they're trying to help with DNS redirection, but the reality seems to come down to money. Domain Name System (DNS) redirection overrides your browser's normal behavior when you can't reach a webpage. Instead of displaying the normal 404 "File Not Found" error, the ISP sends you to a page of the ISP's choosing usually a page full of paid advertising and links. Innocent though that practice may be, computer viruses can do the same thing,redirecting your browser to a hostile page the first time you misspell a domain. With ISPs, you can opt out of their DNS redirection (you'll find links below all the ads);...

Words: 1447 - Pages: 6

Premium Essay

Security and Privacy on the Internet

...Security and Privacy on the Internet There are a lot of articles in the newspapers these days about databases hacked, personal information stolen, bank accounts “cleaned out”, or credit cards erroneously charged. When it comes to security and privacy on the Internet, how well does the system protect the public? Are certificate based security protocols as safe as one is lead to believe? Will modifying the Internet Explorer’s settings provide adequate privacy? As the “tech” world evolves and smart phones and other wireless devices become the norm, how secure are the Wi-Fi networks? Part of the problem is the technology is moving so fast, the rules cannot even keep up. Encryption is considered one of the better ways to help keep personal information secure, and give the user a “warm fuzzy” when the closed lock is displayed. Mr. Miguel Helft, New York Times, expresses a concern with the certificates issued by a third-party organization to guarantee a websites authenticity. According to the Electronic Frontier Foundation, more than 650 organizations can issue certificates used by Microsoft’s Internet Explorer and Mozilla’s Firefox for encryption. These organizations are located across the globe, like Russia and China which are suspected of internal public surveillance, and raise the question if the issuing organization is misusing certificates to eavesdrop on internet activity. Peter Eckersley, a senior staff technologist at the Electronic Frontier Foundation, tells of...

Words: 1110 - Pages: 5

Premium Essay

Tools of the Trade

...Tools of the Trade More businesses than ever today realize the importance of information security, data retention, disaster planning as well as the added value of penetration testing. The pen-testing marketplace is seeing increased competition and Total Security, LLC wants to ensure that you are able to focus your time and efforts on your business and not be distracted by the many pitfalls that can derail your company’s day to day operations. Total Security, LLC relies on many tools and techniques focusing on seven key areas so that you focus your attention on the details important to you. Our team of experts ensures that your website, data, networks, and infrastructure remain safe and secure. As a full service solutions provider we are able to not only make use of our skills as penetration testers but to also provide a full company-wide audit and incident response for all of your IT needs. Allow us to differentiate ourselves from the competition by providing you solutions to all of your After contracting with Total Security LLC we establish the scope of the pen-test, auditing, and other services and then leverage our knowledge, skills, and tools to provide your executive team with a report of vulnerabilities and areas of concern as well as remediation steps and an implementation and solutions schedule. The key areas that our team focuses on are: * Web Application Security * Data Confidentiality, Integrity, and Availability * Network Security * Operating...

Words: 394 - Pages: 2

Premium Essay

Session Hijacking

...Preventing Session Hijacking in Cloud Computing Sasha Melanie Personal Research Paper 20th October 2015 Abstract The idea of Cloud processing is turning out to be a well-known concept every passing day particularly in the field of computing and information technology. It refers to both applications that are conveyed as administrations over the Internet and also as resources (software and hardware) in the data centres. With this kind of advancement, the cloud computing technology raises many security concerns. There are several vulnerabilities that come along with cloud computing that may be exploited by attackers through security threats such as session hijacking. This paper gives an overview of the cloud as well as session hijacking highlighting the key vulnerability areas that every organization need to put into consideration before any implementation of cloud computing. The paper gives the basis for further research that would help curb the challenge of session hijacking in cloud computing. TABLE OF CONTENTS Abstract 2 CHAPTER ONE 5 1.0 INTRODUCTION 5 1.1 Motivation for the study 6 1.2 Premises of the study 7 1.3 Problem Statement 7 1.4 Technical objectives of the study 7 CHAPTER TWO 9 2.0 RELATED WORK 9 2.1 Issues with Cloud Computing 9 2.2 ANALYSIS OF SESSION HIJACKING 9 2.2.1 Cookies: 10 2.2.2 TCP session capturing 10 2.3 PREVENTING SESSION HIJACKING 11 2.3.2 Information encryption programming 11 2.3.3 Virus Detection Applications 12 2.3.4 Digitized...

Words: 4485 - Pages: 18

Premium Essay

Session Hijacking

...Preventing Session Hijacking in Cloud Computing Sasha Melanie Personal Research Paper 20th October 2015 Abstract The idea of Cloud processing is turning out to be a well-known concept every passing day particularly in the field of computing and information technology. It refers to both applications that are conveyed as administrations over the Internet and also as resources (software and hardware) in the data centres. With this kind of advancement, the cloud computing technology raises many security concerns. There are several vulnerabilities that come along with cloud computing that may be exploited by attackers through security threats such as session hijacking. This paper gives an overview of the cloud as well as session hijacking highlighting the key vulnerability areas that every organization need to put into consideration before any implementation of cloud computing. The paper gives the basis for further research that would help curb the challenge of session hijacking in cloud computing. TABLE OF CONTENTS Abstract 2 CHAPTER ONE 5 1.0 INTRODUCTION 5 1.1 Motivation for the study 6 1.2 Premises of the study 7 1.3 Problem Statement 7 1.4 Technical objectives of the study 7 CHAPTER TWO 9 2.0 RELATED WORK 9 2.1 Issues with Cloud Computing 9 2.2 ANALYSIS OF SESSION HIJACKING 9 2.2.1 Cookies: 10 2.2.2 TCP session capturing 10 2.3 PREVENTING SESSION HIJACKING 11 2.3.2 Information encryption programming 11 2.3.3 Virus Detection Applications 12 2.3.4 Digitized...

Words: 4485 - Pages: 18

Free Essay

Hacking

...By : Anurag Dwivedi [[Lets Hack The Universe]] Note: Only For Eductional Propose…xD xD !! Legal Disclaimer Any proceedings and or activities related to the material contained within this volume are exclusively your liability. The misuse and mistreat of the information in this book can consequence in unlawful charges brought against the persons in question. The authors and review analyzers will not be held responsible in the event any unlawful charges brought against any individuals by misusing the information in this book to break the law. This book contains material and resources that can be potentially destructive or dangerous. If you do not fully comprehend something on this book, don‘t study this book. Please refer to the laws and acts of your state/region/ province/zone/territory or country before accessing, using, or in any other way utilizing these resources. These materials and resources are for educational and research purposes only. Do not attempt to violate the law with anything enclosed here within. If this is your intention, then leave now. Neither writer of this book, review analyzers, the publisher, nor anyone else affiliated in any way, is going to admit any responsibility for your proceedings, actions or trials. About The Author Anurag Dwivedi is a 13 year old computer geek. Who likes to find vulnerabilities Doing Hacking , Programming , editing , cracking , web designing and writing books He Wants To Be An Software Designer..!!!! Join His Blog: Computer...

Words: 20358 - Pages: 82

Premium Essay

Policy Planning

...Master Your Mac simple ways to tweak, customize, and secure os x MAT T CONE Master Your Mac Master Your Mac Simple Ways to Tweak, Customize, and Secure OS X MAT T CONE MASTER YOUR MAC. Copyright © 2013 by Matt Cone. All rights reserved. No part of this work may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage or retrieval system, without the prior written permission of the copyright owner and the publisher. First printing 16 15 14 13 12 123456789 ISBN-10: 1-59327-406-8 ISBN-13: 978-1-59327-406-1 Publisher: William Pollock Production Editor: Serena Yang Cover Design: Serena Yang Cover Photo: Kazuya Minami Interior Design: Octopod Studios Developmental Editor: Tyler Ortman Technical Reviewer: Wayne Linder Copyeditor: Paula L. Fleming Compositor: Serena Yang Proofreader: Ward Webber Indexer: Nancy Guenther For information on book distributors or translations, please contact No Starch Press, Inc. directly: No Starch Press, Inc. 38 Ringold Street, San Francisco, CA 94103 phone: 415.863.9900; fax: 415.863.9950; info@nostarch.com; http://www.nostarch.com/ Library of Congress Cataloging-in-Publication Data A catalog record of this book is available from the Library of Congress. No Starch Press and the No Starch Press logo are registered trademarks of No Starch Press, Inc. My New is a trademark of No Starch Press, Inc. Other product and company names mentioned herein...

Words: 82954 - Pages: 332

Free Essay

Dfdgfg

...Build Your Report | Symantec http://www.symantec.com/threatreport/print.jsp?id=highlights... BOOKMARK THIS PAGE | PRINT THIS PAGE | CLOSE Internet Security Threat Report Volume 17 Custom Report SHARE THIS PAGE Symantec blocked a total of over 5.5 billion malware attacks in 2011, an 81% increase over 2010. Web based attacks increased by 36% with over 4,500 new attacks each day. 403 million new variants of malware were created in 2011, a 41% increase of 2010. SPAM volumes dropped by 34% in 2011 over rates in 2010. 39% of malware attacks via email used a link to a web page. Mobile vulnerabilities continued to rise, with 315 discovered in 2011. Only 8 zero-day vulnerabilities were discovered in 2011 compared with 14 in 2010. 50% of targeted attacks were aimed at companies with less than 2500 employees. Overall the number of vulnerabilities discovered in 2011 dropped 20%. Only 42% of targeted attacks are aimed at CEOs, Senior Managers and Knowledge Workers. In 2011 232 million identities were exposed. An average of 82 targeted attacks take place each day. Mobile threats are collecting data, tracking users and sending premium text messages. You are more likely to be infected by malware placed on a legitimate web site than one created by a hacker. Introduction Symantec has established some of the most comprehensive sources of Internet threat data in the world through the Symantec Global Intelligence Network, which is made up of more than 64.6 million attack sensors and...

Words: 44470 - Pages: 178