FireSheep vs. Facebook

[PabloDPena]

Can we assume you're safe on a wired network?

[StridentCorn90]

im using McDonalds internet from now on!!

[sherwin4]

2 people download firesheep

[11TechGuy]

im going on a plane soon... they'll be flying and then they'll have a hacked face book!

[pspheaven]

To EVERYONE who thinks using SSL will keep you safe your wrong... google sslstrip

[mundaneaccount]

THANKYOU. You're the best.

[s705945d]

LOL Epic 0:41 :D

[medolin1976]

scary firesheep, woahhhh! :)

[CCstormgust]

Ty very much for this informative video !

[jmanfan213]

If you're trying to protect yourself from firesheep, why would you give the link to firesheep? :(

[jbs4em]

@jmanfan213 any idiot could find it in seconds anyway so he is hardly dishing out some huge secret.

[xTheDeathSaintx]

......cant u just clear the cookies?

[macwinexpert]

I am quite annoyed that I made a video on Firesheep, with a clear disclaimer, and YouTube removed it :( I am not even sure they have reviewed it fully, as I had a section at the end saying how to protect yourself from firesheep. YouTube even won't tell me which community guideline it breaks.

All in all, gutted.

What should I do?

[XcomputernerdX]

i know someone named daniel davis...

[jmontineri]

you can also use blacksheep to see who uses firesheep on the network

[Habbloxian]

@coolk1999 I used it.

[Maniyac007]

Tinkernut vs Nigahiga :D

[neddyynet]

he is mostly wrong but still has the correct idea and a good video

[TheWilliamMaster]

at least i use gmail :)

[XANDERXXZ]

27,561 people now know how tho hack facebook thanks to gigafide. Thanks gigafide :)

[zik1zik]

Hi I love your channell

[Fulatict]

lol people in starbucks probably are like "WTF?"

[tjl1297]

good thing i NEVER use the internet in public

[Luiji99]

@alister113 thanks that's what I thought. The video just made it seem like Firefox was the only browser that had the problem, which didn't make much sense. I see now that he meant FireSheep is a Firefox addon.

[mariosunshinefaan]

i assume that you made this video to help people to protect themselves, but i think you just got a bunch of "wannabe-hackers" to try this out...

[TheBeeFart]

@mariosunshinefaan well hackers gonna hack ?

[thunderstorm01268]

does firsheep work on tumblr?

[bbbbweb]

@thunderstorm01268 yes, unless tumblr uses h tt ps (i can't type it as one word)

[CodeRedCardinal]

2 people got hacked

[gmax341]

What if i share my wifi connection with my neighborhood? Can they still be able to hack my facebook?

[tikterd12345]

@gmax341 yes

[alister113]

@gmax341 yes if they have firesheep on their computer and know how to use it they can connect to you, or you can connect to them and access their facebook or similar things :)

[Luiji99]

I'm apl for Option 3 (don't use public wi-fi), but out of curiosity, why do you say only Firefox has this problem? Your description implies it would effect other browsers too.

[tikterd12345]

@Luiji99 because firesheep is an addon for firefox and doesnt work on any other browser

[alister113]

@Luiji99 I think this is what your on about: If you use firesheep can it get info from other browsers like safari, Internet explorer and Opera ?

The answer is yes because all of those are internet browsers not completely different "Internets" because if there were people who use firefox, safari or others there would have to be a different website for each browser, exactly the same as the one for the other browser (if you understand what i'm on about).

[cheatdude555]

they can also use it to hack your youtube and email too.

[5dstrix]

well done man, thanks for the info

[themarinesemperfi]

lol

[neerdy5]

I like the humor in this one.

[Jakkinator45]

im off to the library!

[Jakkinator45]

dosent it use ddos?

[WacKEDmaN]

what a great reason to stop using facebook!

unencrypted cookies is just stupid....

anyone who uses facebook deserves any bad crap that comes their way...

FACEBOOK is evil..wake up and smell the sh!t!

[vistagame]

the 2 dislikes are hackers

[jezx21]

can this site be used to extract bank information?

[darkdylaner]

@jezx21 No. When Firesheep picks up a cookie, it can only use it, not extract the information inside. So when the cookie is making it so you are logged into facebook, Firesheep is using the same cookie to let someone else log in to facebook as you, but it doesn't extract your password and username from the cookie. 

[eatincupcakes123]

hey if you read your comments please answer this question. Can you make a vid on how o dds?

[gaming1chair]

Use a mifi wireless

[thecubanmann]

hhtps is the condom of the internet

[Cyper51]

SENSI :D

[IzelloAoM]

So you need firefox to have this hacking plug-in but does that that mean your safe

when you use chrome or no

[darkdylaner]

@IzelloAoM The extension is for firefox only. It lets you pick up cookies sent from a computer over public wifi, no matter which browser sent the cookies.

[Winnman05]

Isn't an exploit anything that takes advantage of the way something normally works for malicious purposes?

[skaman125]

Does the same go for using a twitter client on an iPod touch/pad?

[jahaines579]

theres another one called black sheep for firefox which will prevent it

[kidnaper93]

how do you know about all of this information your what is your did you study in unverscity??

[theaznvincent]

"like" this comment if you LAWLED when gigafide said all u hacker wannabes out dere

[alpha12orc]

would you say this is similar to wireshark?

[snippa1ps3]

please help every time i install it and restart firefox it just says to restart it everytime :(

[sdschramm]

Or, use BlackSheep

[forid200]

is it possible to track a mobile phone?

[snippa1ps3]

i downloaded it but cant get it to work please help i thought it was meant to say like start capture or something but mine doesnt it just freezes most of the time

[snippa1ps3]

hacker wanna be's ;}

[lenoat702]

will firesheep work on a wierd network?

[EdwhinFilms]

Lol the beginning was epic xD

[ArturoVergaraM]

"I can see all you hacker wanna-be's rushing right now right over there..." hahahahahahahahaha

[SystemOfAtte]

What about if you use Opera's Private Tab?

[h0len]

nice now i can f*** with my friends, by logging on to their facebook and asking chicks for bj's xD

[8terabytes8]

we cant see ur website securely cuz u dont have an ssl certificate

[xKappash]

Gigafide, if I use the campus wifi connection, which has a WEP key, will I still be in danger?

Thanks!

[stefeman1993]

Hey gigafide, ive been watching ur vids from shadows, however i wish to correct you with "secure" firefox addon, that facebook chat seems to be blocked or broken with that addon. so you cant use the chat, theres a yellow triangle with screamo mark on the place of chat button

[mhaidarhanif]

actually, it's NOT a hacking program.

[unknownmovement]

1:20 nice use of paint ;)

[channingarachanninga]

@ 1:27

i think the data be hacked after it back from server not  from you

why that didn't occur @ wire network ?

[bladesman123]

you are ace man, thanx

[TheBackFLipMNM]

thnx dude! but i can't chat ;@

[autumnpixiedust]

simlalarrly LMAO... wait a minute..what do u mean "firesheep recommends fire shepherd",they created it and teach us how to prevent our account being hacked into? why do they even create firesheep in the 1st place? 

[moganam1]

Hey Gigafide can you tell me how to reduce size of a videofile.

[moganam1]

Hey Gigafide can you tell me how to reduce size of a videofile.

[NickIsOriginal]

What if i used chrome?

[JTidler]

@NickIsOriginal ima hack you]

[Boonchocks]

Good! I like to see Daniel act with personality and show his personality. He is funny and that makes his videos better. They just keep getting better and better and better and better! If this keeps up Discovery channel will just have to give him his own show or something kind of segment of a show at least. I used to not like Rodney Reynolds as much until he started doing his own live show. Now that you see his personality, it gives him a lot more depth.

[Boonchocks]

Hell ya!!!!

Daniel don't stop and he don't quit!

[sectorcomment]

How about using Hotspot Shield? Does it give more protection?

[Randomstand]

Fireshepperd is actually a false sense of security because it does not block firesheep like SSL would. It just confuses the hell out of it.

[Warstormed]

I wanted to use firesheep to get my mom to stop snooping around of my stepdads (got divorced) email account, but it wont work on an encrypted connection. Any ideas?

[testrider78]

What could be the reason Facebook gets hacked on a computer not on wifi? I have a lot of family members getting hacked.

[Randomstand]

@testrider78 Viruses from them clicking links on facebook they shouldn't be. Or rouge applications.

[superant10000]

This is called session hijacking, and firesheep is a lame-ass excuse of a session hijacker. Professional wireless attack software will lock sessions as well and automatically decrpyt hashes/salts (if you know how to find out encryption types and salt placement).

I liked the part about the newfags all running for this software though xD

[Randomstand]

@superant10000 The point of firesheep was not to give people a new tool to hijack sessions. The point of it was to show big name websites how insecure their sites actually are.

[superant10000]

@Randomstand Well it really only exposes how insecure wireless is, not a website.

You can't session hijack if you use secure html, and it's your choice to do that or not when using wireless networks.

Besides, no-one can steal your password because of the encryption & salt used, so it's up to the user to be smart or not.

[James92802]

If you use your laptop on a common connection - change your password on log out?

[hax0rz100]

FireSheep won't work with my version of Firefox :(

[TheStupidMovies]

Well you can't blame firesheep. I don't blame it for stealing cookies. They're tasty. Do not reply to this and call me a dunce or anything becuase it's a joke for all of you out there wothout a sense of humor

[MrStrykerDJ]

Does this affect iPhone/iPod touch?

[coolfreak1mannan]

can u tell us how to steal it, instead of protecting it

[fatzy9ttuts]

Didn't house hold hacker did this

[jonathan4171]

AWESOME VIDEO

[gigafide]

@forid200 i never said that firesheep gives them your password.

[forid200]

@gigafide i heard from other people i never said that you mentioned in the video that it gives the password any way great video's keep it up!

[iDevang]

@gigafide you could go into account setting and change it though?

[Saaaataan]

I wish people would shut the fuck up correcting gigafide, just sh.

[maylortaylor987]

Thank you so much for this, I live on a school's campus and honestly have skiddish about checking Facebook for this simple reason.

My question though is, Can someone use FireSheep to find your password through a smartphone?

[desperadosmedia]

@maylortaylor987 It seems pretty resonable because phones almost always use Wi-Fi connections so watch out but im not a computer/internet genius so i dont really know (:

[mdedmon]

1) NOT an exploit. It's how the session is created. Anyone using basic utilities can capture this information.

2) It's a plug-in for firefox that allows anyone to capture and impersonate another users's cookie.

3) Cookies contain session information only. No username/passwords, but you can impersonate someone to get into their account. TW & FB are great examples, but it can be ANY session that is NOT encrypted.

All Cookies should be encrypted. Plug-in was created to show this weakness.

[gigafide]

@mdedmon i'm not sure that u know what an exploit actually is...cause this is a textbook example

[JTidler]

@gigafide u know shit

[gavinlloydbaker]

Yeah.... Another person covering Firesheep... Thanks alot.

Thanks for telling yet more wannabe script kiddies about this exploit, as if there wasnt enough already.

And you even included a link! You didnt even make them google search!

[mradval]

Gigafide, can you make please a tutorial video like : how to download windows xp free and put into a cd?Have a wonderful day ! Thx for all the videos!

[sashablfc]

@mradval i could do that for u if u wont ?

[experimental0000]

great vid and extremely helpful. definitely liked and favorited in order to keep as a reference

[klaboem0]

I wouldn't say it's a Firefox exploit, its more a SSL login on the pages you mentioned like Facebook.

[gigafide]

@klaboem0 firesheep is a classic textbook example of an exploit. It exploits the session connection issues with facebook, twitter, etc. If you read the creators blog (at codebutler), he even calls it an exploit. It's getting slightly annoying to see how many people depend on Youtube comments to make themselves look intelligent.

[klaboem0]

@gigafide I don't want to look intelligent at all. At 0:05 you clearly say "Firesheep is a FIREFOX exploit" which is completely wrong. It's a SSL login problem on websites like Facebook and Twitter. It has nothing to do with Firefox.

[gigafide]

@klaboem0 oh ok, it seems like you just got confused by my wording. it's an exploit that runs on firefox (it's a firefox only extension). it's not an exploit for firefox itself...it can sniff the packets no matter what browser it comes from.

[XanALaOM00]

@klaboem0 I don't disagree with what you are saying... the real question is.... why are these social sites so stupid when it comes to security? I mean seriously.......... Think about this for a second; why? this is simply a gold mine for sniffers; of course the next level would be a man-in-the-middle-attack which would make all data in plain sight using fake certificates; but it would at least dissuade the noobs from sniffing for crying out loud.

[zille3000]

gigafide you are wrong. In the Cookie only are the session number, so that the server remember to you. these session are combinated to a account on facebook. so firesheep only clone the session id not the password!!!

[JOHNLOBO789]

@zille3000 DONT TRY TO TEACH GIGAFIDE

HE IS MASTERMIND

[zille3000]

@JOHNLOBO789 sorry, but every one can be wrong. It's not a problem.

He know a los of computers and I too. He make his videos and I make my vid. if anyone is false the community can teach him

[JOHNLOBO789]

@zille3000 OK BRO DONT GET HEATED BEEEEEEEEEE COOOOOOOOOOOOL

[TarikProductions]

@zille3000 yes.

[gigafide]

@zille3000 the cookie stores website authentication, which requires the username and password. i never said that the username and password could be stolen from the cookies. 

[zille3000]

@gigafide ok it's an argument. you right

[jesperq8]

DUDE dont tell ppl how to protect them selfs!

[RockGodFuck]

@jesperq8 Couse you are the 1337 Hackzooor who uses this, to raise your self-esteem ? haha

[Techipedia]

eh' nice video!

[Pamgin]

Anyone else planning to go to the library now?

[bergi85]

If you logout after using Facebook the session cookies wont work anymore. And whoever had access to your Facebook will have to login with the right credentials. Most people just close their browser or sleep their computer. So ALWAYS logout. Just my two cents.

[RichardULZ]

@gigafide the subscription box is glitching badly would you have alternatives we could use?

[sileysut8991]

Stupid firesheep

Cain And Abel is easier to use And better

[BannedHack]

@sileysut8991 can u send me a link. =D hahaha

[MegaWaxz]

Your upper shelf to where your sub-woofer was sitting on was really dusty.

[1800Supreme]

can i get hack the same way if iam using google chrome

[RichardULZ]

@1800Supreme yes

[lewiszim]

@melvinromeroreyes haha, my desktop has the same one too.

[ZoNKeDcoCtAiL]

love ya gigafide!ya show us so much!i love the way of ya presentation thats why GIGAFIDE IS BETTA THAN THAT KIPKAY

[fhunkydelix]

This is why Firefuks is dead

[maverix26]

Firesheep System Requirements

Firefox: 3.6.12 or newer. 32-BIT ONLY.

FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF­FFFFFFFFFFFFFFFFFFFFFFFFFFFFFU­UUUUUUUUUUUUUUUUUUUUUUUUUUUUUU­UUUUUUUUUUUUUUUUUUUUUUUUUUUUUU­UUUUUUUUUUUUUU

Haha, great video, thanks gigafide :3

[Lineriderrocks123]

How about in school? You're fucked in the ass if you don't know how to encrypt the data.

[narutorine]

Nice video keep up the good work :)

[teckguytales]

is this only for facebook or any website?

[thegr81337]

hahaha, even if the topic doesn't apply to me (i use Chrome) i know i can at least get a good laugh out of the video.

"... Alright, that's just dumb..." XD

[RichardULZ]

@thegr81337 all browsers are effected by fire sheep

[thegr81337]

@RichardULZ oh, ok, i had come under the impression it was only firefox that was affected. 

[thisweekinlinux]

Nice video. Just goes to show, again, the most insecure part of any system is the user. :P

[miketaputo]

i know it , every that i knew !!

but there are software than block firesheep!

[20MDM]

STARBUCKS HERE I COME!

[MrApplseed]

I believe their called, "Skiddies"

[Renuzitus]

@MrApplseed There is a difference between There, Their, and They're.

[dboy11368]

@MrApplseed wow, they merged script kiddies? man, i'm really behind on slang these days.

[arleslie]

Apparently YouTube didn't like my comment, but I just have two words "SSL STRIP"

[abey34]

does fireshepard protect against google chrome?

[thegr81337]

@abey34 from what i understand (just from the vid) this only affects Firefox, so Chrome should be safe... from this specific exploit that is.

However, no browser is really "safe" on an unsecured, public network.

[RichardULZ]

@thegr81337 nope it hacks a few more sites and any browser can be hacked

[gigafide]

@abey34 yes it should, since it's a console program and not browser specific. Any web browser is subject to the Firesheep attack.

[TheSwitijs]

@gigafide actually your wrong!

Whatch this youtube video from housholdhacker

youtube(dot)com/watch?v=9T8xaD­oYNmg

[cippycreations]

@abey34 use firefox for more security and so ur not dosing fb

[cippycreations]

@abey34 use firefox for more security and so ur not dosing fb which 4 one person doesn't do shit but still.

[cippycreations]

there are other programs that can do the same thing this is nothing new, but it great to spread the awareness

[TheDarkrai492]

Damn thats scary

[pjwithbread8]

firesheep is just a nice graphical way to sniff packets. this was possible to do with wireshark and other programs that sniff packets, since as long as I can remember.

[starfoxfire2006]

11th!

[starfoxfire2006]

first !

[tomguy480]

lol I was first by 1 second

[tomguy480]

8th

[frediiee]

8th !!!!!!!