Pages

123

Showing posts with label Facebook. Show all posts
Showing posts with label Facebook. Show all posts

December 29, 2010

Hack Facebook/Twitter Or Any Email Account With Session Hijacking

When logging into a website you usually start by submitting your username and password. The server then checks to see if an account matching this information exists and if so, replies back to you with a "cookie" which is used by your browser for all subsequent requests.

It's extremely common for websites to protect your password by encrypting the initial login, but surprisingly uncommon for websites to encrypt everything else. This leaves the cookie (and the user) vulnerable. HTTP session hijacking (sometimes called "sidejacking") is when an attacker gets a hold of a user's cookie, allowing them to do anything the user can do on a particular website. On an open wireless network, cookies are basically shouted through the air, making these attacks extremely easy.
This is a widely known problem that has been talked about to death, yet very popular websites continue to fail at protecting their users. The only effective fix for this problem is full end-to-end encryption, known on the web as HTTPS or SSL. Facebook is constantly rolling out new "privacy" features in an endless attempt to quell the screams of unhappy users, but what's the point when someone can just take over an account entirely? Twitter forced all third party developers to use OAuth then immediately released (and promoted) a new version of their insecure website. When it comes to user privacy, SSL is the elephant in the room.
Firesheep, a Firefox extension designed to demonstrate just how serious this problem is.
After installing the extension you'll see a new sidebar. Connect to any busy open wifi network and click the big "Start Capturing" button. Then wait.


As soon as anyone on the network visits an insecure website known to Firesheep, their name and photo will be displayed:



Double-click on someone, and you're instantly logged in as them.



That's it.
Firesheep is free, open source, and is available now for Mac OS X and Windows. Linux support is on the way.
Websites have a responsibility to protect the people who depend on their services. They've been ignoring this responsibility for too long, and it's time for everyone to demand a more secure web. My hope is that Firesheep will help the users win.
By Codebutler..

December 28, 2010

::Facebook Emotions ::

Here are some emotions u can use while chatting on Facebook :


Firefox Addon For Easier Web Designing -"FIREBUG"

Firefox has become the everyday source to open the webpages and its competing Internet Explorer by providing greater and usful means by which the users can make their work easier through Firefox addons.

One such good add on which can make the work easier for the web designers is Firebug.Firebug Firefox Addon is a web development tool which will sho the CSS,HTML & JavaScript of the any website that you are browsing.More precisely if you select a line in the webpage it will also show the respective coding of that segment selected.With this plugin you can edit,debug and monitor CSS,HTML in any webpage.


Firebug open a seprate window or a bar at bottom of your browser and it gives fine-grained control over which websites you want to enable for it.

The following are the others advantages of using Firebug:

Peak into CSS Metrics
Used to measure & illustrate all the offsets,margins,borders,padding,and size of the CSS metrics which are not visible by the naked eye.


Monitor Network Activity
If the page taking time to load which maybe due to large images or JavaScript codes or partner's ads,you can go through each of the files and monitor which is taking more bandwith and so its taking time to load.




Quickly Find Errors
Firebug lets you know what errors are present on the web page and quickly let your fix it when you understand it because its easy y fix error once you get the actual problem.

Get it now:Firebug