Firesheep is a tool to enable the easy theft of credentials. If you think it's legal, I don't know what to tell you. The thing about Firesheep is that it is in

Firesheep is a tool to enable the easy theft of credentials. If you think it's legal, I don't know what to tell you. The thing about Firesheep is that it is inherently difficult to figure out which of the 30 people in the coffeeshop hijacked your session. It's not exactly as if they have a separate IP or something. Just because it's hard to get caught doesn't mean that it's okay to do, though.