6 ms·
> Firesheep showed MITM over HTTP to be trivially easy. Firesheep does not perform MITM attacks (the media made this mistake too). It catches sessions out of t
by jedsmith 16y ago
> Firesheep showed MITM over HTTP to be trivially easy.
Firesheep does not perform MITM attacks (the media made this mistake too). It catches sessions out of the air and impersonates them, which is session hijacking.
As you wrote yourself, a man in the middle attack makes the victim think he is communicating with the far end; Firesheep doesn't involve the victim except to catch his packets.