Top all-time · #3460
codebutler
Personal blog · codebutler.comsecurityprogramming
codebutler is a personal blog at codebutler.com about security and programming. Since 2010, 22 different Hacker News readers have linked it 32 times, most often “Firesheep: Easy HTTP session hijacking from within Firefox”. The last post was in 2016, but the archive is still widely read.
Too few sampled comments (17) to say how often HN recommends it.?
Why HN links it
HN readers link this blog as the source on Firesheep, the 2010 Firefox extension that showed how easily session cookies on open networks could be hijacked, and its effect on HTTPS adoption.
Summarised by Claude from a sample of 17 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Firesheep: Easy HTTP session hijacking from within Firefox6 people · 6 mentions · first linked 2010-10-25
- Firesheep5 people · 5 mentions · first linked 2013-01-20
- Firesheep (2010)4 people · 4 mentions · first linked 2019-11-02
- Configuring a usable Android emulator2 people · 2 mentions · first linked 2012-10-10
- Firesheep, a week later: Idiot Shepherds2 people · 2 mentions · first linked 2010-11-04
What Hacker News says?
Remember FireSheep ( https://codebutler.com/firesheep )? No one cared about HTTPS for years. Then one simple app and the entire industry woke up.
Comment linking /firesheep
on “LocationSmart Leaked Location Data for All Major U.S. Carriers in Real Time”Submitted Firesheep: Easy HTTP session hijacking from within Firefox as a story · 714 points
HN discussionLatest firefox tells me that site http://codebutler.github.io/firesheep/ is unsecure got there from official blog https://codebutler.com/2010/10/24/firesheep/ Maybe force https when requesting http ? https://drive.google.com/file/d/1maSpqYfFoBoCyao14VKzLKPMlm9...
Comment linking /2010/10/24/firesheep/
on “Encrypted web traffic now exceeds 90%”Submitted FareBot: Read data from public transit cards w/ your NFC-equipped Android phone as a story · 102 points
HN discussionThanks! That was the goal. For those who aren't familiar, the original slides and our response blog posts are still up: https://codebutler.com/projects/firesheep/
Comment linking /projects/firesheep/
on “Encrypted web traffic now exceeds 90%”Submitted Firesheep, a day later as a story · 77 points
HN discussionFYI if you're still looking into this, this comment helped me http://codebutler.com/firesheep#comment_5843350 I have filevault turned on. Moving the binary out of my home folder (and adding a symbolic link) solved the problem.
Comment linking /firesheep
on “Firesheep: Easy HTTP session hijacking from within Firefox”Submitted Configuring a usable Android emulator as a story · 54 points
HN discussionFYI if you're still looking into this, this comment helped me http://codebutler.com/firesheep#comment_5843350 I have filevault turned on. Moving the binary out of my home folder (and adding a symbolic link) solved the problem.
Comment linking /firesheep
on “Firesheep: Easy HTTP session hijacking from within Firefox”Submitted TapChat is mobile IRC done right as a story · 54 points
HN discussionNot the OP but I think I might be able to help. >> I think you're claiming that CAs can present your certs to random clients? This might be an indictment against the DNS system, which directs the clients to an IP address of its choosing, but if the client makes it to your server, your server chooses which cert to present to the client. Here I am fairly confident that he is talking about a situation in which a CA sig…
Comment linking /firesheep/
on “Heartbleed should bleed X.509 to death”Submitted Android Play Store Privacy as a story · 52 points
HN discussionDon't forget to enable GPU Acceleration too. I've posted about this here: http://codebutler.com/2012/10/10/configuring-a-usable-androi...
Comment linking /2012/10/10/configuring-a-usable-android-emualtor/
on “A better Android emulator”Submitted Firesheep as a story · 9 points
HN discussionYep. For further explanation: http://codebutler.com/firesheep
Comment linking /firesheep
on “HN now comes with HTTPS?”Submitted Firesheep, three weeks later: Fallout as a story · 8 points
HN discussion'Packet-snooping attacks are also "extremely rare"' I think they're pretty common, even for fun and recreation ( http://codebutler.com/firesheep ). I know I could start reading people's emails in Starbucks with what's on my laptop now and the knowledge in my head, but if I wanted to mount a MITM attack I would need to do some research.
Comment linking /firesheep
on “The Python Standard Library - Where Modules Go To Die”Submitted NFC on Android goes nowhere in 2011 as a story · 7 points
HN discussion> Why the heck people will continuously give away private information with no safeguard that information will ever remain private in the future, I will never understand I do understand. People don't evaluate risk correctly. They are fundamentally irrational in all sorts of strange ways. Humans have a strong optimism bias[1] so even if they know something bad might happen to some people they know that will happen to…
Comment linking /firesheep/
on “The Creepy Details of Facebook's New Graph Search”Submitted JoinTabs Chrome extension contains malware as a story · 4 points
HN discussionOf course, FireSheep automated this attack in 2010. http://codebutler.com/firesheep/
Comment linking /firesheep/
on “Zuckerberg Expresses Frustration Over Surveillance”Submitted Firesheep, a week later: Idiot Shepherds as a story · 3 points
HN discussionThat's ridiculous. That means that EVERYONE who has used http://codebutler.com/firesheep can go to prison.
Comment linking /firesheep
on “Sarah Palin’s email hacker is imprisoned, against judge’s recommendation”Submitted Firesheep (2010) as a story · 2 points
HN discussionMy thoughts on this: http://codebutler.com/2013/02/13/play-store-privacy/ Although there is a legitimate reason for sharing this information (sales taxes), it is not clearly explained to users or developers and goes against reasonable expectations.
Comment linking /2013/02/13/play-store-privacy/
on “Google 'flaw' puts users' details on display”Submitted Firesheep as a story · 2 points
HN discussionI posted my thoughts on FireShepherd to my blog here: http://codebutler.com/firesheep-a-week-later-idiot-shepherds
Comment linking /firesheep-a-week-later-idiot-shepherds
on “FireShepherd is the antidote for Firesheep hacking mania ”Submitted Firesheep: Easy HTTP session hijacking from within Firefox (2010) as a story · 1 points
HN discussionHmm, probably should have linked to the blog entry directly instead: http://codebutler.com/firesheep
Comment linking /firesheep
on “Firefox extension makes social network ID spoofing trivial”Submitted Firesheep, a week later: Ethics and Legality as a story · 1 points
HN discussion
