Facebook - HTTPS

[Chewett]

I spent some time today playing around with Firesheep which was quite intresting. Basicly it hacks into your facebook account by looking at the data passed between your computer and facebook. It only works if you are on the same network and not using HTTPS but when i tested it at a local coffeshop i found a couple accounts of the people using the internet there.

to see if you are protected look at the URL, If it says

[size="3"]http[u][b]s[/b][/u]://www.facebook.com/....[/size]
Then its already secured (https means its secured, it might also have a padlock), But if its only
[size="3"]http://[b][/b]www.facebook.com/....[/size]
Then you are at risk to this type of attack.

[b]I stress that it is only a problem if there are multiple people on your wireless network, But it can be fixed easily so you might as well enable it to increase account security.[/b]

To fix it, Go to:
Account -> Account Settings -> Account Security

And check
Secure browsing (https)
Browse Facebook on a secure connection (https) whenever possible

This will increase your security whenever you use facebook, But it wont help if you accidentally leave facebook open

[b]TL;DR

Goto: Account -> Account Settings -> Account Security
And check
Secure browsing (https)
Browse Facebook on a secure connection (https) whenever possible[/b]

Since i know quite a lot of you use facebook, You might be interested, since it only takes a moment to increase your security.

Edited April 13, 2011 by Chewett

[CrazyMike]

Thanks Chewett.

Very helpful info.

Getting lots of FB hacks in my area.

[Nimrodel]

Thank you Chewy...