PUBLIC MARKS with tags firefox & securite

At the Toorcon 12 security conference, Eric Butler released a Firefox plugin named Firesheep, which drew significant media attention. Firesheep allowed any user to seamlessly hijack the web session of another user on the same local network. Although such attacks are not new, the ease of use presented by Firesheep brought session hijacking to the masses. BlackSheep, also a Firefox plugin is designed to combat Firesheep. BlackSheep does this by dropping ‘fake’ session ID information on the wire and then monitors traffic to see if it has been hijacked. While Firesheep is largely passive, once it identifies session information for a targeted domain, it then makes a subsequent request to that same domain, using the hijacked session information in order to obtain the name of the hijacked user along with an image of the person, if available. It is this request that BlackSheep identifies in order to detect the presence of Firesheep on the network.

HTTPS Everywhere is a Firefox extension produced as a collaboration between The Tor Project and the Electronic Frontier Foundation. It encrypts your communications with a number of major websites. Many sites on the web offer some limited support for encryption over HTTPS, but make it difficult to use. For instance, they may default to unencrypted HTTP, or fill encrypted pages with links that go back to the unencrypted site. The HTTPS Everywhere extension fixes these problems by rewriting all requests to these sites to HTTPS.

désactivation des "agents" intégrés

Permet de désactiver le Javascript globalement et de ne l'activer qu'au coup par coup uniquement pour les sites de votre choix. Cela accroît fortement la sécurité, de nombreuses failles provenant de javascript. Vous pouvez également autoriser le javascript globalement et ne l'interdire que quand vous en ressentez le besoin, mais la sécurité est alors diminuée.

"...a method for encrypting RSS feeds with Blowfish, and for decrypting them on the fly using Greasemonkey...".