Here’s the deal: big sites like Amazon and Facebook have a problem, and it’s one they all know about and haven’t bothered to fix. When you first log on to Facebook and enter your password, it’s encrypted. No one can see it. However, AFTER you log on, Facebook and your computer exchange a little piece of code, called a cookie, that allows them to recognize each other so you don’t have to keep logging on. That’s fine if you’re on a private network, but on public wi-fi it’s broadcast over the network for all to see. Firesheep grabs that piece of code and allows anyone with the program complete access to your computer. David Butler’s goal here was to force major companies to fix this issue. Only time will tell if his plan worked, but in the meantime here’s how to keep your information safe:
Don’t do anything that requires a password when you’re on public Wi-Fi. If you have no choice, only enter financial information on sites that have full end-to-end encryption. You can tell you’re on a secure site if the address starts with HTTPS. It’s got to have that S on the end; otherwise your data is flapping in the wind.