[Security] Faceniff Can HiJack Unencrypted Facebook, Twitter, & YouTube Logins

[dgstorm]

Here's a story that we want to be cautious in posting as it could be used to nefarious effect. But, we also felt it was important to inform you guys so that you can be armed with enough knowledge to watch out for this kind of thing. Apparently, there is an app called Faceniff that allows you to login to another person's Twitter, Facebook and YouTube accounts if they login on a shared WiFi network without SSL encryption. This is a serious security issue that people need to be aware of. We aren't going to post any descriptions of how to do it, or links to the app, obviously. One of the easiest ways to avoid this being a problem is to switch to an HTTPS connection on the web services that support it, like Twitter and Facebook. Also, it's not a bad idea to try and be aware of who is around you while you are on a public WiFi. The use of this app is probably illegal in most countries.

Source: PhanDroid

[Ads]

Android.net is the premier Android Forum on the internet.

[SLAG IT!]

I agree that it's a security issue. People need to be made aware and how to safeguard themselves. See if maybe create an app that blocks this app.

[furbearingmammal]

The following is sarcasm.

Facebook has a security problem? HOLY CRAP! I'VE NEVER HEARD THAT BEFORE!!!!

/sarcasm

[SLAG IT!]

Number one hacked website.
I get a rash just thinking about all the security leaks and loopholes in the social networks.

[furbearingmammal]

I still don't know why people use Facebook. Farmville and Cafeville aren't that great, and the rest of the experience is sub-par. And this is coming from a former Facebook users, back before it exploded in popularity. And I'm not saying it because I had a woman go psycho on me there.

[SLAG IT!]

Who knows. They could just buy railroad tycoon for their PC or some other game. Also, why put on Facebook that your leaving town for couple weeks and display pictures of all your expensive things in your house? I have one word for you... burglary

Anyone wanting to steal from you now has when your leaving, when your arriving, what's in your home, if you have a dog, an alarm, and many other different things. How about the fact your information never disappears and can be used by companies your applying to can use this information to deny your getting hired.

[furbearingmammal]

Please Rob Me Nuff said.