An American software developer has released a Firefox extension that makes it frighteningly easy access to other user accounts on Facebook, many mail providers and Co.. At least then if they log the user on a public WLAN. That public, unencrypted WLANs (hotspots in cafes, universities, libraries), a haven for spies data are, as far as anything new. So far, for the interception of data but at least advanced skills and complex-to-use tools such as Wireshark necessary.

The American software developer Eric Butler now has the Firefox extension Fire Sheep programmed that is so simple that even novice users about foreign accounts can take control of it. Butler would like to point out the dangers of public, unencrypted wireless networks in conjunction with inadequately secured web services.

Even user name and password at login can be transmitted encrypted, shared a third in many cases, such as the Facebook or e-mail account of another user, while it is logged. Because after the login web services typically generate a session identifier that is stored in the Web address or a cookie. Because they recognize the logged in user again if he changes within the service from base to base.

Fire Sheep specializes in meeting the congratulatory graphic identifiers popular web services. The add-on, it displays in the left sidebar. Clicking on any of the session - and one is in the account of another user who just surfs the same unencrypted WLAN. This Fire Sheep work, you must install the Windows driver package recording Winpcap. The author would like the Firefox extension but do not warn against the risks, but bring particular for operators of unsafe web services to put on end to end encryption (Full SSL).