New Phone App for Android Makes Stealing Sessions Easy

Date: 2011-06-02 19:48:02

There's a new Android Phone App for stealing your facebook, twitter, Amazon and other web sessions. It's called FaceNiff. The scary part of this is it works on secured WiFi Networks, not just open ones.

This YouTube video shows how it works:

How can you protect yourself?

You can also ensure that you only use secure sessions to access web apps while on public WiFi networks. The most secure way is by using VPN or some similar service. See http://www.healthypasswords.com/ThirdPartyRatings.html#vpn for more details on VPN. This utility will not work if the WiFi network is configured for WPA/EAP, but EAP is more commonly used in business WiFi.

If you have your own home or small business wifi using WPA/2, only a person with the shared key has the ability to use this utility. Someone walking by cannot steal your session without the WPA key.

Category: WiFi

Subcategory: Mining