Of the major webmail providers in the U.S., only Gmail is secure against sidejacking attacks. Yahoo Mail and HotMail are insecure, and can be compromised quickly. There are still a lot of HotMail users out there -- they are fools.
I talked to the people at Microsoft responsible for fixing this problem ALMOST THREE YEARS AGO. Yet, they've done nothing about fixing this huge hole. I just tried it out today -- while FireSheep looks a bit funky (it doesn't correctly show the user name), it easily hacks into HotMail accounts.
6 comments:
I use Thunderbird to download and read my gmail. Does this mean I am subject to hijacking even though gmail is secure?
Larry,
Gmail has the option to use POP3 and SMTP with SSL/TLS encryption. I would highly recommend that you enable these features in your email client.
Post a Comment