Firesheep & Class Action
It’s odd/scary that I need to use my Verizon Aircard instead of the free, fast open wireless in the coffee shop I’m at.
It’s become way too easy (thanks to Firesheep) for someone to steal my session/account/identity in Gmail, Tumblr, or anything else I use. This is mildly annoying for me, but more importantly, it’s crazy irresponsible on a large scale.
Here’s the bottom line, if you provide a web service and expect someone to create a password (Facebook/Gmail/NYT), you *REALLY* should force SSL. If you don’t, you’re asking for it.
Anyone want to guess on timing for the first big class action lawsuit against the likes of Google/Facebook for failing to protect against identity theft? I’d say within a year.
