Guymon

Better Privacy

Vor kurzem wurde bei Security Now auf das Firefox Plugin Better Privacy hingewiesen:

Better Privacy serves to protect against not deletable longterm cookies, a new generation of ‘Super-Cookie’, which silently conquered the internet. This new cookie generation offers unlimited user tracking to industry and market research. Concerning privacy Flash- and DOM Storage objects are most critical.
This addon was made to make users aware of those hidden, never expiring objects and to offer an easy way to get rid of them - since browsers are unable to do that for you.

Flash-cookies (Local Shared Objects, LSO) are pieces of information placed on your computer by a Flash plugin. Those Super-Cookies are placed in central system folders and so protected from deletion. They are frequently used like standard browser cookies. Although their thread potential is much higher as of conventional cookies, only few users began to take notice of them. It is of frequent occurrence that -after a time- hundreds of those Flash-cookies reside in special folders. And they won’t be deleted - never.

Interessant wie viele LSOs sich angesammelt hatten.

Session Hijacking mit Firesheep

Das Firefox Plugin Firesheep demonstriert wie simple Session Hijacking ist.

After installing the extension you’ll see a new sidebar. Connect to any busy open wifi network and click the big “Start Capturing” button. Then wait.

As soon as anyone on the network visits an insecure website known to Firesheep, their name and photo will be displayed:

Double-click on someone, and you’re instantly logged in as them.

via codebutler

Google Sharing

Mit dem Firefox Plugin Google Sharing und dem GoogleSharing Proxy kann man den Datenhunger von Google ein wenig aus dem Weg gehen.

GoogleSharing is a special kind of anonymizing proxy service, designed for a very specific threat. It ultimately aims to provide a level of anonymity that will prevent Google from tracking your searches, movements, and what websites you visit. GoogleSharing is not a full proxy service designed to anonymize all your traffic, but rather something designed exclusively for your communication with Google. Our system is totally transparent, with no special “alternative” websites to visit. Your normal work flow should be exactly the same.

HTTPS Everywhere

Das Tor Projekt und die Electronic Frontier Foundation haben gemeinsam das Firefox Plugin HTTPS Everywhere entwickelt:

Many sites on the web offer some limited support for encryption over HTTPS, but make it difficult to use. For instance, they may default to unencrypted HTTP, or fill encrypted pages with links that go back to the unencrypted site.

The HTTPS Everywhere extension fixes these problems by rewriting all requests to these sites to HTTPS.

FireGPG: GnuPG im Browser

FireGPG erlaubt es aus Firefox heraus auf GnuPG zuzugreifen:

FireGPG ist eine Firefox-Erweiterung unter der MPL (Mozilla Public Licence), welche eine integrierte Schnittstelle bietet, um GnuPG-Operationen auszuführen auf den Text jeder beliebigen Webseite, inklusive Ver- und Entschlüsselung, Unterschreiben und der Verifikation von Unterschriften.