On 11/04/2010 01:09 PM, Charles Curley wrote: > I haven't seen any discussion of FireSheep here. > > http://www.charlescurley.com/blog/archives/2010/11/04/bringing_in_the_sheep/index.html > Interesting. How is it that facebook credentials are being sent in the clear? Or is this just a matter of hijacking a non-SSL session?