Hacker News Reader

Let me tell you an even easier way hack - download Firesheep

Firesheep is just an automated GUI for what we've been doing all along. Ettercap, wireshark, etc are far more flexible and can be used to execute a wider variety of attacks. Firesheep, for example, won't ARP poison on a wired network.

Wireshark won't ARP poison either, afaik.

, etc

I mean, I even explicitly mentioned Ettercap, which does ARP spoof. Is there a way I could have made that clearer?

Maybe it was just late and I was too tired for it to make sense. Sorry.

Try Cain Able, its it probably the best ARP spoofing tool around for pc.

You don't need to ARP spoof on an open wireless network.

But Cain is in my standard pentest toolset for various reasons, not just ARP spoofing.

You don't need to ARP spoof on an open wireless network.

Right... which is why he didn't mention wireless networks...

That's like saying, yes SQL injection is powerful, but it doesn't work on CSRF vulnerabilities -- complete non sequitur.

I am on a unix platform, why should I use Cain Able?

My first reaction is just like that as well. Sorry for the author of that post.

Reply on news.ycombinator.com