Zscaler today released “BlackSheep,” a plugin for Firefox that helps end users identify usage of FireSheep, the controversial Firefox extension that makes it dead simple to tap into someone’s social networking and email accounts (and many others) by “hijacking” user sessions while connecting via unsecured wireless networks.
“We essentially used Firesheep against itself to combat the threat it poses,” said Julien Sobrier, senior researcher at Zscaler Labs and developer of the new BlackSheep plugin. “In fact, BlackSheep leverages much of the Firesheep code, but the twist is that rather than being used to hijack sessions, it instead detects when a session is being hijacked and alerts the user.” Once the user becomes aware that they have a “visitor” they are advised to log out immediately and stop using the network, he advises.