“For anyone who has SSH access to a server (but not VPN) and is wondering what to do” (comment)
recommended by 1 user | 2010 | gaoshan on: Firesheep: Easy HTTP session hijacking from within Firefox | networking | original thread |
gaoshan on Oct 25, 2010 | on: Firesheep: Easy HTTP session hijacking from within Firefox | view on HN

For anyone who has SSH access to a server (but not VPN) and is wondering what to do when you need some security in a pinch, here is a quick fix...

Open an ssh connection to a server you have access to using something like the following:

ssh -ND 8887 -p 22 rufus@12.120.186.8

where 8887 is the port on your laptop that you will tunnel through, -p 22 is the port the ssh server is on (22 is the default but I use a different port so I am used to specifying this) and the rest is your username and the address of the server

Set your network to point to the proxy. On a Mac that would be…

... Open Network Preferences…

... Click Advanced…

... Click Proxies…

... Check the SOCKS Proxy box then in the SOCKS Proxy Server field enter localhost and the port you used (8887)

... OK and Apply and you are done!

Now you can surf safely.

One user recommended this comment. What they said:
jazzyb Oct 25, 2010 | on: How To Protect Your Login Information From Firesheep | context

However, ForceTLS will only work if the server supports HTTPS.

IMO, a better solution is that of a SOCKS proxy as outlined in this comment: http://news.ycombinator.com/item?id=1828631

Using ssh as a SOCKS server has the added benefit of tunneling all traffic securely, not just that of Firefox.