Lockup Your Facebook

Not sure how I missed this but Facebook has enabled the ability to secure your browsing sessions with HTTPS.

Unfortunately, they've hidden this setting deep within the interface. Funny that when it comes to exploiting our privacy, those items are turned on by default. Something that increases security, gets buried.

Why does this matter?

When you're browsing web pages that are not secured with https, it's easier for someone to "evesdrop" on your session, see what your browsing and collect your passwords. (Check out Firesheep on Wikipedia for more info.)

Accountsecurity
Here's what to do to enable HTTPS:

  • Click Account then Account Settings
  • Click Change next to Account Security
  • Select the checkbox next to Secure Browsing (https) and you're all set.

Accountsettingshttps

Posted