A new tool for “sidejacking” hijacking is a Firefox extension called Firesheep. The tool takes advantage of websites that don’t SSL-encrypt logins, so when a user visits Facebook, Twitter, Hotmail, or YahooMail, his cookies can be lifted and used by an attacker on the WiFi network to take over his account. “Everyone has been able to hack into cookies forever. But it’s never been so easy, and [with] graphics,” says a security expert with Sophos.”]