Recently while doing some developing a proof of concept to exploit a weak authentication system on a wireless network I found the following major security vulnerability in Firefox. Situation: User is at a http page with a loggin form which has a https post back address (like facebook). In this case though the certificate on […]