Session Hijacking - Man In The Middle
Channel: Scott Helme
Date: 2013-07-28

Read the blog post here: http://scotthel.me/sessionhijacking

In this video I give a brief demonstration of session hijacking and show how that even though a website may load sensitive pages via HTTPS, it doesn't always mean that your data is secure.

Loading any other content via HTTP can expose the user's session ID and allow the session to be hijacked. Once an attacker has control of the session loading content via HTTPS no longer protects the user's data as the man in the middle is now authenticated as the user. 

This is an example of how a poor implementation of TLS (SSL) gives a user the illusion of security but doesn't go the distance in delivering a secure browsing experience.