A collegue and I have been asked to do a demo where we show off stealing Facebook sessions with Firesheep. I've never used Firesheep before myself, but I reckon it should be a simple task.
I know the demo will raise a lot of eyebrows and many will be actually scared knowing they are using an open wireless network every day with their cellphones (won't go into any more details on this, but its a fact).
Does anyone have any recommendations on what types of questions I should be prepared to answer? Anything in particular I should show in the demo, except just showing I'm logged in as the demo user?
What about MSN traffic... Is it possible to demo sniffing a MSN conversation as well?
What about securing against this? The users will still be using the open wireless. Is the only way of securing yourself by using a VPN to a secure connection?
EDIT: I know firesheep does not capture MSN conversations. Anyone got any recommendations on a tool which could demonstrate this?