FaceNiff is an Android application that, much like the Firefox add-on Firesheep, can hijack unencrypted Facebook, Twitter, and even Amazon credentials from other users on the same Wi-Fi network. Unlike Firesheep, FaceNiff also works on encrypted networks (though you will still need to be on the network for the app to work).
The app only works on rooted devices, but that shouldn’t be a problem considering it’s pretty easy to root an Android phone. This should serve as a wake-up call to those out there that access their personal information on unprotected networks, and don’t use encryption protocols like HTTPS.
[via Endgaget]