@John Pratt - It's worth noting that theft of your password isn't the problem here. It's theft of cookies. Firesheep doesn't grab your password going over the wire, it grabs your authentication cookie and lets the attacker easily duplicate it, thus pretending to be you.