Correct, but at the time of this release many websites (including GMail and Facebook I believe) did not and were vulnerable to Firesheep. The title of this post should be updated to reflect the 2010 posting.

I believe so.

I still remember being in the local uni's lab over wifi and firesheep had ~80 entries for facebook/gmail/etc. Click a profile and hijack their session.

Yup. I was confused as to why Firesheep was resurfacing today.