Public Wifi - NOT Secure

[Angela53510]

Most of you probably know this already, but for those who like to go to cafés, and use the wifi, here is a warning for you."It is actually quite simple: if you want absolute security, do not connect to a public network. Only a few months ago, the head of Interpol, Troels Oerting, told the BBC: ‘Anything you send via Wi-Fi is potentially at risk’. The Dutch National Cyber Security Centre also advises against making use of public Wi-Fi networks. This means that if you still want to use the Internet while en route, the best thing to do is to make use of mobile data. It is relatively expensive, but worth it."https://decorrespondent.nl/1103/How-to-safely-use-a-public-Wi-Fi-network/33923868-a908f82a"Wouter removes his laptop from his backpack, puts the black device on the table, and hides it under a menu. A waitress passes by and we ask for two coffees and the password for the WiFi network. Meanwhile, Wouter switches on his laptop and device, launches some programs, and soon the screen starts to fill with green text lines. It gradually becomes clear that Wouter’s device is connecting to the laptops, smartphones, and tablets of cafe visitors.""The idea that public WiFi networks are not secure is not exactly news. It is, however, news that can’t be repeated often enough. There are currently more than American adults own a tablet and more than 155 million own a laptop. Each year the worldwide demand for more laptops and tablets increases. In 2013, an estimated 206 million tablets and 180 million laptops were sold worldwide. Probably everyone with a portable device has once been connected to a public WiFi network: while having a coffee, on the train, or at a hotel.""Slotboom’s device is capable of registering these searches and appearing as that trusted WiFi network. I suddenly see the name of my home network appear on my iPhone’s list of available networks, as well as my workplace, and a list of cafes, hotel lobbies, trains, and other public places I’ve visited. My phone automatically connects itself to one of these networks, which all belong to the black device.""Slotboom can also broadcast a fictitious network name, making users believe they are actually connecting to the network of the place they’re visiting. For example, if a place has a WiFi network consisting of random letters and numbers (Fritzbox xyz123), Slotboom is able to provide the network name (Starbucks). People, he says, are much more willing to connect to these.https://medium.com/matter/heres-why-public-wifi-is-a-public-health-hazard-dd5b8dcb55e6

 

[Angela53510]

Not sure why this is all mooshed together. I tried to edit it, but I ran out of town. Here is "hopefully??!!"the readable version.

Most of you probably know this already, but for those who like to go to cafés, and use the wifi, here is a warning for you.




"It is actually quite simple: if you want absolute security, do not connect to a public network. Only a few months ago, the head of Interpol, Troels Oerting, told the BBC: ‘Anything you send via Wi-Fi is potentially at risk’. The Dutch National Cyber Security Centre also advises against making use of public Wi-Fi networks. This means that if you still want to use the Internet while en route, the best thing to do is to make use of mobile data. It is relatively expensive, but worth it."




https://decorrespondent.nl/1103/How-to-safely-use-a-public-Wi-Fi-network/33923868-a908f82a


"Wouter removes his laptop from his backpack, puts the black device on the table, and hides it under a menu. A waitress passes by and we ask for two coffees and the password for the WiFi network. Meanwhile, Wouter switches on his laptop and device, launches some programs, and soon the screen starts to fill with green text lines. It gradually becomes clear that Wouter’s device is connecting to the laptops, smartphones, and tablets of cafe visitors."


"The idea that public WiFi networks are not secure is not exactly news. It is, however, news that can’t be repeated often enough. There are currently more than American adults own a tablet and more than 155 million own a laptop. Each year the worldwide demand for more laptops and tablets increases. In 2013, an estimated 206 million tablets and 180 million laptops were sold worldwide. Probably everyone with a portable device has once been connected to a public WiFi network: while having a coffee, on the train, or at a hotel."


"Slotboom’s device is capable of registering these searches and appearing as that trusted WiFi network. I suddenly see the name of my home network appear on my iPhone’s list of available networks, as well as my workplace, and a list of cafes, hotel lobbies, trains, and other public places I’ve visited. My phone automatically connects itself to one of these networks, which all belong to the black device."


"Slotboom can also broadcast a fictitious network name, making users believe they are actually connecting to the network of the place they’re visiting. For example, if a place has a WiFi network consisting of random letters and numbers (Fritzbox xyz123), Slotboom is able to provide the network name (Starbucks). People, he says, are much more willing to connect to these."


https://medium.com/matter/heres-why-public-wifi-is-a-public-health-hazard-dd5b8dcb55e6

 

[G4JC]

A very true statement, but the same goes for any "public" network.

Let's say your connecting to a password protected hotel network wifi or ethernet cable, anyone on that network can view your data.
So for example there's a free app (which I won't mention the name due to encouraging script kiddies how to hack) for Android and IPhone which allows you to view all passwords on the network that are not HTTPS enforced.
Therefore, I can confirm it takes about < 2 minutes to dump login information with little to no technical knowledge needed.

The solution:
1) At the VERY LEAST - Make sure and use HTTPS Everywhere - it will make MITM attacks more difficult but not impossible.
2) Use a VPN - this is the only way to properly ensure all your data is secure from eavesdropping, regardless of what public network your on.

Have fun, be safe!

 

[Anonimous]

I'm not at all concerned since I don't write or say anything to be guilty about. And that is the way it's supposed to be. Just think about it like this... would you say something in "private" that you would not want Jesus to hear?

 

[maxwel]

A few years ago I was looking into selling VPN service... but most people could care less about their own security, lol.

Most people will ignore ALL security measures, and just BLISSFULLY CHOOSE TO BELIEVE THEY'RE SAFE... no matter what the facts are.

It's a waste of breath.

: )

 

[maxwel]

I'm not at all concerned since I don't write or say anything to be guilty about. And that is the way it's supposed to be. Just think about it like this... would you say something in "private" that you would not want Jesus to hear?

I agree with you, but you're sort of missing the point... which is very understandable.

Internet security is not about "hiding" something bad you said or did.

Internet security is exactly like security on your home... you need locks to protect your stuff.

You lock your home because you don't want somebody coming in and stealing your stuff, stealing your checkbook, stealing your ID (so they can commit fraud), making copies of all your medical records and personal papers... it's the same with your computer.
People don't want into your computer to "spy" on something naughty you said... they want into your computer to ROB YOU.

They'll even steal the SPACE INSIDE YOUR COMPUTER!

Where do you think criminals keep all they're illegal things, like kiddie porn and stolen credit cards?
They keep their illegal things on YOUR computer... if you don't keep it secured.

When there is a DDoS attack on a big corporation, and millions of computers attack and jam that company's servers, who's computer do you think is doing the illegal attack?
YOURS... if your computer isn't secure.

But people don't listen to any of this stuff... it's all WAY TOO HORRIBLE, so they just ignore it.
Telling people about security is a waste of breath.
: )

 

[G4JC]

I'm not at all concerned since I don't write or say anything to be guilty about. And that is the way it's supposed to be. Just think about it like this... would you say something in "private" that you would not want Jesus to hear?
​

As maxwel mentioned, the point here is not something you said so much as identity theft. Have you ever bought anything online? Then cybercriminals can grab your credit card or bank account. That's what hackers are after when your using wifi as well. They will gain access to your e-mail via stolen password and then proceed to use it for spam and/or theft purposes.

Not to mention the later part can still be important as well.
When you say, ‘I have nothing to hide,’ you’re saying, ‘I don’t care about this right.’ - Edward Snowden

The right to privacy of communications and free speech is (more or less) protected in the United States; however in other countries that do not have those benefits - saying something against the state religion can get you killed.

But people don't listen to any of this stuff... it's all WAY TOO HORRIBLE, so they just ignore it.
Telling people about security is a waste of breath.
: )

True that! But it's not a waste of breath, the paranoia from people like you helped me secure my computer sometime back around 2008. At that time my wonderful Windows XP was sending out click-fraud and got infected with a botnet; I had no idea until my internet came to a crawl and my e-mail client was sending 5,000 messages a day. Then once I discovered that, I was freaking out because all of the anti-viruses couldn't catch it. Now I know they only catch a small percentage of what is in the wild; and I learned a ton on how to more securely use the computer.

So keep up your efforts to help newbies secure their computers.

Speaking of which, here's some more security tools to get you started:
https://securityinabox.org/

 

[maxwel]

As maxwel mentioned, the point here is not something you said so much as identity theft. Have you ever bought anything online? Then cybercriminals can grab your credit card or bank account. That's what hackers are after when your using wifi as well. They will gain access to your e-mail via stolen password and then proceed to use it for spam and/or theft purposes.

Not to mention the later part can still be important as well.
When you say, ‘I have nothing to hide,’ you’re saying, ‘I don’t care about this right.’ - Edward Snowden

The right to privacy of communications and free speech is (more or less) protected in the United States; however in other countries that do not have those benefits - saying something against the state religion can get you killed.

True that! But it's not a waste of breath, the paranoia from people like you helped me secure my computer sometime back around 2008. At that time my wonderful Windows XP was sending out click-fraud and got infected with a botnet; I had no idea until my internet came to a crawl and my e-mail client was sending 5,000 messages a day. Then once I discovered that, I was freaking out because all of the anti-viruses couldn't catch it. Now I know they only catch a small percentage of what is in the wild; and I learned a ton on how to more securely use the computer.

So keep up your efforts to help newbies secure their computers.

Speaking of which, here's some more security tools to get you started:
https://securityinabox.org/

Glad my paranoia can be of service.
: )

 

[wisebeardman]

So keep up your efforts to help newbies secure their computers.

Speaking of which, here's some more security tools to get you started:
https://securityinabox.org/

i got a better idea, ditch insecure windoze and use linux.

 

[G4JC]

i got a better idea, ditch insecure windoze and use linux.

Excellent point, I actually run GNU/Linux myself on most of my computers now. One of the super advantages is you never get infected with a virus unless you're using sudo too much or have really outdated webservices running (think webserver).

Some fully free distros to get you started:
https://www.gnu.org/distros/free-distros.html

And why the tech industry is headed for a "total disaster":
https://www.youtube.com/watch?v=uFMMXRoSxnA

- Including Ubuntu (though debatably they've removed the tracking as a default setting after pressure):
https://www.fsf.org/blogs/rms/ubuntu-spyware-what-to-do

Run Free, Run GNU!

 

[posthuman]

2) Use a VPN - this is the only way to properly ensure all your data is secure from eavesdropping, regardless of what public network your on.

good advice ↑

VPN's aren't just about spoofing IP's for whatever reason. you can use one to add a layer of security to an otherwise unprotected network connection.
a SmartDNS can do functionally much the same thing without tunneling traffic through other hubs.
these kinds of services are popular because they can work around local or regional content-blocking, but it's not their only use.

at the end of the day though, to anyone seriously determined & savvy, everything can be hacked, just like even Fort Knox could be broken into if you were resourceful & patient enough. i think it's important that any financial service a person uses have some level of fraud/credit protection, and a prudent person should keep an eye on charges and debits to their accounts.

it's good that there has been a lot of national awareness of identity theft etc, because there are protections in place for our liability for the actions of thieves, isn't it! it's something to be thankful for. in other places and other times we could be much more easily robbed blind without any recourse.
of course it can still happen - but i'm glad there are ways to both prevent and deal with it

 

[jb]

Most of you probably know this already, but for those who like to go to cafés, and use the wifi, here is a warning for you."It is actually quite simple: if you want absolute security, do not connect to a public network. Only a few months ago, the head of Interpol, Troels Oerting, told the BBC: ‘Anything you send via Wi-Fi is potentially at risk’. The Dutch National Cyber Security Centre also advises against making use of public Wi-Fi networks. This means that if you still want to use the Internet while en route, the best thing to do is to make use of mobile data. It is relatively expensive, but worth it."https://decorrespondent.nl/1103/How-to-safely-use-a-public-Wi-Fi-network/33923868-a908f82a"Wouter removes his laptop from his backpack, puts the black device on the table, and hides it under a menu. A waitress passes by and we ask for two coffees and the password for the WiFi network. Meanwhile, Wouter switches on his laptop and device, launches some programs, and soon the screen starts to fill with green text lines. It gradually becomes clear that Wouter’s device is connecting to the laptops, smartphones, and tablets of cafe visitors.""The idea that public WiFi networks are not secure is not exactly news. It is, however, news that can’t be repeated often enough. There are currently more than American adults own a tablet and more than 155 million own a laptop. Each year the worldwide demand for more laptops and tablets increases. In 2013, an estimated 206 million tablets and 180 million laptops were sold worldwide. Probably everyone with a portable device has once been connected to a public WiFi network: while having a coffee, on the train, or at a hotel.""Slotboom’s device is capable of registering these searches and appearing as that trusted WiFi network. I suddenly see the name of my home network appear on my iPhone’s list of available networks, as well as my workplace, and a list of cafes, hotel lobbies, trains, and other public places I’ve visited. My phone automatically connects itself to one of these networks, which all belong to the black device.""Slotboom can also broadcast a fictitious network name, making users believe they are actually connecting to the network of the place they’re visiting. For example, if a place has a WiFi network consisting of random letters and numbers (Fritzbox xyz123), Slotboom is able to provide the network name (Starbucks). People, he says, are much more willing to connect to these.https://medium.com/matter/heres-why-public-wifi-is-a-public-health-hazard-dd5b8dcb55e6

I just use a vpn...

QED!