Connecting to public wifi networks

[Alfred001]

I've only recently started using a smartphone so using public wifi networks is completely new to me. I'm wondering if there are any security precautions I should take if I'm using public wifi?

[StringJunky]

I've only recently started using a smartphone so using public wifi networks is completely new to me. I'm wondering if there are any security precautions I should take if I'm using public wifi?

Use a VPN on public wifi and research into them properly to find one that suits you. I would use a paid one because they have to make money somehow and if you use free then they will probably sell your data to make their money. here's some info on the risks:

 

http://www.digitaltrends.com/mobile/how-dangerous-is-public-wi-fi/

 

Personally, i use my phone network's internet.

Edited April 15, 2017 by StringJunky

[Phi for All]

Use a VPN on public wifi and research into them properly to find one that suits you. I would use a paid one because they have to make money somehow and if you use free then they will probably sell your data to make their money. here's some info on the risks:

 

http://www.digitaltrends.com/mobile/how-dangerous-is-public-wi-fi/

 

Personally, i use my phone network's internet.

 

Is there a difference in trust levels for hotel wifi, where the access keys are limited to guests, as opposed to open wifi spots like Starbucks? I don't trust anyone's public wifi for file transfers or purchases, but I still try to spend as little time as possible on public networks.

[StringJunky]

 

Is there a difference in trust levels for hotel wifi, where the access keys are limited to guests, as opposed to open wifi spots like Starbucks? I don't trust anyone's public wifi for file transfers or purchases, but I still try to spend as little time as possible on public networks.

i can't answer that question but I wouldn't trust any network outside of ones work or home. You don't know who is given the key or the knowledge of the hotel network owners. I would treat public and hotels the same; with caution. You don't know if the hotel owners are skimming the traffic for starters. I'm sure there are some here that can offer more knowledge than I have. If you are out of town a lot, I would use a VPN if you can't connect on your own phone network. I wifi my laptop directly off my phone all the time. Is that possible for you?

[imatfaal]

Sorry - but don't trust any network unless you trust and know the person administering it. Password security for WIFI networks is very very poor (it's the meatware end that lets the side down) and once the nasties are in then they are snooping, sniffing, and phishing

[Alfred001]

The wifi I'm talking about here is provided by the city, so its not some random bar, does that change things any?

[Endy0816]

i can't answer that question but I wouldn't trust any network outside of ones work or home. You don't know who is given the key or the knowledge of the hotel network owners. I would treat public and hotels the same; with caution. You don't know if the hotel owners are skimming the traffic for starters. I'm sure there are some here that can offer more knowledge than I have. If you are out of town a lot, I would use a VPN if you can't connect on your own phone network. I wifi my laptop directly off my phone all the time. Is that possible for you?

 

Yeah, I'm at a larger hotel and we still have issues. Physical security of network infrastructure is the one I've been most involved with. Having some success with better access control and monitoring. Going to be a long and painful process though.

 

VPN is definitely a good idea if you are concerned or are working on something that merits a higher level of secrecy.

[StringJunky]

 

Yeah, I'm at a larger hotel and we still have issues. Physical security of network infrastructure is the one I've been most involved with. Having some success with better access control and monitoring. Going to be a long and painful process though.

 

VPN is definitely a good idea if you are concerned or are working on something that merits a higher level of secrecy.

Would Whatsapp be a safe communication channel in a public wifi scenario given that its end-to-end?

Edited April 16, 2017 by StringJunky

[Endy0816]

Would Whatsapp be a safe communication channel in a public wifi scenario given that its end-to-end?

I think so. Man in the middle attacks are possible, but would mostly be restricted to Whatsapp or Governments.

[Sensei]

The wifi I'm talking about here is provided by the city, so its not some random bar, does that change things any?

 

WiFi router could be compromised. If it's internally Linux/unix-based (not plain hardware just with ROM), somebody can install something on it that will analyze every packet and send them to him.

Colleague hacked his own WiFi router and had terrible slow down of Internet. He had to remove his own changes in router software.

Such hacked router can redirect DNS server queries to fake DNS server and while going to any website ending up on hackers websites that just transmit data from/to true one.

Edited April 16, 2017 by Sensei

[Alfred001]

So if I'm using a VPN, is it safe to connect to any public wifi I happen to come across in the city?

 

Can anyone recommend a free VPN I could use? (I'm on an Android phone, if it matters)

[caffinix]

If you avoid inputting any sensitive data you should be fine. No passwords, bank details, and stuff like that. Sounds obvious but I've had to check myself a couple of times before transfering money on my laptop in a cafe!

[StringJunky]

So if I'm using a VPN, is it safe to connect to any public wifi I happen to come across in the city?

 

Can anyone recommend a free VPN I could use? (I'm on an Android phone, if it matters)

Go to Google PlayStore and try 'Opera VPN'. It's free. There is an iPhone version as well. Your phone needs to be new enough for it to work. It seems to work fine and is supposed protect the phone, not just the browser. Apparently it can still leak your IP address in some circumstances but it can be closed off. This is only important if you are trying get stuff that's not allowed in your country or your primary aim is to pretend you are somewhere else. More info Here

 

From a security perspective, your data is tunneled to the VPN servers in Canada via whatever country you choose in the list. There is a security tester in the app to check the security. You just turn the app on after setup on the phone's homepage then you are covered. This app is for over other wifi connections and not your phone company's normal connection which has its own security.

Edited April 28, 2017 by StringJunky

[Alfred001]

Go to Google PlayStore and try 'Opera VPN'. It's free. There is an iPhone version as well. Your phone needs to be new enough for it to work. It seems to work fine and is supposed protect the phone, not just the browser. Apparently it can still leak your IP address in some circumstances but it can be closed off. This is only important if you are trying get stuff that's not allowed in your country or your primary aim is to pretend you are somewhere else. More info Here

 

From a security perspective, your data is tunneled to the VPN servers in Canada via whatever country you choose in the list. There is a security tester in the app to check the security. You just turn the app on after setup on the phone's homepage then you are covered. This app is for over other wifi connections and not your phone company's normal connection which has its own security.

 

So, if I'm using that then I'm covered 100%? I could do internet banking over a public wifi if I have it installed?

 

Also, if all I'm doing is using facebook and instagram, do I really need to worry? I mean, who would want to get some random guy's Facebook password? I guess it would be of use to them if I use the same pass for everything, but anyone really bother?

[StringJunky]

 

So, if I'm using that then I'm covered 100%? I could do internet banking over a public wifi if I have it installed?

 

Also, if all I'm doing is using facebook and instagram, do I really need to worry? I mean, who would want to get some random guy's Facebook password? I guess it would be of use to them if I use the same pass for everything, but anyone really bother?

Nothing's ever a 100%. Your information exchange with the bank is encrypted but someone eavesdropping or other companies, like google, facebook and other marketing companies will know you are talking to the bank. With a VPN, only the VPN company knows you are talking to the bank. If nobody knows you are talking to your bank, or whatever, within the bounds of the public network you are using, then there is no incentive for a nefarious entity to intercept your traffic and you are not leaking information up to the vpn servers... after that you are back in the open again. You'll be protected in the airport or hotel etc. The real security through to the bank etc depends on the SSL technology that banks use.

 

I am not an expert but I would absolutely use a vpn over any public network. If I used one a lot I would be inclined to research and use a paid one. I have the vpn, I posted before, on my phone in the event I use a public network.

 

For messaging I use Whatsapp which is end-to-end encrypted. Also, I use HTTPS Everywhere which makes sure only a secure version of a website is connected to. I use two browsers, one for everyday browsing, Chrome, and a nailed-down Firefox for my business stuff in which nothing is saved when I shut it down and also keeping my casual browsing off it reduces the risk of the effects of inadvertently clicking a malicious link. Security is a muti-layered thing. On a laptop you could use Opera browser which has vpn built-in; it is enabled in the browser Settings. It only protects your browser traffic though.

Edited April 30, 2017 by StringJunky