Open WiFi - do you use it?
-
@Dashrender said in Open WiFi - do you use it?:
@FiyaFly said in Open WiFi - do you use it?:
@wirestyle22 said in Open WiFi - do you use it?:
@FiyaFly said in Open WiFi - do you use it?:
@coliver said in Open WiFi - do you use it?:
@Dashrender said in Open WiFi - do you use it?:
@BRRABill and I were talking and decided to bring this conversation public.
Do you use open WiFi? If so, do you do anything special when doing so? like using a VPN?
Yes, but I generally hop on my VPN if I do use it.
Agreed here, My android phone has a wifi smart assistant that automatically throws me on a VPN on public wifi. Still looking to take a look into how secure it is, but I don't do anything that I would dislike people having information about while on it.
Atooma?
Nope. Wifi Assistant. Built into my Nexus 6P
https://support.google.com/nexus/answer/6327199?hl=enYeah I have the same thing - but it's not 100% of the time.
I just turned it on the other day, so I haven't given it a whole lot of exposure to open networks to play with.
-
@FiyaFly said in Open WiFi - do you use it?:
@Dashrender said in Open WiFi - do you use it?:
@FiyaFly said in Open WiFi - do you use it?:
@wirestyle22 said in Open WiFi - do you use it?:
@FiyaFly said in Open WiFi - do you use it?:
@coliver said in Open WiFi - do you use it?:
@Dashrender said in Open WiFi - do you use it?:
@BRRABill and I were talking and decided to bring this conversation public.
Do you use open WiFi? If so, do you do anything special when doing so? like using a VPN?
Yes, but I generally hop on my VPN if I do use it.
Agreed here, My android phone has a wifi smart assistant that automatically throws me on a VPN on public wifi. Still looking to take a look into how secure it is, but I don't do anything that I would dislike people having information about while on it.
Atooma?
Nope. Wifi Assistant. Built into my Nexus 6P
https://support.google.com/nexus/answer/6327199?hl=enYeah I have the same thing - but it's not 100% of the time.
I just turned it on the other day, so I haven't given it a whole lot of exposure to open networks to play with.
Turned it on? Mine was on by default. At least I don't recall turning it on. -
But even if Google didn't automatically use their own VPN, I probably wouldn't bother with VPN. My email client uses secure connections only, most websites I visit are HTTPS sites - though I suppose a bad actor could downgrade them in flight.
-
@Mike-Davis said in Open WiFi - do you use it?:
What's the concern? Man in the middle? If you're doing anything secure, there should be a secure tunnel anyways. Even if you are on "secure" wifi, someone else on the "secure wifi" can still see your traffic.
I think the general concern is More people can connect to open wifi, and in a general sense more people that you don't know, don't know the intentions of, and don't know the competency of. I'm not advocating to just take "Secure wifi" and run with it doing banking and the whole nine yards just assuming and hoping.
@Dashrender said in Open WiFi - do you use it?:
@FiyaFly said in Open WiFi - do you use it?:
@Dashrender said in Open WiFi - do you use it?:
@FiyaFly said in Open WiFi - do you use it?:
@wirestyle22 said in Open WiFi - do you use it?:
@FiyaFly said in Open WiFi - do you use it?:
@coliver said in Open WiFi - do you use it?:
@Dashrender said in Open WiFi - do you use it?:
@BRRABill and I were talking and decided to bring this conversation public.
Do you use open WiFi? If so, do you do anything special when doing so? like using a VPN?
Yes, but I generally hop on my VPN if I do use it.
Agreed here, My android phone has a wifi smart assistant that automatically throws me on a VPN on public wifi. Still looking to take a look into how secure it is, but I don't do anything that I would dislike people having information about while on it.
Atooma?
Nope. Wifi Assistant. Built into my Nexus 6P
https://support.google.com/nexus/answer/6327199?hl=enYeah I have the same thing - but it's not 100% of the time.
I just turned it on the other day, so I haven't given it a whole lot of exposure to open networks to play with.
Turned it on? Mine was on by default. At least I don't recall turning it on.Yeah, mine asked me if i wanted to use it or not. For me it wasn't by default.
@Dashrender said in Open WiFi - do you use it?:
But even if Google didn't automatically use their own VPN, I probably wouldn't bother with VPN. My email client uses secure connections only, most websites I visit are HTTPS sites - though I suppose a bad actor could downgrade them in flight.
I guess that really depends on the kind of traffic I'm doing. As you said, someone could play MITM and that would just be bad juju.
-
@Mike-Davis said in Open WiFi - do you use it?:
Even if you are on "secure" wifi, someone else on the "secure wifi" can still see your traffic.
While this is technically true, it's not trivial to do.
-
That was really my question. I have spent a lot of time visiting hospitals this year, so I generally connect to their Wifi, and then immediately connect to my VPN. In my thinking that is pretty secure, and I do not worry about security after that.
I was having an argument with someone (not @Dashrender) who said they still don't do banking this way, which I thought was crazy. That is DOUBLE encryption.
In theory, if you connect to open Wifi, but have a firewall and use a site with HTTPS, you should be safe, right?
The VPN just locks that down even more.
Or am I nuts?
-
@BRRABill said in Open WiFi - do you use it?:
That was really my question. I have spent a lot of time visiting hospitals this year, so I generally connect to their Wifi, and then immediately connect to my VPN. In my thinking that is pretty secure, and I do not worry about security after that.
I was having an argument with someone (not @Dashrender) who said they still don't do banking this way, which I thought was crazy. That is DOUBLE encryption.
In theory, if you connect to open Wifi, but have a firewall and use a site with HTTPS, you should be safe, right?
The VPN just locks that down even more.
Or am I nuts?
i agree with you.
Have him describe a situation in which he is willing to do online banking.. then compare the two.
-
@BRRABill said in Open WiFi - do you use it?:
That was really my question. I have spent a lot of time visiting hospitals this year, so I generally connect to their Wifi, and then immediately connect to my VPN. In my thinking that is pretty secure, and I do not worry about security after that.
I was having an argument with someone (not @Dashrender) who said they still don't do banking this way, which I thought was crazy. That is DOUBLE encryption.
In theory, if you connect to open Wifi, but have a firewall and use a site with HTTPS, you should be safe, right?
The VPN just locks that down even more.
Or am I nuts?
You will run into the type of people who feel like unless they hand built each piece of the network, it isn't secure enough for them. In my opinion, I would be with you. Firewall, VPN, Secured wifi, call it good. There are many that will disagree.
-
SSL is secure or it isn't. If it's not secure don't use it anywhere. Don't shop online, bank, etc. Along that note, what banking site is not using SSL? It would be crazy not to.
Unless the AP has device isolation on, checking the box for promiscuous mode in WireShark is pretty easy.
What difference does it make how many people are connected. Do you walk in to Starbucks and size up the geek level of people sitting there?
-
Use SSL and move along. Anything more is a paranoia pipe dream.
@BRRABill Are you using a company VPN and have full tunnel enabled? This means you are abusing your company's internet service. Do they know that?
-
@Mike-Davis said in Open WiFi - do you use it?:
SSL is secure or it isn't. If it's not secure don't use it anywhere. Don't shop online, bank, etc. Along that note, what banking site is not using SSL? It would be crazy not to.
Unless the AP has device isolation on, checking the box for promiscuous mode in WireShark is pretty easy.
What difference does it make how many people are connected. Do you walk in to Starbucks and size up the geek level of people sitting there?
Well, yes I do, but that's not for this purpose. More for how much I do or do not want to stick around. (Tongue-in-cheek)
It's a factor of adding a password to wifi ("Secure Wifi" Now) keeps out the random people. In theory, and in most cases where we talking about using secure wifi, at least in my experience, you have more of an idea who is on the network. So, familiarity I guess moreso than quantity.
-
@FiyaFly said in Open WiFi - do you use it?:
It's a factor of adding a password to wifi ("Secure Wifi" Now) keeps out the random people. In theory, and in most cases where we talking about using secure wifi, at least in my experience, you have more of an idea who is on the network. So, familiarity I guess moreso than quantity.
The day I can tell by looking at a person that they can hack a SSL tunnel will be the day I start wearing a cape.
-
@Mike-Davis said in Open WiFi - do you use it?:
What's the concern? Man in the middle? If you're doing anything secure, there should be a secure tunnel anyways. Even if you are on "secure" wifi, someone else on the "secure wifi" can still see your traffic.
My big concern is you can't verify its actually what it says. I can set up an AP with the name Xfinity and anyone who has used the free Xfinity wifi will connect to me. With a laptop it's not a big deal but phone developers are lazy. You have no idea what traffic is coming from the apps. Troy hunt did a video on his tablet where he installed some magazine app that sent like 1.5G of unencrypted data from his device.
-
I use HTTPS which is a form of VPN.
-
@scottalanmiller said in Open WiFi - do you use it?:
I use HTTPS which is a form of VPN.
Ah, that old line.
That's on the top 10 "Things SAM Says" list I maintain privately.
-
@BRRABill said in Open WiFi - do you use it?:
@scottalanmiller said in Open WiFi - do you use it?:
I use HTTPS which is a form of VPN.
Ah, that old line.
That's on the top 10 "Things SAM Says" list I maintain privately.
LOL, there should be a thread just for that.
-
I only perform my non-secure bank transactions on public wifi...
Fastest possible internet connection ever! So fast in fact that no one can steal my private data...
