1

Hi everyone!
I came across a thread here about using WiFi in public places for work, and it got me thinking.
I don’t work remotely, but I do use my laptop in cafes pretty often, mostly for editing videos and photos. I’m curious, what are the actual risks of using public WiFi, like in a coffee shop, if I’m not using a VPN? Is my personal information at risk just by connecting?
Thanks in advance!

16 Spice ups
2

HTTPS (specifically the S there) traffic is encrypted, and is generally safe for normal web browsing/etc. so you should be fine as long as you’ve not turned off your firewall, aren’t using unencrypted connections to enter any credentials, and don’t ignore the warnings your web browser will give you if a connection isn’t secure.

Modern browsers will warn you (and sometimes outright refuse to connect) to insecure sites, so, at least in my opinion, this is largely a non-issue for 95% of folks…

That said, there are still risks. You could have malicious actors impersonating access points and poisoning DNS, for example, but so long as you’re double-checking the URL is correct, and you’re not bypassing any warnings your browser gives you, it’s highly unlikely that a (non-state) malicious actor will be able to both forge an access point, and have a valid forged certificate for the site you happen to be browsing to.

The main reason to use a VPN, in my opinion, is for when you need to access a remote network as if it were local.

21 Spice ups
3

We could expand this to, “what are the risks of you using your friends Wi-Fi?”

The simplest answer is, you have no control over how it’s configured, who else is on it or how up to date their setup is, so with anything you have a level of risk.

Unless guest Wi-Fi at these hot-spots are isolated connections, there is a risk someone on the same Wi-Fi can snoop on your device, you wont know if the network is isolated until you are on it and asking one of the staff at the shop, is likely to net you a null answer as they are staff, not IT people.

This would still be working remotely, even if you mean not for your job, you are remote to your home.

Also another question you could expand, “is my personal information at risk just by connecting – to the internet?”

Short version is, when you don’t control the network, you have to put trust in those who do, to ensure it’s secure, updated and isolated in the guest instance. Because you cannot validate these places by speaking to IT first, you have to ‘assume’ they have it correct, there are no guarantees.

15 Spice ups
4

It’s never safe to use public wifi on any device. There are malicious actors that can easily snoop on these networks and potentially compromise your device. A VPN doesn’t hurt but it’s not a guarantee that your device is 100% protected.

Your personal information is always at risk; it’s up to you to take the necessary steps to lower that risk. If I were in your shoes I would be tethering a mobile device with a data plan that I own, and use a VPN for work related tasks.

9 Spice ups
5

I have configured lots of Guest Wifis and I know there is a more safe way and a less safe way. If the one who set up the wifi knew what they were doing, you would be more safe. If not, then you could be more open to being compromised. For the most part, You are mostly as safe as being connected to the open internet can make you. Most internet communications will use some form of encryption, but you should always have some from protection on your device as well as where you go on the internet.

12 Spice ups
6

I wouldn’t worry about it at all, unless you’ve got really spicy corporate/state secrets stored on there or happen to be on some rogue nation’s hit list. Millions of people are using public WiFi to no negative effect and I think it’d be a bit of a disservice for us to try and “scare” you into not using it.

Technically there are “risks” to it in the same way that there are “risks” to going outside.

Like mentioned above, only interact with HTTPS websites (browsers will warn if you if you’re not), don’t disable your laptop’s basic default security features, and you’ll be fine.

11 Spice ups
7

Just get yourself a good VPN. In my case I use PIA (Private internet access.) anytime you’re on the connection that you don’t crush just fire up the VPN.

5 Spice ups
8

I don’t even put my personal cell phone on the companies service or public WiFi (when the offered it)
I have on occasion had to connect to public wifi’s but vpn’s VTA themed browsers (now, before it was Opera) personal firewalls, etc…
Your sitting at a coffee house and just dropping in on their public wifi…nu-uh.

Why not use your cellphone as a hot spot ? That would also cut out the bad actors imposing as the WAP.

3 Spice ups
9

Yes!! I don’t need free wi-fi bad enough to connect to any store’s AP’s when my cell functions just fine!

2 Spice ups
10

I wouldn’t either.

Then a second tactic.

4 Spice ups
11

While some comments seem to contradict others, they really boil down to one thing: What is your risk tolerance?

A public place offering free open WiFi is less secure than one that offers encryption, but you are still connecting to a network shared by other totally strangers. So, that coupled with what others have said about using HTTPS, VPNs, client isolation, Firewalls, etc. and you are really talking about layering your security in order to protect yourself.

Given my work experiencing setting up open networks, I have also educated the public about what is relatively safe and what isn’t. I wouldn’t plan on doing my banking on public WiFi, but if I am just surfing the web for cat videos then Ok.

But, I too automatically lean towards using my cellphone as a hotspot because it comes with a higher level of trust.

5 Spice ups
12

I hate to say it but “It depends”. On where you are, what you are doing and who you are.

For 90 % of users in the west, it’s probably safe.

However, networks can easily be spoofed, you can be made to log into a fake public network and divulge login information etc. that is then readable in clear text to the attacker. Files you transfer can be intercepted, they can install malware / RATs on your computer and it doesn’t even end there…

So long story short: Connect only to public WiFi’s that you absolutely 100 % trust. A VPN is seen as a good solution to such MITM (man-in-the-middle) attacks, but you could also use the hotspot from your smartphone if your data plan allows for it.

5 Spice ups
13

Thanks for all your answers and advice!
Just to note, I don’t store any sensitive information and I know there’s always some level of risk. I also avoid unfamiliar websites and try to follow standard safety practices. From now on, I’ll be using a VPN.

4 Spice ups
14

If the network operator is smart they are running client isolation on the guest network. but most probably are not doing this.

4 Spice ups
15

basically think of public wifi the same way you think of the public internet. It carries all the same risks, just scaled down to a smaller network and device pool.

3 Spice ups
16

The only time I’ve used public WiFi (at least in recent memory) was upon finding myself in an unfamiliar area during a cell network outage.

I had unfortunately neglected to download an offline map prior and had no idea how to get where I was going. Randomly drove until I located an open network at a Cox Internet office and connected just long enough to get what I needed.

Even so, I wasn’t willing to join just any network, although after 15 minutes wandering lost my resolve was beginning to falter.

2 Spice ups
17

Never safe. All traffic can be captured and potentially redirected, for good or ill.

4 Spice ups
18

Perhaps not on the device you have with you, but this wouldn’t stop someone making your device a bot in a large scale DDoS attack or putting ransomware on your device, which will later scan your home network, where it might find much more interesting things.

It’s not just about in the moment, but what about consequences later.

4 Spice ups
19

simple - its about as safe as public transportation.

By that I mean, you may not die, but you’ll likely pickup a virus or malicious intent along the way.

2 Spice ups
20

In most cases, they have weak to no security and this is known to hackers. They will sit in these places and are able to gain access to your laptop through the lack of security. Once inside, they can create a backdoor they can enter anytime you are online, even at home. They can steal your identity, money, everything

2 Spice ups