Don’t EVER use any public wifi without a proper VPN. As soon as you connect, launch the VPN. Hotels, museums, conferences, coffeshop, busses and trains, and library wifis are the worst. Even homes of friends.
I’ve seen wireshark traffic that would make your blood curl.
Where was TLS? The browser should have flagged the site, surely?
On my last vacation, I was in a hotel you could control the chromecast sessions of other guests.
Did a bit of testing (maybe also a bit of trolling) to verify the control.
But considering that…That’s a yikes.I’m going to use the public wifi at defcon with no VPN, wish me luck!
Current era or EOL era?
That’s why I’ve been arguing for a long time that using VPN for everything by default is just basic security.
The only reason I don’t currently is that my phone’s VPN connection doesn’t handle network switching gracefully. Otherwise I try and tunnel all my traffic through my home network.
As a useful side effect, I need to expose far less of my IoT devices .
Why did the hotel need over 360 accounts?
Spoiler
Joke
Dad?
No, not my Microsoft 365 account!
Do not connect to public wifi if you do use a VPN…
This is one of the many reasons I use NextDNS
Who uses microsoft 365?
Most businesses. Most schools. Most workplaces in general.
Companies replacing their Citrix infrastructure. Replacing one dumpster fire with another.
Last company I work for replace MS with Google, oh it was a shit show… Had to be on chrome, but chrome doesn’t work with most of our M&C gear so we needed FF. IT pushes back that you have to use chrome. We push back it will cost millions to retool\reprogram the M&C to use chrome and their department can pay for it.
You can guess we got FF installed after that VP to VP conversation.
They are still butt hurt over that when I moved on. IT forgets they have a paycheck because of operation and production…
It’s got the number of users right there in the name!
Savage!
