Hotel WiFi security

-TangleFoot-

If you're using Windows, try iOpus iPIG or AnchorFree Hotspot Shield.

LeeSouthEast

timbim wrote: »

Anything sent by https is totally secure. I know for a fact that gmail has an option for all data to be sent via https and therefore be secure and unreadable by anyone sniffing on the network.

Not at all. MITM attacks on SSL are trivially easy to accomplish using the older (non-TLS) systems.

TimothyEBaldwin

sharkie wrote: »

The issue is that even if the hotel are using wep/wpa, all the punters, staff and some causal visitors know and have the same key/passphrase

Not if they are using WPA Enterprise, however they would also need to filter ARP, DHCP, Neighbour Discovery, Router Advertisements, and source IP addresses.

And the user needs to check that they are authenticating to right network.

But does anyone does this?

TimothyEBaldwin

sharkie wrote: »

If i remember correctly TOR encrypts on your end - but will decrypt somewhere else - on the final output which in itself is a theoretical hazard, but it probably much safer than you currently are.

Whilst it makes attacks targeted at you harder, unless you specify a trustworthy exit point it would make possible to sniff traffic with a computer anywhere on the internet, the location of which can be concealed from the server using TOR! And they could be concealed from your computer using a simualr approach.

TimothyEBaldwin

JasX wrote: »

To clarify 'reasonably' I believe WEP/WPA generally takes about 6-26 ish seconds for someone to hack with widely available software but they'd have to be trying. Personally I'd still be cautious.

I have seen no reports of such attacks on WPA provided the key is sufficiently random. Care to site you source?

enigma52

this programme says it makes even airport wifi connections secure

-TangleFoot-

enigma52 wrote: »

this programme says it makes even airport wifi connections secure

It also costs $50 per year.

Here are a couple more I just found:

• UltraVPN
• Alonweb

elvch01

The best way of securing data is to use a VPN which encrypts all traffic through a "tunnel" to the remote VPN server. I use OpenVPN (free) which requires me to have my own VPN server at home, but this is not a problem for me. TOR is OK, but can be incredibly slow

jamesb1239

elvch01 wrote: »

The best way of securing data is to use a VPN which encrypts all traffic through a "tunnel" to the remote VPN server. I use OpenVPN (free) which requires me to have my own VPN server at home, but this is not a problem for me. TOR is OK, but can be incredibly slow

I personally use THIS it creates a virtual VPN tunnel through their severs anonymously, so all info transmitted via the hotel network would be encrypted. and its FREE