Let’s assume that …

Let’s say you need to go to a public Wi-Fi to perform some internet-related task. You ask for your credential, then directly connects to the internet without using any VPN solution – let’s also assume that the websites you are accessing are not using the https protocol (more on this on another article).

Do you know that every traffic you are sending on the internet is sent in clear text? I can see you from here wondering what “clear text” is. This means that everything you are sending on the internet is available for reading to anyone who is “willing to.”

How does it work?

When using a public network, the same users on the same network are assigned a gateway where all the internet traffic are sent for proper routing. It’s like the main exit door from a building where a guard filters everything that goes in and out. To you, this means that the gateway administrator has access to all your internet traffic – which are sent in clear text if you are not using VPN or https.

Now, if it’s not the gateway administrator, it can be anyone using the same network as you who will pretend that his computer is now the gateway, thereby sending everybody’s traffic to his computer so that all he has to do is read. Scary?

But what kind of information can they read?

Let’s say I am the man-in-the-middle who’s going to sniff your internet packets. I’ve got bad intentions There you come going to use the internet in my facility without any VPN or https connection.

I already smile in my corner. I give you the Wi-Fi connection information/credentials and give you a seat. You then set up your Wi-Fi and go checking your Gmail, Yahoo, MSN or whatever e-mail provider account. You go the e-mail provider sign-in login page and enter your credentials and boom! I also got your credentials by listening to your internet connection.

Pretending to be you…

Now even after leaving my office, I can use your e-mail account for sending ugly or spammy e-mails pretending to be you (hey, I also got the list of your contacts, your calendar, all of your e-mail contents, …). I can even “subscribe” your e-mail address to some spam lists … I can do whatever I want. Then, you want to share some news with your friends and connect to Facebook or whatever social network you are part while I can have a cup of coffee or go outside, it doesn’t mind: I don’t have to be in front of my computer so as to sniff what you are doing- I have programs recording it.

Now, not only do I get your credentials on every site you visit, but I also know what websites you are looking at (even if you are positioning your laptop so that no one can see what kind of awkward website you just went to). Ooh, and what about those insane instant messaging chat you just had, are they safe? You bet not. I can read them

Scary? Well … yes!

And remember, I don’t have to be in the same room as you so I can be in the parking lot provided that I have access to the same WI-FI connection information as you do and I’m fine. I can leave my laptop listening to a whole day even If I’m not physically there … Scary? Not, that’s the whole truth if you don’t take your privacy more seriously.

Again, this isn’t a sales pitch, but you have to use a VPN when on a public WI-FI.

Security risks

Sadly, along with the number of public Wi-Fi hotspots growth, is the heightened security risks end-users and businesses are faced with. One good example is where thru public hotspots, it is highly susceptible to data traffic and communications to be read and intercepted as they traverse along unprotected and not encrypted networks.

This can be prevented if you are using VPN software. Nonetheless, studies show that there are only 18% of end-users who actually use a VPN client as they connect online via these public Wi-Fi hotspots.

Some users complain of lacking the necessary technical knowledge in using VPN software in order to encrypt and protect their data online. Hence, the low turnout of web users utilizing said software over a public Wi-Fi hotspot connection. Nevertheless, you can still ensure your online security if you do the following guidelines below. Learn how to counter the risks of using public Wi-fi hotspots.

Use your VPN client

To start with, always commence your hotspot log-on from within the VPN client; just be sure it has an integrated personal firewall. This will enable the administrator to define the standard web browser or any downgraded web browser for secure VPN log on. Such that, each time a user chooses ‘hotspot login’ at the VPN client, the integrated firewall is for the time being is opened for the length of the procedure, and the hotspot login website will remain displayed.

Yet another way for you to secure hotspot logon is with the aid of Wireless Internet Service Provider Roaming or WISPr protocol into the VPN client. This will surely do away with the need for a web browser altogether.

Make sure the VPN client is secure

It is likewise essential to make sure that the VPN client has security mechanisms that are capable of detecting whether the user is using a secure network, vis-à-vis an insecure one. The moment the VPN client finds the secure network, the integrated firewall shall then activate the rules that have been configured.

For the record, admins typically define stringent firewall regulations for unknown or insecure networks. Upon doing so, the VPN client will not only recognize the IP address ranges of particular server services but, nonetheless ensure that the VPN client utilizes a certificate-based authentication for identifying secure networks.

As opposed the described IP address range detection, the latter technique of ‘friendly network detection’ does away with the possibility of IP address range manipulation.

IPSec VPN connections

For end-users who are unable to access the corporate network thru the standard IPsec connection in entirely unknown public Wi-Fi hotspots like for instance in hotels or restaurants, look for VPN technologies that can easily recognize their VPN gateways whenever they cannot be reached. The VPN client software must be able to automatically switch to a modified IPsec protocol mode and mimic the HTTPS so as to set up a secured VPN tunnel.

In case you are considering SSL to connect to the web, think twice. IPsec connections add a little load on the resources of VPN gateways, and all IPsec security systems, like the concurrent usage of certificates for instance, since they are still available in the modified state.

Conclusion

Public Wi-Fi hotspots safety does not have to be a reason for alarm. In case businesses can fill the gaps upon login and connection set-up processes are closed. And as they strictly enforce firewall rules and end-user awareness, and proceed with the appropriate encrypted VPN technology, connecting thru airports, hotels, restaurants’ network can be just as safe as when done thru once own Local Access Networks (LANs).

What do you think? What are the risks of using public Wi-fi access? Let us know in the comments below.