[{"data":1,"prerenderedAt":173},["ShallowReactive",2],{"i-lucide:menu":3,"i-lucide:arrow-up-right":8,"i-lucide:moon":10,"i-lucide:sun":12,"i-lucide:rss":14,"i-simple-icons:github":16,"i-simple-icons:linkedin":18,"post-\u002F2011\u002Fanother-reason-to-distrust-open-wifi":21,"surround-\u002F2011\u002Fanother-reason-to-distrust-open-wifi":160,"i-lucide:arrow-left":169,"i-lucide:arrow-right":171},{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":7},0,24,false,"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 5h16M4 12h16M4 19h16\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":9},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M7 7h10v10M7 17L17 7\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":11},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M20.985 12.486a9 9 0 1 1-9.473-9.472c.405-.022.617.46.402.803a6 6 0 0 0 8.268 8.268c.344-.215.825-.004.803.401\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":13},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Ccircle cx=\"12\" cy=\"12\" r=\"4\"\u002F>\u003Cpath d=\"M12 2v2m0 16v2M4.93 4.93l1.41 1.41m11.32 11.32l1.41 1.41M2 12h2m16 0h2M6.34 17.66l-1.41 1.41M19.07 4.93l-1.41 1.41\"\u002F>\u003C\u002Fg>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":15},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M4 11a9 9 0 0 1 9 9M4 4a16 16 0 0 1 16 16\"\u002F>\u003Ccircle cx=\"5\" cy=\"19\" r=\"1\"\u002F>\u003C\u002Fg>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":17},"\u003Cpath fill=\"currentColor\" d=\"M12 .297c-6.63 0-12 5.373-12 12c0 5.303 3.438 9.8 8.205 11.385c.6.113.82-.258.82-.577c0-.285-.01-1.04-.015-2.04c-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729c1.205.084 1.838 1.236 1.838 1.236c1.07 1.835 2.809 1.305 3.495.998c.108-.776.417-1.305.76-1.605c-2.665-.3-5.466-1.332-5.466-5.93c0-1.31.465-2.38 1.235-3.22c-.135-.303-.54-1.523.105-3.176c0 0 1.005-.322 3.3 1.23c.96-.267 1.98-.399 3-.405c1.02.006 2.04.138 3 .405c2.28-1.552 3.285-1.23 3.285-1.23c.645 1.653.24 2.873.12 3.176c.765.84 1.23 1.91 1.23 3.22c0 4.61-2.805 5.625-5.475 5.92c.42.36.81 1.096.81 2.22c0 1.606-.015 2.896-.015 3.286c0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":19,"hidden":20},"\u003Cpath fill=\"currentColor\" d=\"M20.447 20.452h-3.554v-5.569c0-1.328-.027-3.037-1.852-3.037c-1.853 0-2.136 1.445-2.136 2.939v5.667H9.351V9h3.414v1.561h.046c.477-.9 1.637-1.85 3.37-1.85c3.601 0 4.267 2.37 4.267 5.455v6.286zM5.337 7.433a2.06 2.06 0 0 1-2.063-2.065a2.064 2.064 0 1 1 2.063 2.065m1.782 13.019H3.555V9h3.564zM22.225 0H1.771C.792 0 0 .774 0 1.729v20.542C0 23.227.792 24 1.771 24h20.451C23.2 24 24 23.227 24 22.271V1.729C24 .774 23.2 0 22.222 0z\"\u002F>",true,{"id":22,"title":23,"body":24,"category":140,"comments":141,"date":142,"description":35,"excerpt":141,"extension":143,"image":141,"meta":144,"navigation":20,"path":145,"readingTime":146,"seo":147,"stem":148,"subtitle":141,"tags":149,"wordCount":158,"__hash__":159},"posts\u002F2011\u002Fanother-reason-to-distrust-open-wifi.md","Another reason to distrust open WiFi",{"type":25,"value":26,"toc":136},"minimark",[27,32,36,39,42,45,58,62,76,79,83,90,93,96,108,111,115,130,133],[28,29,31],"h1",{"id":30},"foreword","Foreword",[33,34,35],"p",{},"I connected to a wireless open network in a very busy part of Tallinn just moments ago. Something unexpected happened that made me once again thank Tux I’m slightly paranoid.",[33,37,38],{},"As you should know, wireless networks - especially open and weak (WEP encrypted) ones are dangerous. Dangerous in a sense that everything you send over a network is as visible as if you were giving a lecture. Think it over.",[33,40,41],{},"No-one (except maybe Google) cares that you search for restaurant reviews. But what about sensitive information like sent passwords or any other kind of data I have access to, such as...",[33,43,44],{},"I was taught the basic skills on how to intercept digital data that’s traveling between networks on the first semester of the freshmen year. In fact, any kiddie could pull it off. Because of that knowledge, I tend to avoid logging in to anything unencrypted during my stay outside the pseudo-safety of my home network.",[46,47,48,52,55],"ul",{},[49,50,51],"li",{},"Login information (Facebook, mail, blog, travel, ANY kind of site)",[49,53,54],{},"Instant messaging sessions",[49,56,57],{},"Vulnerable services running on the machine (file server)",[28,59,61],{"id":60},"some-more-background","Some More Background",[33,63,64,65,70,71,75],{},"As you might (not!) know, Facebook only just recently added a ",[66,67,69],"a",{"href":68},"http:\u002F\u002Fmashable.com\u002F2011\u002F01\u002F27\u002Ffacebook-https\u002F","very important security feature"," (",[72,73,74],"em",{},"of course, you have to opt in for it - funny, usually one has to opt out of new ‘features’","). Enabling secure(r) browsing means that the communication channel between your computer and the Facebook server is unreadable to the dude sitting behind the next table.",[33,77,78],{},"I’m sure you have connected to a free WiFi hotspot and seen the default welcome page that seems impassable unless you click on the “Yes, I take full responsibility for my actions while in your network” button. That's all warm and fuzzy, but it's also possible to configure the welcome page like so that it redirects you to a website of the owner’s choosing after you click on the button. That’s usually the companies website.",[28,80,82],{"id":81},"so-what-the-hell-happened","So what the hell happened?",[33,84,85,86,89],{},"With that background comes the main point of the post. The network I connected to had decided that the redirect page (",[72,87,88],{},"after I click “Agree, let me use your WiFi”",") should be their Facebook page. Okay, all well and good.",[33,91,92],{},"Except...",[33,94,95],{},"Remember that the connection to Facebook is not encrypted by default? And since I was already logged in from earlier, the data would have moved openly across several network hops, for everyone with motive to see, capture and\u002For modify.",[33,97,98,99,107],{},"Even if I weren’t already logged in, extensions like ",[66,100,106],{"className":101,"href":103,"rel":104,"title":106},[102],"zem_slink","http:\u002F\u002Fwww.lastpass.com",[105],"homepage","LastPass"," do that automatically. As if the initial request weren’t enough, there are loads of hidden background queries to and from the Facebook server - the chat window, friends online, notifications... all moving over the unsecured HTTP, wireless.",[33,109,110],{},"Not scared? You should be. Identity theft could sound like an obscure idea, but think of what you’d do if you had a day to live and no responsibility for your actions. You’d probably rob a bank or something.",[28,112,114],{"id":113},"conclusion","Conclusion",[33,116,117,118,121,122,129],{},"Weren't it a beautiful world of rainbows and butterflies if everyone knew at least a little about the threats in (",[72,119,120],{},"open",") networks? If you must check in with your digital social life, opt in\u002F",[66,123,125],{"href":124},"http:\u002F\u002Fnakedsecurity.sophos.com\u002F2011\u002F01\u002F28\u002Fhow-to-enable-httpsssl-encryption-to-secure-your-facebook-account\u002F",[126,127,128],"strong",{},"enable the goddamn encryption",". It’s a one-shot deal, doesn’t cost you anything and is a hell of a lot better than explaining to Tim that you are not “It’s complicated” with his wife.",[33,131,132],{},"Also, a note to the unnamed coffee shop - please don’t pull stunts like that - throw the visitor to the wolves... or at least give a five second warning or something!",[33,134,135],{},"P.S I’d like to know more about what Facebook actually does when the user is idle - what type of queries move between the server and the client. Please leave a comment below if you know something about it.",{"title":137,"searchDepth":138,"depth":138,"links":139},"",2,[],"Opinions",null,"2011-09-01","md",{},"\u002F2011\u002Fanother-reason-to-distrust-open-wifi","about 3 minutes",{"title":23,"description":35},"2011\u002Fanother-reason-to-distrust-open-wifi",[150,151,152,153,154,155,156,157],"google","facebook","privacy","security","Wi-Fi","https","network","wep",638,"Y0ePCBtggRvOo7YZBk5SoRbF9B_B8onGEMNDHM6yx-U",[161,165],{"title":162,"path":163,"stem":164,"children":-1},"Garage48 Tartu 2011","\u002F2011\u002Fa-good-way-to-spend-the-weekend-garage48-tartu-2011","2011\u002Fa-good-way-to-spend-the-weekend-garage48-tartu-2011",{"title":166,"path":167,"stem":168,"children":-1},"Opinions: Be a Developer, Not a Programmer","\u002F2011\u002Fbe-a-developer-not-a-programmer","2011\u002Fbe-a-developer-not-a-programmer",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":170},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"m12 19l-7-7l7-7m7 7H5\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":172},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M5 12h14m-7-7l7 7l-7 7\"\u002F>",1790886933294]