Main

Hacker Demonstrates Security Risks Of Free Public Wi-Fi

We constantly hear that using free public Wi-Fi is a serious risk when it comes to our personal information. We had a hacking expert show us the very real risks. WBZ-TV's Christina Hager reports.

CBS Boston

5 years ago

[Music] we were warned repeatedly that using free public Wi-Fi can put our personal information at risk but facing a choice of using up our data or connecting with free Wi-Fi most of us take the gamble so what is the risk wbz's Christina Hager got a lesson from a real life hacker the risk for the public networks is because they're out there they're open unencrypted that attacker can join it just as easily as you can and that's exactly what we did with the help of hacking experts Steve Walker I c
an see all the different networks out there all the different clients and which one do I want to look like wicked free Wi-Fi is available here on the Boston Common and Steve created his own imposter version with a laptop and small device anyone can buy online and that didn't take too long no didn't take long at all anyone closer to his signal than the one the city is blasting out will only see the fake wicked free Wi-Fi option and if your device connected to the real system in the past it could
even automatically join this rogue Wi-Fi network so you just called it the same thing yeah while the name is exactly the same the login page is different and that's my login page that I gave you for Steve's fake Wi-Fi he created these two phishing links to Facebook and Gmail I couldn't in here and now you know my facebook password that's right password was Tiger yeah see Hager that's my name steve is seeing every letter as I type it could you be a fake business and take someone's credit card inf
ormation yep and even if you don't fall for the Lynx once you're connected to the imposter Wi-Fi he knows your every online move you're going to Google anything I'm reading you can see what I'm interested in yep this vulnerability can be exposed through any free and open Wi-Fi at coffee shops stores airports hotels anywhere there's always a risk when you join any type of public Wi-Fi if you do join cyber defence expert Peter Tran recommends turning off any file sharing apps and for iPhone users
this means airdrop and if you're gonna be on public Wi-Fi make sure you're not working with sensitive data or things that you normally would not want to just share with everybody and before typing in credit-card numbers are passwords look at the address bar and make sure you see this lock meaning the website is secure on Steve's fake Google page the address bar didn't even have that lock and instead of Google com you only see a series of numbers that's a big red flag all of this adds up to the r
eason for this advice if you don't have to get on public Wi-Fi don't do it Christina Hager WBZ news

Comments

@tebogo743

You can use that method to kick people out of a public wifi so u can use it alone.

@UnitedKonvict

interviewer: could you take someone's credit card information? hacker: I already have

@sudo_garrett

i just did something similar to this at my cyber defense club. you can even create new DNS names so they’re not as obvious as fake. and the software can copy how actual websites look just by passing the URL during setup

@FrenchBaguette69

FYI lock just means a secured connection to the server. Not that you can't be hacked

@rzxkp7none275

I learned to look at network on pc, cellphone, etc. You will notice names you never saw before. On pc you will see if someone is on iPhone, Android, and see if someone is on your network all the time. You will learn over time who is not supposed to be there.

@clementbonnafous9579

the lock just means that the packet are encrypted using https protocol. Doesn't mean that u re safe

@reese9264

Johnny sin make this video also? :/

@pedrojesusgironrojas5725

Question: Him: yup

@iamyourfatherr3168

Nowadays these mitm attacks aren’t as relevant due to hsts which basically tells your browser to force https and not http which makes downgrade attacks and cookie hijacking significantly harder https also encrypts your traffic so it cannot be read by an attacker where as http does not

@boredguy_0137

Ah yes monitor mode..

@0m4n1

Fact: "The Lock" doesn't mean the website is secure, hackers can obtain that lock as well!

@victoriawicker7511

This very scary but also it's all about paying attention to the very few important details

@vrevivez902

So, setting up a phishing link makes me a hacker ?

@romeljohncultura6681

How did they do that?

@bradleysmith9431

I got a question, can any device with WiFi capabilities be hacked?

@fordhesketh

FYI to the people in the comments, VPN won't necessarily protect you from these attacks. Even though the websites you visit will be secure and not visible to the hacker, they can still gain your IP address since you connected to their "wifi" in the first place.

@ferozreviews

Calling an ip address a series of numbers is actually a hack.

@DarcoXZ

I one time shutdown a whole hotel wifi network out of curiosity. It was dumb but it was worth it. It through the whole hotel into a crazy panic loop. Is it recommended? No! Should anyone try it? No! So why did I do it? To show the way of how someone can walk into a hotel, connect to the guest wifi, and shutdown a network. I hope they fix this before the real bad guys take everyone's information

@SeaRatul1321

Dang bruh if you use beef it also has a ssl secure cert so make sure the url is correct because looking at the lock is not a good idea

@Carandiru1992

Does using wifi on Airplane mode makes a difference , in weather it is easier for hackers to gain excess to your personal data on your phone?