Ethical Hacker Rachel Tobac on Online Safety: Public Wi-Fi, VPNs, and Cookies

Public Wi-Fi Risks

• ⚠️ Public Wi-Fi used to be a major risk, but HTTPS encryption has reduced the danger for most sites.
• 🎯 The primary risk now is with free Wi-Fi requiring login, where fake networks like "Wi-Fi Pineapples" can impersonate legitimate ones (e.g., Starbucks) to steal credentials.
• 🔐 Attackers can steal usernames and passwords, and even bypass multi-factor authentication (MFA) by tricking users into providing their second-factor codes.

Understanding VPNs

• 🌐 VPNs are primarily used to obfuscate your location and identity, adding online privacy.
• 🕵️ While your ISP can see which sites you visit, they can't see the content due to HTTPS; a VPN shifts this privacy risk to the VPN provider.
• 🏛️ Recent censorship laws in the UK and some US states, requiring ID for access to certain sites, have increased VPN usage to bypass restrictions.
• 🏢 For work, VPNs are often used to authenticate users and secure sensitive data by verifying their location within the company network.

ID Verification and Data Privacy

• 🛡️ Providing personal IDs or selfies for online verification is increasingly common, often under the guise of child protection, but it poses significant privacy risks.
• 💔 Leaked IDs can expose sensitive information like addresses and personal details that cannot be easily changed, unlike passwords.
• 🤳 If given a choice, a selfie is less inherently risky than an ID, though these systems can often be bypassed with images or animations.

Navigating Website Cookies

• 🍪 Cookies are tracking devices used for targeted ads, marketing, and convenience, not just for making sites