Security Awareness Briefing // Public Networks // A Faustian Pact
Free Wi-Fi, Dear Price
The network with no password has no conscience.
A plain-language field guide to public & rogue Wi-Fi — the free connection that quietly reads over your shoulder.
01 / What it is
Anyone can stand up a Wi-Fi hotspot and name it whatever they like. The fella two seats over can call his phone “Airport_Free_WiFi” or “Gate_A12_Guest” — an evil twin — and your device, helpful soul, offers to join it. Now his phone, not the airport, sits between you and the internet.
02 / How the trap springs
1
Attacker broadcasts a hotspot with a trustworthy name.
2
You connect — no password, looks official.
3
Your traffic now routes through their device.
4
They read, or serve you a fake login to harvest.
→ They don’t need your password if they can borrow your logged-in session, or hand you a login page that looks exactly like your bank’s.
Where it hunts
The best hunting grounds are where people are bored, rushed and transient:
Airport Gates
Cafés
Hotels
Conferences
!
Do not bank at the gateNo banking, no moving money, no logging into anything that matters over public Wi-Fi — airports and hotels most of all. You’re tired, you’re rushed, and that’s exactly the moment it costs you. If it touches money or a password, use mobile data instead.
03 / Why it’s dangerous
No password on a network means no protection on it either.
A fake login page looks identical to the real one — the padlock can lie.
Your phone auto-rejoins a named network it “knows” — including the twin.
Captive-portal pop-ups train you to accept dodgy screens without thinking.
04 / How you stay safe
Sensitive stuff? Use mobile data or your own hotspot, not public Wi-Fi.
Run a reputable VPN — it encrypts everything, even on a hostile network.
Bank from the bank’s app on cellular, never a browser on café Wi-Fi.
Turn off auto-join; “forget” public networks after you leave.
Keep two-factor on — it blunts a stolen password.
A bargain you didn’t read · Signed at the departure gate
An Eriu Technology security briefing · Awareness & defence only