Public WiFi Question

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Public WiFi Question

Chip Morris
I feel like this is a pretty dumb question but I’m going to ask it anyway.

I know that if I go into Starbucks, for example, and log on to my bank, it’s possible for others who are on the same network as me to see my login credentials. Here’s where the dummy in me comes out. If I log on to that same bank using my fingerprint, am I still giving out all of that information?

Thanks.

Chip


____________TidBITS Talk Participation Guidelines____________
Post only when you have something substantive to contribute.
Be polite and constructive, and comment on posts, not people.
Quote sparingly, if at all. We all read the previous message.
Start threads with a new message to [hidden email].
Read archives at: http://tidbits.com/pipermail/tidbits-talk/
Unsubscribe at: http://tidbits.com/mailman/options/tidbits-talk
____Mailing List Manners: http://tidbits.com/series/1141 ____
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Public WiFi Question

David Rostenne
Hi Chip,

Others will not see your login credentials.. the connection to your bank is secured so no one can see anything over the network, other than if they have a camera aimed at your and your device… which means that, yes, if you use your fingerprint there is much less risk there too.

Cheers,

Dave

> On 18-July-2017, at 12:13 PM, Chip Morris <[hidden email]> wrote:
>
> I feel like this is a pretty dumb question but I’m going to ask it anyway.
>
> I know that if I go into Starbucks, for example, and log on to my bank, it’s possible for others who are on the same network as me to see my login credentials. Here’s where the dummy in me comes out. If I log on to that same bank using my fingerprint, am I still giving out all of that information?
>
> Thanks.
>
> Chip
>
>
> ____________TidBITS Talk Participation Guidelines____________
> Post only when you have something substantive to contribute.
> Be polite and constructive, and comment on posts, not people.
> Quote sparingly, if at all. We all read the previous message.
> Start threads with a new message to [hidden email].
> Read archives at: http://tidbits.com/pipermail/tidbits-talk/
> Unsubscribe at: http://tidbits.com/mailman/options/tidbits-talk
> ____Mailing List Manners: http://tidbits.com/series/1141 ____




____________TidBITS Talk Participation Guidelines____________
Post only when you have something substantive to contribute.
Be polite and constructive, and comment on posts, not people.
Quote sparingly, if at all. We all read the previous message.
Start threads with a new message to [hidden email].
Read archives at: http://tidbits.com/pipermail/tidbits-talk/
Unsubscribe at: http://tidbits.com/mailman/options/tidbits-talk
____Mailing List Manners: http://tidbits.com/series/1141 ____
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Public WiFi Question

Marilyn Matty
In reply to this post by Chip Morris

> On Jul 18, 2017, at 12:13 PM, Chip Morris <[hidden email]> wrote:
>
> I feel like this is a pretty dumb question but I’m going to ask it anyway.

No question about security is ever dumb, as the odds of risk change all the time.

>
> I know that if I go into Starbucks, for example, and log on to my bank, it’s possible for others who are on the same network as me to see my login credentials. Here’s where the dummy in me comes out. If I log on to that same bank using my fingerprint, am I still giving out all of that information?

I worked for a very security oriented company, and their requirement was to use a vpn for anything you need to keep secure.

Marilyn





____________TidBITS Talk Participation Guidelines____________
Post only when you have something substantive to contribute.
Be polite and constructive, and comment on posts, not people.
Quote sparingly, if at all. We all read the previous message.
Start threads with a new message to [hidden email].
Read archives at: http://tidbits.com/pipermail/tidbits-talk/
Unsubscribe at: http://tidbits.com/mailman/options/tidbits-talk
____Mailing List Manners: http://tidbits.com/series/1141 ____
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Public WiFi Question

@lbutlr
In reply to this post by Chip Morris
On Jul 18, 2017, at 10:13 AM, Chip Morris <[hidden email]> wrote:
> I feel like this is a pretty dumb question but I’m going to ask it anyway.
>
> I know that if I go into Starbucks, for example, and log on to my bank, it’s possible for others who are on the same network as me to see my login credentials.

No, that is generally NOT true. This is what TLS (which replaced SSL) prevents.

HOWEVER, it is possible that a unknown wifi network, though not one like starbuck or mcdonalds or panera, etc) might have a certificate injection policy that would allow them to decrypt your traffic, so trusting an unknown wifi router is not a good idea. And, then of course, you don’t know for sure that the “Starbucks” Wifi is really being provided by starbucks and not by the guy at the next table, so there’s that.

In general, do not access important secure sites (and this includes gmail or webmail) on a public wifi that you do not know well without using a VPN.

--
Apple broke AppleScripting signatures in Mail.app, so no random signatures.




____________TidBITS Talk Participation Guidelines____________
Post only when you have something substantive to contribute.
Be polite and constructive, and comment on posts, not people.
Quote sparingly, if at all. We all read the previous message.
Start threads with a new message to [hidden email].
Read archives at: http://tidbits.com/pipermail/tidbits-talk/
Unsubscribe at: http://tidbits.com/mailman/options/tidbits-talk
____Mailing List Manners: http://tidbits.com/series/1141 ____
Loading...