Re:Advice to avoid public Wi-Fi is mostly out of date
by swiley on Thursday January 30, 2020 @08:56AM
(#22191278)
While you’re probably not going to be instantly attacked, I still wouldn’t do online banking on a public network.
[ Parent
| on HN ]
Re:Advice to avoid public Wi-Fi is mostly out of date
by billyhoffman on Thursday January 30, 2020 @10:19AM
(#22191879)
Honest question... why not?
Modern banks use HTTPS throughout. The banks I use all have HSTS and use preloading so no hijacking to a non-HTTPS site. I use a password manager so if somehow I do get hijacked and get sent to a phishing site, and even if that phishing site is using a Lets Encrypt cert to prevent the “Not Secure” banner in a modern browser, my password manager isn’t going to recognize the domain so it would not let me attempt to log in even if I wanted to.
Re:Advice to avoid public Wi-Fi is mostly out of date
by ceejayoz on Thursday January 30, 2020 @11:04AM
(#22192357)
This comments thread literally starts with someone who discovered their bank's app wasn't validating the certificate, though.
Re:Advice to avoid public Wi-Fi is mostly out of date
by lukewink on Thursday January 30, 2020 @11:23AM
(#22192542)
In that case it wouldn't be safe to use the app on a private network either.
Re:Advice to avoid public Wi-Fi is mostly out of date
by JohnFen on Thursday January 30, 2020 @12:35PM
(#22193326)
True, but doing so on a private network would still be a whole lot safer than on an open AP.
Re:Advice to avoid public Wi-Fi is mostly out of date
by numpad0 on Thursday January 30, 2020 @09:02AM
(#22191319)
Every commercial network is a public network in a sense