News for hackers. Stuff that matters.
Re:Advice to avoid public Wi-Fi is mostly out of date by detaro on Thursday January 30, 2020 @10:27AM (#22191968)
correct, assuming you don't let yourself get tricked into trying without https.
Re:Advice to avoid public Wi-Fi is mostly out of date by JohnFen on Thursday January 30, 2020 @12:37PM (#22193340)
Which, if my experience pentesting is any indication, most people will.
Re:Advice to avoid public Wi-Fi is mostly out of date by aksss on Thursday January 30, 2020 @01:18PM (#22193730)
This. The question of public WiFi often isn’t “can you keep your comms secure if you try”, but “will my average user who just wants stuff to work While traveling be better off on their own mobile hotspot or connecting to dodgy free WiFi?” Unquestionably, they’ll be better off avoiding public WiFi.

Applications like Outlook will warn you about cert problems but still let you bypass them. This could be better on app side, but it’s a reality end users deal with. And when/if IT knows about it, it’s because the user complains that their laptop/Outlook is broken. The avg business user doesn't think about cert chains.