DEV Community

Cover image for How do you practice safe public wifi access?
Peter Kim Frank
Peter Kim Frank

Posted on

How do you practice safe public wifi access?

What methods and/or tools do you employ to stay safe while using the internet from a public wifi connection?

Image via Unsplash

Oldest comments (56)

Collapse
 
hendrikfoo profile image
Hendrik Richert • Edited

My router offers a VPN service out of the box, so I connect there any time I'm in an untrusted wifi. Super handy when travelling with limited roaming-data.

Collapse
 
yucer profile image
yucer • Edited

Do you mean a VPN Service hosted on your router?

Mine also, but I don't enable that because then that it's counted as incoming and outgoing traffic by my internet provider and discounted from my monthly quote.

Collapse
 
hendrikfoo profile image
Hendrik Richert

Yeah, exactly. I'm in the lucky situation to have uncapped giga up/down so this works fine for me.

Collapse
 
nickytonline profile image
Nick Taylor

VPN. For work, we have one by default and if I'm at a café working on open source or anything else on my personal devices, I use a VPN as well. Currently I'm using NordVPN.

Having said that, 2019-10-21: NordVPN confirms it was hacked | TechCrunch, so I may need to look for a new VPN. 🤔 Suggestions welcome

Collapse
 
thomasbnt profile image
Thomas Bnt ☕ • Edited

Hello ! I already tested Mullvad VPN and i like it! It's 5$ per month.

Very easy to use.

You can pay with Paypal, credit card, Bitcoin and more !

Mullvad Payment process

Collapse
 
glennmen profile image
Glenn Carremans

I currently use PIA (Private Internet Access) but once my subscription is expired I will probably switch to Cloudflare Warp, unfortunately it seems that they only support mobile.

Collapse
 
phlash profile image
Phil Ashby

Possibly not your thing, however I run my own VPN server in Azure using tinc and/or plain ssh tunnelling (SOCKS) on a small Debian VM.

I also ensure my browser forwards DNS lookups over SOCKS if I'm using that protocol, and my VM relies on Azure DNS - I could run my own dnsmasq based full DNS but meh.. at least it's out of the grasp of the local hotel / Cafe full of sniffers, etc.

Collapse
 
tallship profile image
Bradley D. Thornton • Edited

Sure, happy to help :)

First, this article will have you up in less time than it takes to read the docs from a commercial solution.

Second, you can do it for less than five bucks per month on a fast, private machine of your own that is on no ones radar:
bit.ly/2PbCNdV

This next article, recently updated, has been around a while, and points out added advantages and possibilities such as also having the convenience of your apps running via X on your remote, fast, and secure sever:
bit.ly/383a43C

I hope that helps

Collapse
 
codemouse92 profile image
Jason C. McDonald • Edited

Firewall. ProtonVPN, if there's any concerns. HTTPS Everywhere plugin. I also override my DNS by default.

Collapse
 
nickytonline profile image
Nick Taylor

Do you use Cloudflare's 1.1.1.1 or Google DNSes or something else?

Collapse
 
codemouse92 profile image
Jason C. McDonald

I use 1.1.1.1. I don't trust Google any further than I can pitch their server farm.

Collapse
 
bengreenberg profile image
Ben Greenberg

VPN. Although, nothing is 100% safe, but definitely makes it a bit better.

Collapse
 
erebos-manannan profile image
Erebos Manannán
Collapse
 
moritzweber profile image
Moritz Weber

Possibly stupid question: Is this still a problem with https?
There should "only" be metadata visible to the provider and potential adversaries or am I missing something here?

Collapse
 
yucer profile image
yucer

There are many services that your pc might be using. Not just https.

For example.... One email client, a chat service, or any other app that uses a protocol different from http / https.

Collapse
 
moritzweber profile image
Moritz Weber

Ah, of course. I just thought about web browsing...
Thanks :)

 
nickytonline profile image
Nick Taylor

I know what TLDs are, but the rest I got kind of lost. Is this just running your own DNS server?

Collapse
 
qainsights profile image
NaveenKumar Namachivayam ⚡

I use 1.1.1.1

Collapse
 
bscott profile image
Brian Scott

1.1.1.1 is not a true VPN, only encrypts your DNS requests not the traffic itself.

Collapse
 
qainsights profile image
NaveenKumar Namachivayam ⚡

Agreed. It doesn't hide the location, but 1.1.1.1 + Warp improves security.

Thread Thread
 
bscott profile image
Brian Scott

I have some reservations about Warp+, spending $4.99 to improve speed which several benchmarks show it actually doesn't improve the speed of your connection.

Agreed on the improved security bit.

Thread Thread
 
qainsights profile image
NaveenKumar Namachivayam ⚡

I agree again for the pricing part. But Warp+ improves the speed by avoiding internet traffic jams.

Collapse
 
perigk profile image
Periklis Gkolias

I am following a very plain solution, which is I use keepsolid VPN to access any Wi-Fi point.

I know this is a bit insane but I use it even on my Wi-Fi good because I don't trust myself :P but to make sure I will not forget to enable it when I really need it

Collapse
 
carlosguzman profile image
Carlos Guzmán

I use OpenVPN.

Collapse
 
boris profile image
Boris Quiroz

I've a docker image with tor[1][2] that I run locally and connect to it as SOCKS5 proxy and route all my HTTP/S traffic through it.
For SSH access, I use ProtonVPN and work VPN.

  1. github.com/boris/docker/tree/maste...
  2. hub.docker.com/r/boris/tor
Collapse
 
bscott profile image
Brian Scott • Edited

I use NordVPN, Proton VPN or Mullvad with auto connect enabled on wifi connections. With DNS set to use CloudFlares 1.1.1.1 for DoHttps

I also have "Little Snitch" installed on my Mac that notifies me of every outbound connection including MacOS Firewall.

 
byrro profile image
Renato Byrro

Apart from using a VPN, what you guys are talking about sounds like an alien language to me.

Is all that something everyone should learn to do or do you consider yourselves kind of extra-snowden-like-concerned-about-security because the CIA is trying to catch you? 😊

Collapse
 
pavelloz profile image
Paweł Kowalski

My recent research drove me to virtual machine with parrot os.
Stndard security/anonymity practices included.

Collapse
 
seanmclem profile image
Seanmclem

I don't use public wifi

Collapse
 
savagepixie profile image
SavagePixie

Same here.

Collapse
 
seanmclem profile image
Seanmclem

It's usually slow or can't connect, needs login so you have to go get a password from some desk or something, need to agree to some weird terms to use. Unsafe on top of all that. In the age of LTE, why bother?

Some comments may only be visible to logged-in visitors. Sign in to view all comments.