Public Wi-Fi Security Risks As Fast As Possible
ฝัง
- เผยแพร่เมื่อ 28 ต.ค. 2015
- Public Wi-Fi hotspots are super-convenient, but are often less secure than your home network. How can they be vulnerable, and what can you do to protect yourself?
Thanks to Braintree for supporting our channel. To learn more, and for your first $50,000 in transactions fee-free, go to www.braintreepayments.com/tech...
Follow: / linustech
Join the community: linustechtips.com - วิทยาศาสตร์และเทคโนโลยี
1:31 Dennis in his natural habitat
+PopCornKilla stockphotos are dennis's natural habitat
I completely lost it there xD
+PopCornKilla I actually didnt notice dennis till i read your comment
+PopCornKilla CAN'T STOP LAUGHING XDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
+PopCornKilla OMG I Died hahaha
The TunnelBear ad would have been the best
3:51
Was that guy disguising himself as himself?
Odd stock photo lol
it's a symbolism of multiple philosophical persona
+Tchitchouan Inouane I'm assuming you mean multiple personality disorder. Then wouldn't the other "him" mask look in some was different. Its like his other personality is a exact copy.
+drink15
yeah that's what i meant but even an exact copy of yourself can't be your own true self of which the other self is originally based
+drink15 he's disguising himself as his twin.
In my first year of software development in college, during our orientation, we were warned on the first day to never purchase anything with a credit card because people have had their numbers and identities stolen before. It is also noteworthy that my college was teaching a networking security course and it was discontinued because a student was able to rig the results of the student association elections using the skills they were taught.
Program too successful it had to be killed
What if all I send to my friends are only dank memes? Am I safe?
yes
the danker the better
Your rare Pepes could be stolen.
wait, u have friends?!! /jk
+SOnicpower451 Nope your password could be stolen ANYTIME unless you're sharing a link togheter that links to you and your partner via a website or another server wich you chat with eachother without logging in like using Omegle & a simple 'tag' for what you want to see and you just simply tell your friend to come on omegle & give him your 'tag' or intrest you put in before you start chatting with "random strangers" and wala you've just found a way to Skype without Skype.
You say well hey there Julian how ami suppost to tell my friend that... well yeah true but if you have he's phone number you could TEXT him.
Linux as fast as possible
+Quietbut_Deadly Linus as fast as possible
lexus as fast as possible
+Quietbut_Deadly That would be a pretty long video.
+Quietbut_Deadly Linux is a kernel used by the GNU operating system. The end.
+Quietbut_Deadly Linux is a kernel used by the GNU operating system. The end.
Just discovered this channel. Good stuff.
:D
+TechSource Yeah :) Btw your channel is also good
Omg it's u!! Ur videos are amazing man, keep it up :)
*just discovered isn't true
+TechSource You never got to my setup during the LG ultrawide giveaway so I unsubbed out of rage.
Linus just said dank memes... life complete
he says dank memes often
+Joy Fud why do you both have a red background and black text?
Great video as always! I had hoped you would touch on the comcast hotspot issue. I hear I should turn it off, but I would love to know the actual security risks it poses? Perhaps that needs its own video...
thank you very much for your clearcut points
Using a VPN can also help you get around a school's network filter. Use an app called VPN Defender, and disconnect when you are on your home network or on a data network.
Love the transition men xD
Awesome stuff :)
0:06 - Jian Yang!
I love that show.
Great reminder, thanks a lot👍
Thanks for the glasswire heads up
It's not letting me close out of the comment box so um yeah hi
What up
It does that for me too sometimes.
How about different display technologies (IPS, AMOLED, etc.) as fast as possible? I've always wondered how these work.
Very useful information! 👍🏼
Absolutely agree. These days snoopers can attack from anywhere. This is the exact reason why I installed purevpn to keep myself safe as i have to travel alot in my job and sometimes i have no choice but to use public wifi
No1 tip - use the internet speed meter always notification (may be it's inbuilt or download one third party like internet speed meter lite)
And when ever your data is being transferring (For no reason)you can see it by seeing the high speed in the notification.
Once I connected a open wifi in a shop and I suddenly see that my internet consumption suddenly increased,I I instantly off the wifi .
And then see the data usage stats and I noticed that
In past few seconds my chrome and message app data usage become 100s of MBs.
Proof that all of this data is transferred to some hacker.
Be aware !! 🙅
getting hacked through wifi is like getting attacked by a shark or eating tampered halloween candy... it doesn't happen. why freak out if it doesn't happen?
Great video Linus
"A screen door made of... cheese." I laughed out loud at that sentence.
Good tips Linus!
Couldnt a hacker use the SAME SSID as the public hotspot and so you wouldnt know if your connected to the real hotspot?
yes, this is called Evil Twin Attack, google it up
You can easily do that if you have a wifi pineapple. Also if you do a deauth attack after you have your fake network setup then most everyone would reconnect to your network.
I experienced it today, the logon screen don't showing and only HTTP(S) should working (OpenVPN didn't working), but minute later it was connecting to real and I logged into my OpenVPN server. You need it. No exceptions. Period.
I feel that my Home Net are safe and I own a good router and a NAS that have VPN functions, but I has never use them just for I lack the knowledge how to set it up and what I actually can do with my router and NAS. Can you do a small quickie about that?
if on an unsecure network, is only your browsing during the connection hackable? Other information such as your passwords and financial accounts - that you do not use during the unsafe connection - are not hackable, are they?
Question, if I set up a VPN server on my router and connect to it via my android phone on a public WIFI, will it be secure when using apps (gmail, etc) while on the public WiFi? Or is that security only when accessing items on my home network ? Will it do a passthrough once connected and use my home internet for everything?
Speaking about public Wi-Fi, some of them have time limits. And you have to "check in" to gain access to them. Is there a way to reset or even remove the time limit on them? I have asked this question before on the forums but didn't get much help on the subject.
Yes, change your MAC address.
Don't Signed SSL certificates keep your transmission encrypted from your device all the way to the server/website etc. your trying to access?
So how can you install a public wifi for a local cafe resturant. Currently i have a modem from the isbn.
VPNs are useful for more than just having a secure connection. GEMA in Germany forces TH-cam to block a large number of (mostly music) videos. Me? I set up a VPN to the US when I was stationed in Germany, allowing me to access any content I could access in the US but not in Germany.
If you use a VPN could the transmission be intercepted between your device before it reaches the VPN's proxy server where it's encrypted??
Also could the VPN service track all of your internet usage and record it?
So close to being the best sponsor moment!
How does this work with mobile apps? If I am on public wifi (xfinity wifi, etc...) should I go through the browser for sites like reddit, facebook, netflix, etc... instead of using the mobile app?
Linus: can you please do a video to explain how we might identify if the VPN service we have bought is actually trustworthy.
The VPN I purchased CLAIMS that the traffic is encrypted, CLAIMS that the servers are in 36 different countries, and CLAIMS not to keep logs of our activity. How do I know that the VPN service isn't actually Skippy sitting in his mom's basement in Saskatchewan, monitoring all my activity and just waiting until I put in the ID and password for my facebook, or email, or online banking.
Is there any way to identify if any of the claims of my VPN provider are actually true?
+Bill Anderson
+1
I too wanna know the same :) Good question
+Tim Vels Why didn't you like the comment if you replied with a +1?
The Dennis Photoshop is fabulous
so if i was connected a bit to public wifi, but then i connected back to a private wifi network, is my information safe? i also clicked forget this network for the public wifi network to be safe. would i be safe?
I would like to see a video about DPC latency.
How can you force a site to use https if it doesn't use it in the first place? Won't the site go through some place first before going to you? How would know that place (extension) is 100% safe then?
TH-cam needs to get that resolution upload problem fixed.
+HelpMyDevice ya min ago it was 360p now 480p
+Ajay Singh It's 720 Atm :)
+HelpMyDevice YT always does this. It just needs some time to process all the different resolutions
+HelpMyDevice it's not a "problem".
+HelpMyDevice It not a problem. The only way to "fix" it is to delay the video until all resolutions are ready, but that's not really "fixing" it.
What is the best option(s) to secure a home router with a VPN?
Would using TeamViewer on public Wi-Fi to access my PC at home help secure my traffic?
Isn't the first one Linus was talking about a MiTM attack? He made it seem like the second one was different or am I mistaken?
Which program can i use to spec the trafic?
good vid thankyou for making these mlg videos lmg.
My ISP dropped my family because i was downloading too much DANK MEMES!!!!!!!!
Informative video
Confused? If I use VPN, that more then likely would require me to use a username/password, wouldn't that mean the attacker can get that hold of that? The same goes for HTTPS?
Techquickie please respond, do you have a video explaining how to use VPNs?
You know there's plenty of msf exploits that still work on many windows machines which will give you a remote command line to their computer with the ability to upload files just by being connected to the same network and having kali 2.0 on your laptop in the shady white van outside. From there you could launch a RAT on their PC, and when that happens VPNs and https aren't going to help.. at all.
But Linus, why linustechtips page not have https thing?
Actually many public wifi locations are now straight up blocking VPN connections because the owner of the public wifi can't see what your doing.
"The shady white van parked outside"?
I'll have to use that one some time.
What is the difference between buying a boxed CPU and a Tray/OEM CPU???
the 6 who disliked are probably hackers that don't want you to be safe
yes, but arent almost every app/website aware of this today and use https and such(the major ones like instagram or twitter or youtube)...or are they also able to read that that too
+THE16THPHANTOM
should have kept watching
love the videos
Whatever would Linus do without his over-abundance of stock photos.
This quality reminds me of TH-cam '05!
If I know the SSID and key, I can just setup the exact same SSID and run a bet that the guy behind me's laptop will find my signal more acceptable than the house router. Throw in a signal disconnect to all nodes connected to the house router and I have a very good chance of everyone choosing my AP when they re-associate.
For real ? I thought you guys will have TunnelBear as the sponsor !
I did some intercepting on a wifi hotel network just as a test and now some dumb neighbor is on my home wifi trying the same so I'm looking for a way to get his ip and ddos him
The opposite of connecting to malicious hot spots is "war driving"; where the bad actor tries to connect to your hot spot or network.
Need to be careful using both avenues of connecting.
DANK INTERNET MAYMAYS AS FAST AS POSSIBLE
IM STILL WAITING LINUS
Against Man in the Middle attacks HTTPS is just a formality (actually, almost everything is useless against MiTM, check ssl strip for more info.
Then which Wi-Fi network is secure? seems like every network can be exploited, even my university Wi-Fi which uses wpa2 encryption.
Will I be as secure if I use Tor browser instead of a VPN?
sadly all the people at the public library dont even know what a cpu let alone a router or modem is sooooo pplz that know little to nothing about pc that ask them for help just get blank stares. i fixed one of their WIFI issues and they asked if i could work on weekends there but then found out by "work" they mean volunteer and i said pay me then ill work and they said NO.
How do I trust a lot of your information Techquickie posts? How can I trust you? Just wondering.
+ModernCoolCat Test information on his other videos to see if LMG is legit, or if they're full of shit. It's that simple.
What do you think about Wi-Fi Passpoint? It was meant to be the next new thing in Wi-Fi but has not happened.
didn't address that window of time one spends between clicking through a captive portal and firing up a VPN (hint: minimize traffic/dont run background net apps till you are in the VPN...) -- Also, if in doubt, just tether to your phone, BT or Wifi...
HTTP over TLS is secure, but still vulnerable. And not every VPN service provides encryption.
youtube does not have the lock icon
can a mitm attack be seen by using the tracert command?
I have a question: can the guy running the vpn sy on your data? I use a vpn daily and I'm pretty worried about this.
I did some intercepting on a wifo network and now some dumb neighbor is on my home wifi trying the same so I'm looking for a way to get his ip and ddos him
SSL/TSL doesn't protect again MITM attacks especially on Public wifi ether because it too requires a handshake which if the person is already routing traffic through there computer from the wifi they can also intercept the handshake process of establishing a secure connection by taking the key themselves and then giving you a key for there connection and this probably would fool someone good with computers but for the lay person this might make them think they have a successful connection with the said site but it is being routed through the MITM's computer where then they can encrypt the data send it off to the server and then return what comes back.
What exactly does HTTPS do? Does it encrypt data before it's sent over any networks? If so, how?
+DeusGladiorum lmgtfy.com/?q=How+does+HTTPS+work%3F
+DeusGladiorum Using certificates you ask for something to a site the site send you a key to encrypt the data but only the site can decrypt the data. If you see a certificate warning when you using a well known site then someone is trying some shit. If you see a certificate warning on a not well known site maybe is becouse it is not in the database of your browser. As you can see i did a bit of reserch about this :)
Hey I have a legit question. If someone ssl strips me or makes a fake dns server am I safe then with using https? If they get my ssl handshake isn't it like really easy for them to see all the data flowing through?
Finally someone on the web are saying it right! Attackers instead of hackers
But with VPN, are you able to connect to the VPN before connecting to the public wifi?
no. you have to have the internet connection first. vpn itself doesn't have the internet connection.
sub system anallicktics and how your files and and interaction really works over the www
why not tunnel bear advert? that wouldda been dope, but sweet video man
Does Techquickie have a consistent upload schedule?
+rainbowdashzx no
+rainbowdashzx No.
+rainbowdashzx Yes.
+rainbowdashzx 17
+rainbowdashzx I want to change my answer.
Maybe.
Uhh Linus what you described about stealing the handshake can be done without the attacker needing to be connected to the access point. If they are connected you're pretty much fucked as they can get everything.
not exactly, yes anyone can capture the handshake but it will be encrypted, so in order to have access to the data you first need to crack the handshake
+Daniel Lee Which isn't very hard because rainbow tables and people still thinking it's ok to have passwords under 12 characters.
+Saelaniify You already gotta have some skills for that. However, to connect to this free wi-fi and steal a handshake along with the data, all I need is 1 week of learning.
*****
I am aware of this as well, perhaps I should have stated it tho as it is a very important thing to mention. I was just more pointing to the language stating the attacker needs to be connected to the network, which they do not. If they are on the network you're pretty much screwed.
+Saelaniify Hey you guys obviously know your stuff. What I'm wondering is how easy is it for someone to steal the handshake? Also, if I then log into online banking afterwards (which has https), am I compromised?
Gf learning programming in uni, and she said that its just as easy to hack in https as in http. Well that is for someone with knowlage.
"Rick Astley - Never Gonna Give You Up" What did I do to deserve this in list on the right side of the page?
That's why I use my hotspot on my iPhone to get online on my laptop
WHY DIDNT YOU USE TUNNEL BEAR FOR THE SPONSOR!? XD
i use [Betternet or hideme] for the VPN
0:26 that is literally all I do on public wifi.
Could you make a video about the best free and paid VPNs or at least direct me to a video on the subject?
TunnelBear should totally have sponsored this one!
Out of curiosity, anyone know who edited this video?
Mr Linus, at 2:44, can someone steal your https encryption key as well?? I'm new to networking and i'm not sure about tls and stuff
LMG whats with the static?
Can't you use tor?
HD will be available when the video has processed
Okay guys these are my specs , intel(R)core i7 2600 cpu @3.40GHz -3.70GHz , ram is 8.00 gb,system type= windows 7 ultimate 64bit operating system(6.1 build 7600) , internal hard disk =1 .0 tb western digital , cooler master fan, chip type ati display adapter , graphics card= ati radeon hd 5400 series, graphics memory 4083 mb
is this any good? i really dont know much about pc and stuff but my pc lags when i play like pes2016 and payday2 , are these specs shit? should i get a new cpu ?thank you