this post was submitted on 25 Jan 2024
91 points (95.0% liked)

Privacy

32165 readers
123 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

TL;DR

Don't use snapchat

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 2 points 10 months ago* (last edited 10 months ago) (6 children)

Shouldn't it be all encrypted with SSL?

All the airport wifi could do is see the DNS requests (and the modern trend is to have DoH or DoT enabled by default, for example in the up to date versions of Android)

[–] JohnnyCanuck 7 points 10 months ago (3 children)

From the article:

A court in Madrid heard it was assumed the message triggered alarm bells after being picked up via Gatwick's Wi-Fi network.

Public wifi without a VPN is like sex without a condom. The connection may not be encrypted (very risky) and even if it is, you are still susceptible to man-in-the-middle attacks: https://www.garlandtechnology.com/blog/how-to-monitor-encrypted-traffic-and-keep-your-network-secure

I guarantee there will be a flood of articles about this over the next few days because of what I quoted above.

It's also possible that one of his "friends" reported him or something like that.

[–] [email protected] 2 points 10 months ago (1 children)

Please explain to me how using Public WiFi is unsafe if the traffic is encrypted with TLS. Unless they somehow installed a keylogger on everyone connected to said Wifi and picked it up from there, the only way this was possible was on some quick text analysis and recognising the IP address from Snapchat

[–] JohnnyCanuck 1 points 10 months ago

The link I provided explains it. They can decrypt traffic through their own devices.

load more comments (1 replies)
load more comments (3 replies)