Hhonors internet

[JHZR2]

Anyone have any thoughts on the security of the internet at hilton chain hotels? They are seemingly operated/provided by AT&T.

Essentially, you can't get on from a computer without logging in by one of a few different options.

Certainly I'm sure it isn't wpa2 encryption, but does the need to login provide some sort of security improvement?

Similarly, for doing secure things (e.g. checking your bank account), is one better off using an internet like that, or cellular internet over an AT&T LTE connection?

Neither are optimal, I'm sure, but just interested to learn.

 

[Kuato]

Their login is to make sure people don't steal the WiFi; I've used it several times and IIRC there's a warning that it is not a secure connection. I used the wired connection if available.

 

[JHZR2]

Yeah it's not a "secure" connection, but my take is that someone can't just go to 192.198.1.1 or whatever and use a generic admin username and password and start fiddling.

On a unencrypted connection, can anyone pull down any data and steal from it, or do they need to somehow get into the router? Does the login help in any way?

I avoid anything but email or bitog/web surfing on hotel internet, but still curious and appreciate learning.

 

[Donald]

When you go to your bank's website it should be encrypted via SSL. So should any website taking your credit card.

The main objective of WIFI security stuff at a hotel is to make sure you pay if they do indeed charge.

Many stores like Sears or Target offer free WIFI once you click an "accept T&C" box.

You should see https rather than http for the website.

 

[dparm]

If you are visiting HTTPS sites, don't worry about it. There are always man-in-the-middle attacks, rootkits, certificate highjacking, etc. -- nothing is 100% safe. I don't think hotels are any better or worse than your home Internet connection or tethering from your smartphone.

And as others have said, the login is so they can squeeze infrequent travelers for the $9.99 charge or whatever. Anyone who travels with regularity gets status with the hotel and therefore free Internet.

 

[JHZR2]

Originally Posted By: dparm
If you are visiting HTTPS sites, don't worry about it. There are always man-in-the-middle attacks, rootkits, certificate highjacking, etc. -- nothing is 100% safe. I don't think hotels are any better or worse than your home Internet connection or tethering from your smartphone.

And as others have said, the login is so they can squeeze infrequent travelers for the $9.99 charge or whatever. Anyone who travels with regularity gets status with the hotel and therefore free Internet.


Yes but if I have a strong password for my router/modem, and use wpa2 with a complex encryption key, shouldn't that be much tougher to crack then what's going over the air at the hotel?

Guess long story short, I don't understand hacking or securing against it enough, so I err on the side of greater caution, but that's why I'm interested to learn.

 

[dparm]

Originally Posted By: JHZR2
Originally Posted By: dparm
If you are visiting HTTPS sites, don't worry about it. There are always man-in-the-middle attacks, rootkits, certificate highjacking, etc. -- nothing is 100% safe. I don't think hotels are any better or worse than your home Internet connection or tethering from your smartphone.

And as others have said, the login is so they can squeeze infrequent travelers for the $9.99 charge or whatever. Anyone who travels with regularity gets status with the hotel and therefore free Internet.


Yes but if I have a strong password for my router/modem, and use wpa2 with a complex encryption key, shouldn't that be much tougher to crack then what's going over the air at the hotel?

Guess long story short, I don't understand hacking or securing against it enough, so I err on the side of greater caution, but that's why I'm interested to learn.



Maybe. The hotels are using business-grade equipment with more layers of security and manageability than a SoHo router.