Oh wow this shit again. @joepie91 you are very wrong about VPNs and this is the sort of mess that gist thread leads to if you ever see this. Has OP never heard

Oh wow this shit again. @joepie91 you are very wrong about VPNs and this is the sort of mess that gist thread leads to if you ever see this. Has OP never heard of responder? Things other than browsers are actively making and accepting network requests all the time. Plenty of sites by default have port 80 open and redirect to 443 (can be intercepted). Please do not spread harmful information. Never (ever) use an open wifi without a VPN. Edit: My favorite APT that abuses this: https://www.kaspersky.com/resource-center/threats/darkhotel-malware-virus-threat-definition https://www.kaspersky.com/resource-center/threats/darkhotel-... Oh, and if you have corporate VPN make sure there is no split tunneling. And even with a good VPN, make sure to set explicit restrictive host firewall rules. As in no traffic allowed to the public wifi interface subnet aside from captive portal and dhcp (e.g.:wpad)