3 ms·
The biggest problem you will face (or at least need to worry about) is MitM attacks on the insecure wireless, which can be solved by a VPN, ssh tunnel or just f
by jamescun 13y ago
The biggest problem you will face (or at least need to worry about) is MitM attacks on the insecure wireless, which can be solved by a VPN, ssh tunnel or just forcing SSL with extensions like HTTPS Everywhere[1].
Rather than having alerting for connections to services which provide remote access (assuming authenticated using vulnerabilities or defaults), you should evaluate if you need your laptop running an FTP server or whatever other service. And if you do, firewalling that off or only enabling the service when in use.
[1] https://www.eff.org/https-everywhere https://www.eff.org/https-everywhere
- SomeoneWeird 13y agoThis is only effective if you do SSL pinning too.
- xyzzy123 13y agoRandom MITMs in Internet cafes don't have access to root CAs. If you need certificate pinning on insecure wifi, then you need it everywhere.