Insecure, and I assume that sharing user-specific login credentials is usually against the Wifi-provider's TOS and grounds for termination Sustained abuse (or

Insecure, and I assume that sharing user-specific login credentials is usually against the Wifi-provider's TOS and grounds for termination Sustained abuse (or sharing) should be simple to detect for a service provider with a network that has multiple, widely-distributed hotspots. In other cases, seeing many different MAC addresses use the same login credentials might be a way to detect abuse, though the MAC might not be sent to the ISP by standard access point firmware.