Not sure if I used the correct terms but what is the difference in security and privacy between downloading from a public wifi (or a closed wifi; with password) and mobile hotspot (sharing 4G/5G data from your phone to your computer)? Which one is recommended or does it not matter?

  • qprimed@lemmy.ml
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    most properly configured public wifi will enable client separation, of course that potentially still leaves lower level protocol and radio attacks.

    • Tetsuo@jlai.lu
      link
      fedilink
      English
      arrow-up
      0
      ·
      1 year ago

      I have no idea what this client separation is.

      As far as I know there isn’t really any client separation on wifi. It’s a shared medium.

      At least I don’t see anything preventing you from reading someone else traffic. So anything unencrypted on a wifi is also accessible to any other clients.

      I had tools more than 10 years ago that could automatically hijack session cookies on wifi for anybody connected and not using https.

      • qprimed@lemmy.ml
        link
        fedilink
        English
        arrow-up
        0
        ·
        edit-2
        1 year ago

        no worries.

        the net effect of client separation is that your device sees no other layer 2 devices on the wlan besides the gateway. this would typically be enforced at the frame level by the APs and is separate from any radio privacy cryptography.

        a properly configured wireless setup would assume every client is compromised and would also disallow local client-client via source routing or proxy ARP or any other escape options. 100% secure? probably not, but its a non trivial barrier that would have to be circumvented.

        as with e.g. broken WEP years ago, there are still options to mess with clients at ~Layer 1 but I dont believe its currently as trivial as it used to be.