Now the FTC has its say on hotel Wi-Fi

Federal Trade Commission warns consumers about public Wi-Fi dangers

First the FCC slapped Marriott International with a $600K fine for Wi-Fi blocking and issued a follow-up enforcement warning to the masses. Now the FTC has issued a hotel Wi-Fi warning of its own.

This one, however, is aimed more at would-be Wi-Fi users rather than establishments offering or blocking Wi-Fi access. The warning begins:

When you travel, have you used your hotel's Wi-Fi -- maybe to pay a few bills or catch up on a report you need to read? You may want to think twice before logging in to accounts over hotel Wi-Fi. Hackers are using security vulnerabilities in hotel Wi-Fi to steal people's passwords and other sensitive information.

From there, the FTC goes on to explain that users can unwittingly load software from compromised hotel Wi-Fi networks that can result in a damaged network device or stolen data.

The FTC doles out the following basic but sound advice:

  • When using a public Wi-Fi network, log in or send personal information only to websites you know are fully encrypted. Look for https in the web address -- the "s" stand for secure.
  • When you've finished using an account, log out.
  • Do not use the same password on different websites.
  • Pay attention to warnings from your web browser about sketchy websites.
  • Some Wi-Fi networks use encryption: WPA2 is the strongest.
  • If you regularly need to access online accounts through public Wi-Fi networks, you may want to use a virtual private network (VPN).
  • Installing browser add-ons or plug-ins can help. For example, Force-TLS and HTTPS-Everywhere are free Firefox add-ons that force the browser to use encryption, if available, on popular websites that don't normally encrypt.

Join the CSO newsletter!

Error: Please check your email address.

Tags securityftcfccMarriott International

More about FCCFTCMarriott International

Show Comments

Featured Whitepapers

Editor's Recommendations

Solution Centres

Stories by Bob Brown

Latest Videos

  • 150x50

    CSO Webinar: The Human Factor - Your people are your biggest security weakness

    ​Speakers: David Lacey, Researcher and former CISO Royal Mail David Turner - Global Risk Management Expert Mark Guntrip - Group Manager, Email Protection, Proofpoint

    Play Video

  • 150x50

    CSO Webinar: Current ransomware defences are failing – but machine learning can drive a more proactive solution

    Speakers • Ty Miller, Director, Threat Intelligence • Mark Gregory, Leader, Network Engineering Research Group, RMIT • Jeff Lanza, Retired FBI Agent (USA) • Andy Solterbeck, VP Asia Pacific, Cylance • David Braue, CSO MC/Moderator What to expect: ​Hear from industry experts on the local and global ransomware threat landscape. Explore a new approach to dealing with ransomware using machine-learning techniques and by thinking about the problem in a fundamentally different way. Apply techniques for gathering insight into ransomware behaviour and find out what elements must go into a truly effective ransomware defence. Get a first-hand look at how ransomware actually works in practice, and how machine-learning techniques can pick up on its activities long before your employees do.

    Play Video

  • 150x50

    CSO Webinar: Get real about metadata to avoid a false sense of security

    Speakers: • Anthony Caruana – CSO MC and moderator • Ian Farquhar, Worldwide Virtual Security Team Lead, Gigamon • John Lindsay, Former CTO, iiNet • Skeeve Stevens, Futurist, Future Sumo • David Vaile - Vice chair of APF, Co-Convenor of the Cyberspace Law And Policy Community, UNSW Law Faculty This webinar covers: - A 101 on metadata - what it is and how to use it - Insight into a typical attack, what happens and what we would find when looking into the metadata - How to collect metadata, use this to detect attacks and get greater insight into how you can use this to protect your organisation - Learn how much raw data and metadata to retain and how long for - Get a reality check on how you're using your metadata and if this is enough to secure your organisation

    Play Video

  • 150x50

    CSO Webinar: How banking trojans work and how you can stop them

    CSO Webinar: How banking trojans work and how you can stop them Featuring: • John Baird, Director of Global Technology Production, Deutsche Bank • Samantha Macleod, GM Cyber Security, ME Bank • Sherrod DeGrippo, Director of Emerging Threats, Proofpoint (USA)

    Play Video

  • 150x50

    IDG Live Webinar:The right collaboration strategy will help your business take flight

    Speakers - Mike Harris, Engineering Services Manager, Jetstar - Christopher Johnson, IT Director APAC, 20th Century Fox - Brent Maxwell, Director of Information Systems, THE ICONIC - IDG MC/Moderator Anthony Caruana

    Play Video

More videos

Blog Posts

Market Place