Level 1 · 1C How the internet works · Lesson 2 of 3
The padlock, public Wi-Fi, and who attacks
The padlock in the browser means the connection to that website is encrypted. It doesn't mean the website can be trusted: phishing sites can have a padlock too. It encrypts the road; it doesn't vouch for who's on the other end.
Public Wi-Fi and things that aren't yours
On a Wi-Fi network you don't control (a café, an airport), someone on the same network can spy on whatever travels unencrypted or fake pages. For important things, like your bank, use your phone's mobile data. A VPN encrypts your connection to another point and helps in those cases, but it doesn't make you invisible or protect you if you hand over your own data.
Also, don't plug in a USB stick you found, and don't install apps from a link someone sent you in a chat: only install from the official app stores.
Who attacks, and with what
Phishing: a trick to get you to hand over your data. Brute force: trying combinations until one works. Malware: a program made to cause damage or spy. The defenses that pay off most are the same as always: updates (they patch known holes), two-step verification, and a password manager.
Review questions
The browser padlock means that...
Answer: The connection is encrypted, but the website could still be fake. The padlock protects the road, not the website's owner. Phishing sites can have one too.
You're on an airport's free Wi-Fi and you need to log in to your bank. What's the most sensible thing to do?
Answer: Use your phone's mobile data. On a network you don't control, someone can spy on you or fake pages. Your mobile data is a network of your own.
What do updates do?
Answer: They patch known security holes. Attackers take advantage of holes that are already known. Updating closes them.