Reading passage
Free wireless internet has become as much a part of urban life as streetlights. Cafes, airports, libraries and shopping centres compete to offer public wifi, and many city councils now broadcast signals across parks and squares. A global survey in 2022 estimated that there were more than five hundred million public hotspots worldwide, and the average smartphone connected to at least three different networks each week.
The appeal is obvious. Public wifi saves mobile data, which remains expensive in many countries, and it often delivers faster speeds than a crowded cellular network. For students, freelancers and travellers, a free connection can mean the difference between finishing an assignment on time and missing a deadline. Some hospitals and train stations report that wifi is among the most requested services in customer feedback surveys. Public networks also keep tourists connected in the first minutes after arrival, before they have bought a local SIM card. For low income families, free hotspots can be the only affordable route to online homework, job applications and government services that increasingly assume an internet connection.
Yet security experts have long warned that public networks carry risks invisible to casual users. Because the signals travel through the air, anyone within range can attempt to intercept them. On networks without proper encryption, attackers with inexpensive equipment can read unprotected traffic, capturing passwords and private messages. Even on secured networks, criminals may set up a rogue hotspot with a convincing name, such as the name of a well known cafe, hoping that customers will connect to the fake signal instead of the genuine one.
This trick, known as an evil twin attack, is remarkably effective. Once a victim joins the rogue network, the attacker controls the connection and can redirect the user to convincing copies of banking or email sites. Researchers demonstrating the technique at a conference in Berlin captured login details from dozens of volunteers within an hour, even though every volunteer had been warned beforehand that an attack would take place. Part of the danger lies in how phones behave. Most devices remember networks they have joined before and reconnect automatically whenever the same name appears, so a criminal only needs to copy a popular hotspot name to attract passing handsets without their owners noticing anything unusual.
The good news is that defences have improved. Most websites now use encrypted connections, indicated by a padlock symbol in the browser, which scrambles data even on a hostile network. Virtual private networks add a second layer by tunnelling all traffic through a protected server. Security professionals advise a few simple habits: verify the exact network name with staff, avoid logging into banking apps on public wifi, and switch off automatic connection to open networks. Experts also recommend keeping the phone's operating system up to date, since many attacks exploit flaws that manufacturers have already patched. Where possible, they say, sensitive tasks should simply wait until a trusted home or mobile connection is available.
Public attitudes, however, lag behind the advice. Surveys repeatedly show that a majority of users have checked email or social media on open networks, and around a third admit to accessing banking services while connected. Younger users, who grew up with constant connectivity, appear the most relaxed: one study found that sixty percent of respondents aged eighteen to twenty four believed public wifi was always safe.
Businesses that provide wifi face responsibilities too. A poorly configured router can expose every customer on the network, so many chains now isolate each connected device from all the others. Some countries require hotspot operators to record the identities of users, a policy intended to deter crime but criticised by privacy groups, who argue that anonymity online is a legitimate need, particularly for journalists and vulnerable people.
Looking forward, the boundary between public wifi and mobile networks may blur. New standards allow phones to move seamlessly between the two, and some operators automatically shift customers onto partner hotspots to relieve congestion at busy times. Whatever the technology becomes, one principle seems likely to endure: a connection that costs nothing still carries a price, paid in attention to how it is used.