Why is Free WiFi Dangerous?

We know public WiFi shouldn't be trusted, but why? What are the risks when do you connect to a coffeeshop network and how can you protect yourself for them?

Music used in this video: Ticker by Silent Partner

Sources

This video wouldn't be possible without the work of others. Here are the sources I've used during my research & script writing:

Spying On a Budget. (2018). The Citizen Lab. Retrieved from https://citizenlab.ca/2018/01/spying-on-a-budget-inside-a-phishing-operation-with-targets-in-the-tibetan-community/

SSL Strip for Newbies. (2016). Whiskey Tango Foxtrot. Retrieved from https://avicoder.me/2016/02/22/SSLstrip-for-newbies/#

Felten, E. (2008). Researchers Show How to Forge Site Certificates. Retrieved from https://freedom-to-tinker.com/2008/12/30/researchers-show-how-forge-site-certificates/

Is there any security threat with open WiFi connection? Stack Exchange. Retrieved from https://security.stackexchange.com/questions/34764/is-there-any-security-threat-with-open-wifi-connection

HTTP Strict Transport Security. Retrieved from https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

IDN homograph attack. Retrieved from https://en.wikipedia.org/wiki/IDN_homograph_attack

Hern, A. (2017). Unicode trick lets hackers hide phishing URLs. The Guardian. Retrieved from https://www.theguardian.com/technology/2017/apr/19/phishing-url-trick-hackers

NORTON WI-FI RISK REPORT. (2017). Symantec. Retrieved from https://www.symantec.com/content/dam/symantec/docs/reports/2017-norton-wifi-risk-report-global-results-summary-en.pdf

Donahue, P. R. (2018). HTTPS or bust: Chrome’s plan to label sites as "Not Secure". Cloudflare. Retrieved from https://blog.cloudflare.com/https-or-bust-chromes-plan-to-label-sites-as-not-secure/

Lawrence, E. (2016). Avoiding the Not Secure Warning in Chrome. Retrieved from https://developers.google.com/web/updates/2016/10/avoid-not-secure-warn

What is SSL Stripping? A Beginner’s Guide to SSL Strip Attacks. Comodo. Retrieved from https://comodosslstore.com/blog/what-is-ssl-stripping-beginners-guide-to-ssl-strip-attacks.html