Network and privacy - public Wi-Fi, IoT, breaches and the private MAC

The network is the perimeter through which you are visible from outside: on open Wi-Fi, through a smart speaker with a default password, in someone’s database after a breach, in the MAC address your phone broadcasts into the air. Let’s go through four typical holes and what to do about them.

Public Wi-Fi

Free Wi-Fi in a cafe, airport or hotel is convenient, but an open network is a favourite place for interception. An attacker on the same network “listens” to traffic - a man-in-the-middle (MITM) attack - and steals passwords, card data, correspondence. Sometimes the hacker sets up a fake access point himself with a name like Free Airport Wi-Fi.

for sensitive operations - mobile internet, not public Wi-Fi;
a VPN encrypts traffic and closes most MITM (but does not make you anonymous - those are different things);
don’t log into your bank or important services from open networks;
check the exact network name with the staff before connecting;
turn off auto-connect to known networks - otherwise your phone latches onto a fake with the same name on its own.

Unsecured smart devices (IoT)

A smart speaker, IP camera, smart TV, thermostat - all online and often with serious holes. The main one: devices ship with a default admin/admin that nobody changes. Hackers scan the network, find such devices, and gain entry to your home network, cameras or even a smart lock. Most smart-device vulnerabilities come precisely from outdated software.

change the default password immediately on every new device;
update firmware regularly - makers patch holes;
put IoT on a separate (guest) Wi-Fi network, isolated from your main devices: a compromised speaker can’t reach your laptop;
disable what you don’t use (e.g. remote access);
buy devices from makers who actually support their hardware;
don’t forget physical access: an outdoor camera can be unplugged and its Ethernet port used to enter the network.

Data breach

Even if you do everything right, your data can leak through a breach of a service you use: billions of accounts are compromised every year. Hackers steal emails, passwords, phone numbers and payment data, then sell them on the dark web for further attacks.

Protection here is not about avoiding the breach (that is out of your control) but about limiting the fallout:

a unique password per service - then one breach doesn’t open the rest (see account security);
MFA everywhere it is offered - with a compromised password they still can’t get in;
watch your email on Have I Been Pwned;
don’t ignore service alerts about suspicious logins.

The private MAC address

A MAC address is the fixed identifier of a network adapter (A1:B3:C5:D7:E9:F2) that the manufacturer assigns to the device. The problem: while searching for Wi-Fi, a phone constantly broadcasts it into the air - even when connected to nothing. This lets shopping centres track your routes, ad platforms build a profile of your movements, and an attacker recognise a specific device.

A private MAC (iOS 14+, Android 10+) substitutes a random address and changes it for each network - so you can’t be stitched together across access points.

Pros	Cons and pitfalls
protection from tracking in town	corporate networks that filter by MAC may not let you in
more anonymity	parental controls by MAC stop recognising a child’s device
harder to build a profile	a provider that tied service to your MAC may break
	it is not full anonymity - traffic is visible by other means

Advice: on public networks (cafes, airports, malls) - turn it on without fail; on home and corporate networks - you can turn it off to avoid technical problems.

Takeaways

Public Wi-Fi is someone else’s channel: do sensitive things over mobile or a VPN, and turn off auto-connect.
Isolate IoT on a guest network and change the default password immediately.
A breach can’t be avoided, but unique passwords + MFA make it almost painless.
A private MAC is essential in public places, optional at home.