The URL address should start with https instead of http. Every time you log in to a website, make sure that your connection is encrypted.Now that you’ve seen just how easy it is for someone to eavesdrop on your Wi-Fi, here’s how you can use a public hotspot with some degree of security: Once I’d done that, I could magically access my Facebook account on that rooted Android phone (see the screen at lower right) without ever providing my username or password from that device. I could have done the same with any other patron’s accounts if they were logged in.

Using DroidSheep, I was able to access my own Facebook page without providing a user ID or password. The formatting was slightly off and some of the images were missing, but plenty of information still came through. The raw packets with HTML code looked like gibberish, but as you can see above, the trial network analyzer I used reassembled the packets and displayed them as a regular webpage view. This is a copy of the email I sent (and subsequently received) using my smartphone connected to the hotspot. While I did see activity from other patrons, I didn’t capture anything interesting, so I visited my own website- my smartphone. I first searched for packets containing HTML code, to see which websites other hotspot users were browsing. My own website, captured via the hotspot packets and reassembled for viewing. Note: You can click on any of these screenshots to view larger versions that are easier to read. The packets appeared on screen in real time as they were captured-much more quickly than I could read them-so I stopped capturing after a few minutes to analyze what I had vacuumed up. I opened my laptop at the coffee shop and began capturing Wi-Fi signals, technically called 802.11 packets, with the help of a free trial of a wireless network analyzer.

Can you check history through wifi