It's mind-blowing how at the same time some EU government guys pushing stuff like DSA while other do something like this (which is nice, and a complete opposite, if it's not honeypot anyways).
Indeed from their history of constantly wanting more control and invasive measures, always sold in the name of security, protection of minors, etc.. I'm highly sceptical and always asume the worst.
But those are all publicly available pieces of legislation. It's quite a leap to go from that to just assuming they'll secretly and illegally spy on you through public wifi networks, without any law allowing them to do so. Besides, if they have no problem doing that, why would internet through your European ISP be any safer?
What's the problem with the Digital Services Act?
Yeah, of all the things to criticise the EU for the DSA is a bizarre pick. Challenging techbro dominance with simple and technically-sensible demands on the gatekeepers is a win for the average person in my book.
oh dude, they promised to be privacy friendly! maybe I'm just too american to believe in promises.
You don't have to trust them any more than you trust your local Starbucks WiFi. We're at the point where your traffic should no longer be vulnerable just because you're on the wrong WiFi network.
I feel like the OP you're responding to. Explain how I should be comfortable? The idea creeps me out, but I admit I haven't delved into security for a few years.
HTTPS is used on virtually every site out there these days. That is used to encrypt your traffic from the get go. So specifics of the traffic/request won't be obvious/known. The EU could be big enough to force manufacturers to inject their certificates into devices... could be a man in the middle attack. But you can always just remove certs you don't trust from your devices.
DNS by default is often plaintext. You can setup your device to use DoH or other encrypted versions of DNS.
That leaves just the raw connection analysis... eg, that your device is sending traffic to some known IP... many site share hosts so that can be hard to determine though often not really... Proxy or VPN services can make it impossible to do this type of analysis... but then those services will be able to tell.
Ultimately being able to say that "Shalafi sent some packets to an IP that google owns and received a bunch back" could be email... could be youtube... could be any number of things... at some point it become educated guess at best. And what specifically happened (ex: Watched a video about tying shoes) is simply unknown. It would take a bunch of external additional data to actually tie you to anything directly, eg server logs or other sources... which usually means more than one party is already working together against you. At that point you've got bigger issues usually.
You don't HAVE to be comfortable. But if you use any sort of public WiFi, this is no riskier than any of those networks. They can grab some metadata unless you use a VPN, but likely less than what your ISP already has on you anyway. Basically, there's no reason this should be putting up any major red flags. We're past the days when a malicious access point could MitM most connections due to lack of encryption.
My traffic is not vulnerable, but my device might be.
When you connect to public WiFi, you also share it with others, and maybe someone on that network wants to test out their new hacker skills ?
Maybe not as much of a problem for phones, but that juicy developer laptop running unauthenticated MongoDB with a dump of the production database.. yup, that now “mine”.
Ideally all those services should be listening on 127.0.0.1 / ::1, but everybody makes mistakes. Maybe the service comes preconfigured to listen on 0.0.0.0.
The EU is almost just as bad, I know the bar is high compared to the US, but still.
That's cool. Here in the US, we're this close to banning vaccines. *sad trombone sound
Having a union-wide regulatory framework for soda bottle caps, or mandatory categorization of cucumbers seems a lot less like a government overreach in comparison. Thanks, I guess... 🥲
Title is wrong. It's an old initiative, not even funded anymore. Ran from 2018 to 2020 with 120 Million EUR.
A bit offtopic about a pet peeve of mine, but this is why it'd be super nice if social media that end up getting screenshot had absolute timestamps. Thank you for letting us know.
my bad! I misread the context and had not heard of it before - yet living in the EU. I will change the title. I got confused as I saw their post on LinkedIn, and it was posted recently: https://www.linkedin.com/posts/european-commission_wifi4eu-activity-7359136374895046656-oXYi
It's still active as in, they maintain the hotspots. But I just had a look at the map, and it looks like there's spotty service mostly clustered around tiny villages, rather than providing coverage to areas that actual get significant tourism or other visitors.
Honestly nowadays data plans are cheap on most mobile carriers and they're obligated to have them work accross EU, so you no longer really need Wi-Fi when traveling.
Also, I can see this being easily and constantly exploited via Wi-Fi attacks where hackers set up fake Hotspots with the same name as the closest legit one.
Meanwhile Czech carrier cartel:
BTW free Wi-Fi exploits are overrated with widespread HSTS
Leaving the EU is one of the stupidest self harming things we ever did.
Who are you?
UK if I have to guess.
Do you need that app to connect to a WiFi network?
No, the app is just a map of the hotspots.
Damn, this is so cool.
We could have had this in the States too, but, well, you all know.
This will never be possible in the States. We still have areas with no cellular.
Surely that's unrelated to the billions of dollars that the telecom companies stole from the taxpayer after promising to build out infrastructure?
Ironically enough there's basically a private version of this through Comcast turning their rented CPEs into their own unlicensed wifi mesh, they call it WiFi Pass – they at least have the courtesy to give it to you gratis if you're already paying for residential service.
This would be cool 20 years ago. Now it's just a stunt.
If this does what it says on the box its huge
I think this is mostly for non-EU tourists. You don't pay for roaming in EU anymore so you don't really need WiFi when traveling.
Free Wireless ISP, you say?
cheapskate romanian sounds
Germans are gonna start getting out their old cantennas or nanostations and point it at the closest hotspot
Of course I would never do such a thing, being half german, living in Germany. Certainly didn't live off a nearby restaurants wifi hotspot for almost 2 years.
I want to be European so bad.
Thanks to EU roaming rules...
Not quite. I've come across a few plans that don't offer EU roaming, and also those where there's far less data offered than the regulation requires, or found a loophole.
Let's go for the examples of no EU roaming data:
T-Mobile CZ Twist IoT CR - IoT card, but it offers up to 500GB of data paid once a year (78 EUR), only usable in Czech Republic.
T-Mobile CZ 100GB edition - regular SIM, but also CR-only
Vodafone CZ GIGA 100 + 50 GB - also a regular prepaid, but no roaming
Swan Mobile (4ka) Sloboda Data - 300GB in Slovakia, but 0.144 EUR per MB in EU.
For the last example, they're also the same example that breaches the regulation with other packages. When I did the calculations, they exactly checked out for other 3 MNOs, so I guess I did them right, but they didn't for Swan.
Further confirming this is the fact that they have already received at least 2 (as far as I could find) fines for breaching these RLAH regulations, that is 15,000 and 90,000 EUR, but I suppose that just ends up being cheaper for them, as it still isn't fixed.
Anyway, perhaps they did in fact fix this, with a loophole.
For example, take Sloboda Nekonecno+ for 25EUR/month with "unlimited" (300GB) data. 8.25GB of EU roaming does not look right there.
So what is going on?
On paper, it's split up into base and additional package. Base package is 20EUR, and only has 2GB of data. Additional package with unlimited data is 5EUR/month, and as you could guess, cannot be purchased separately.
So, for base package, you get full allowance, thus 2GB. Additional package is calculated separately, (4.06504065041 / 1.30) * 2 is 6.25. And thus 8.25GB instead of 31.27GB was born.
No taking on EU -run wifi? Those f'rs want to read our private encrypted chats. Why would anyone connect to this?
The EU is not a singular entity. It is possible for it to do good and evil simultaneously.
Why Wi-Fi? All the expense, none of the coverage.
Good luck trying to break through the mobile cartels.
Technology
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.