The hourly hotel room is back...and it's still a risky proposition
The FBI released a PSA through the Internet Crime Complaint Center (IC3) reminding the public that using open Wi-Fi networks, particularly at hotels, is risky. The Bureau reminds us that connecting our devices to open and unsecured wireless internet sources increase the risk of being victimized by those with malicious intent. The PSA specifically details the “Evil Twin Attack” where the bad actor creates a look-alike Wi-Fi network using their own equipment. In the absence of proper protection, they have full access to your data when you mistakenly connect to their network “0pen Hilton Wifi” rather than the legitimate hotel network “Open Hilton Wifi”. Notice the zero?
Guests accessing open Wi-Fi networks have no idea how the network is maintained or the health of the physical equipment. The results of an Internet search for “hacking a router” should give you a cold shiver. And most businesses have little financial incentive, nor the technical staff, to ensure that hardware devices are well maintained, updated, and patched.
Why did the FBI feel the need to remind the public about a security risk confronting them from hotel networks? The COVID 19 pandemic and resulting forced stay-at-home orders have decimated the travel industry. Hotel and motels have been hit hard with most hotels struggling to maintain any positive income flow. The COVID-19 pandemic has also transitioned a large portion of the workforce to remote workers who mostly conduct business from their homes. What else has transitioned to remote... schools. Children and parents all trying to conduct their business from the same work areas. The hotel industry was adept enough to recognize the conflict and began offering their rooms for day rates where business people can rent a room for a day or just few hours. A private and professional space to conduct online business in a private office atmosphere completely removed from the chaos occurring in their living rooms and kitchens.
Aside from the cybersecurity aspect of this PSA, it is motivating to see the entrepreneurial spirit of the American enterprise alive and well. As the COVID-19 pandemic and economic shutdown collapsed the travel and hospitality economy, the hotel industry has adapted and changed its business model to profit from a tragic situation that has been completely out of its control.
Cops interpret the concept of a “day fee” hotel as something entirely different; The notorious “NoTell Motel”. These are lower-tier hotels and motels that rent rooms at low rates and many times on an hourly basis. Cops prowl the parking lots of these establishments looking for illicit activities. Local vehicles are a tell-tale sign. There are few legitimate reasons for someone to be at a hotel that is within a 30-minute drive of their home. Although cops hear all kinds of explanations, the truth usually turns out to be drugs, prostitution, fraud, and yes, extra-marital relationships. Generally, nothing good can come out of a hotel that sells private space for an hourly rate. Until now at least!
The most concerning aspect of this release is that the FBI felt it needed to make a statement at all. How do people still not understand that connecting their devices to an open and unsecured Internet connection is dangerous? And what companies are allowing their employees to connect to corporate networks without using a VPN (virtual private network)?
Directly to the point – You must use a VPN if you are connecting to an Internet access point that you do not control. You don't even need to know what a VPN is or how it works. Just sign up for one and use it. They have become stupid simple to use and very reasonably priced. Most services cost no more than five dollars per month and many have multi-year pricing contracts that cost even less. And although they differ in quality, any of the available paid VPN solutions is better than not using one at all.
For general protection and security, I suggest NORD VPN or PIA VPN. No links are provided to show I'm not compensated for that endorsement. Look them up yourself and make a wise decision.
You may not be able to convince the cop that you're at a hotel 5 minutes from your house to only take an important Zoom meeting, but at least you'll be secure doing it!