Context. I am moving in to a building where neighbors share WiFi. There are several routers connected with each other, and residents connect to one of the WiFi networks. I was told it's cheaper that way and the speeds are good.
Concerns. I don't know who set those routers up and with what settings (like isolation or logging). I also don't know my neighbors and what they're up to. I don't have any reason to distrust them, and in fact there are cameras in the building, but I'm trying to understand the attack surface.
Assumptions. It's my understanding that each WiFi network is a LAN where people can sniff each other's traffic and connect to each other's ports. For example, if I run a website on 0.0.0.0:3000, my neighbors will be able to visit it if they find out my local IP. (I already do this on my phone to test my websites on mobile, but I do it on my own LAN).
Is it true that a neighbor can see what websites I visit (DNS queries are usually sent in plaintext, plus source/destination IPs are unencrypted in the IP packets), but they won't be able to make sense of the data because the traffic is sent over HTTPS? For example, they can't see my password when I log in to online banking.
Also, is it possible that a neighbor could exploit open ports on my phone and/or laptop, potentially compromising my devices with remote control or malware?
Risk mitigation. Here is what I think I could do:
- Ask the landlord to set up a separate network just for me. I would be the only one that has the WiFi password. I don't know if this is enough considering the routers are interconnected. But I believe this will thwart nosy neighbors.
- Ask the landlord to connect my own internet service just for my household. This should be more secure because I'll have my own router that I can safeguard.
- Use a hotspot on my phone. However, I'm not sure how secure mobile data is, and I'm certain the speeds will be much lower.
Is there anything else I could do, and are there any other dangers I missed?