Myth: Avoid public WiFi
Large-scale compromises via public WiFi are exceedingly rare today.
The Myths
This kind of advice is well-intentioned but misleading. It consumes the limited time people have to protect themselves and diverts attention from actions that truly reduce the likelihood and impact of real compromises.
Large-scale compromises via public WiFi are exceedingly rare today.
There is no evidence of widespread crime originating from QR-code scanning itself.
There are no verified cases of “juice jacking” in the wild affecting everyday users.
Wireless exploits in the wild are extraordinarily rare and typically require specialized hardware, physical proximity, and unpatched devices.
Clearing (or deleting) cookies doesn’t meaningfully improve security or stop modern tracking, which now includes identifiers and fingerprinting other than cookies.
Frequent password changes were once common advice, but there is no evidence it reduces crime, and it often leads to weaker passwords and reuse across accounts.
Modern research shows that the most important factor in a strong password is length, not complexity (sometimes called “composition”).