A laptop and a decent internet connection are all most devs need to do their job, so why not sip an expertly-made latte while you\u2019re at it? Coffee shops make for way cozier office alternatives, but working from them safely requires more forethought, especially if you plan on deploying code.<\/p>\n\n\n\n
Here are the five main risks working from public spaces like coffee shops come with and how to deal with them.<\/p>\n\n\n\n
While it’s great that coffee shops and other venues are free, it’s also an invitation for trouble. HTTPS encryption has done away with most basic hacks, but you can still get tricked if you don’t pay attention.<\/p>\n\n\n\n
For example, evil twin attacks are still effective since legitimate Wi-Fi hotspots are easy to duplicate. Connecting to a fake hotspot makes it easier to sniff out and intercept any unencrypted data. Attackers also find it easier to redirect you to fake copies of legitimate websites like GitHub or AWS and then steal your login credentials.<\/p>\n\n\n\n
The fix<\/strong>: It\u2019s best to avoid unfamiliar Wi-Fi in public spaces, especially when you\u2019re doing something as sensitive as deploying code. Cellular networks are much harder to tamper with, so it makes more sense to turn your smartphone into a hotspot instead. You can do this abroad just as easily if you\u2019re on an unlimited Global eSIM<\/a> plan.<\/p>\n\n\n\n Deployment requires you to engage with multiple services, from repositories and hosting providers to CI\/CD dashboards. Each of these requires an account and an active session to access, and both can be exploited if you don’t have adequate cybersecurity habits.<\/p>\n\n\n\n Password hygiene is a big one since reused credentials potentially open doors to lots of other services, especially if your email address becomes compromised.<\/p>\n\n\n\n The fix<\/strong>: Securing your credentials takes two steps. You\u2019ll first want to make sure that all dev-related accounts use unique and complex passwords. You\u2019ll then want to secure them with some type of MFA to prevent access even if attackers obtain your credentials.<\/p>\n\n\n\n Also, be sure to always log out of any active sessions before leaving if you use public devices in internet caf\u00e9s or libraries. That way, your account security isn’t at the mercy of the next person who uses the device.<\/p>\n\n\n\n You can pick up much more than the tab if you carelessly use public Wi-Fi. While some attackers redirect you to more obvious login portals, others may infect your laptop with malware. This is a much subtler approach since modern malware can hide itself and become active long after infection. Running your favorite distro isn’t a complete failsafe anymore either, since Linux malware is on the rise.<\/p>\n\n\n\nCredential Exposure<\/h2>\n\n\n\n
Malware Infection<\/h2>\n\n\n\n