A decade of security advice trained people to fear open Wi-Fi networks above almost everything else. Some of that fear is now outdated, and some of it was always pointing at the wrong risk — both are worth untangling.
What has genuinely improved
Most of the web now uses HTTPS encryption by default, including in browsers that actively warn you before loading an unencrypted page. That single change means the classic scenario — someone on the same coffee-shop network silently reading your email or banking session in plain text — is far less realistic today than it was when that warning became common advice.
What is still genuinely risky
The residual risk on public Wi-Fi has shifted, not disappeared. A malicious or compromised access point can still redirect you to a fake captive-portal login page designed to harvest a password, and older apps or background services that still use unencrypted connections — far more common than most people realize — remain fully readable to anyone else on the same network.
The bigger, less-discussed risk has little to do with the network itself: apps on your Mac that quietly send analytics, advertising identifiers, or location data in the background do exactly that whether you are on your home network or a stranger’s hotspot. Public Wi-Fi does not create that behavior — it just puts it on a network you trust less.
- HTTPS has made passive eavesdropping on public Wi-Fi far harder than it used to be for most everyday browsing.
- Fake login portals and unencrypted legacy apps are the more realistic residual risks today.
- The apps quietly phoning home in the background are doing it everywhere — public Wi-Fi just makes the destination less trustworthy.
How FireAI and HisnLabs fit in
The safest move on public Wi-Fi isn’t paranoia about the network — it’s knowing what your own apps are quietly sending while you’re connected to it, which is precisely what a per-app connection view is for.
FireAI is HisnLabs’ own product: an on-device AI firewall for Mac. It shows every connection your apps make, in plain language, and lets you decide what leaves your Mac — its AI runs locally, so your traffic is never sent to us or anyone else. HisnLabs’ security research team is the group that keeps that decision-making accurate: cataloguing which domains are ordinary telemetry versus a real product, tracking the country and network behind a connection, and training the on-device model (its Autopilot feature) on real traffic patterns, all without any of it leaving your Mac.
You can read the technical decisions behind it, or try FireAI for 17 days, at FireAI, by HisnLabs.