What Attackers Can Actually Do on Public Wi-Fi