Working on a white hat project to demonstrate the dangers of public WiFi. Got pretty much every open network SSID in my country collected, to keep it white hat I think I'll create a captive portal that asks for details but doesn't actually collect the creds, just pings confirmation whenever someone fills it out, counts up how many devices authenticated.
People don't listen if you just tell them "don't do this it's shit for security" they gotta see it for their own eyes.