Imo the risk of someone doing something malicious on any particular public network is low enough as to not worry too much.
Real life is considerably different. Let's start with OP's question and narrow down the threats to hotels:
http://www.privatewifi.com/hotel-wifi-hacking-is-on-the-rise/
Tips:
- Engage your firewall. Consider using Comodo.
- Turn off File Sharing.
- Physically type
HTTPS:// at the beginning of the URL to sign into the secure version of the website...if the S ever disappears during your session, stop what you are doing immediately and disconnect.
- Do not use your email client unless you're sure the provider supports SSL, and be sure SSL is enabled in your client.
- If you are going to use Facebook or Twitter, probably safest to just not use Firefox.
- Not actively using the public wi-fi? Turn off your wi-fi...if they don't see you, they can't hit you