So, yeah. The wpa_supplicant bug only lets you *impersonate* an AP. It does *NOT* let you MITM it or passively decrypt. This is important.
Show this thread
-
If you're on a corporate network, an attacker *cannot* transparently MITM you. They can decrypt sent packets but they're *dropped*.
Show this thread
And if you're on the Internet / public WiFi, you've got plenty more attack scenarios to worry about.
