Wireless security flaws exposed?

[aonibala]

http://zdnet.com.com/2102-1105-839948.html

I bet they were not using AIRONET with all security features enabled.

I think using LEAP with MIC, WEP Hashing, 10-Minute Dynamic WEP Session Key, MAC Filter, and Non-Broadcast SSID will stop this type of attacks.

Audie

[kgulka]

If not using WEP you are exposed to session-hijacking. Cisco's 802.1X and LEAP uses mutual authentication so I would think that the man-in-the-middle attack is not possible (article says MITM attack possible with one-way authentication).