Re:Well duh... (Score 1)

Sniffing plaintext packets (no WEP, no WPA/WPA2, etc) of an HTTPS stream (used hopefully for banking/online shopping etc) doesn't give you anything useful -- the protocol itself (HTTPS) encrypts before sending, so what you sniff isn't usable without breaking HTTPS, even with no WiFi protection in place. If they're not on HTTPS, however, it's all over, as you suggest. Shoulder surfing is still probably your best bet :)