If you have a mass target sure, there are better attacks. But if you target is only a single network, packet sniffing is pretty effective and is stopped by HTT

If you have a mass target sure, there are better attacks. But if you target is only a single network, packet sniffing is pretty effective and is stopped by HTTPS. And if you target is a single person or small group of enumerable machines, arp poisoning still works on many (most?) networks. Personally I am more scared of the damage that can be caused by being a direct target than I am having my info in one of those massive dark-web data dumps. Edit: Also, the ops post is actually an example of a MitM (where the ISP is the one in the middle). I just expanded it to the superset.