this really isn't secret. the only thing that is "secret" is the wispr specs, because the god damn thing floats in and out of IETF. almost everybody who does ho

this really isn't secret. the only thing that is "secret" is the wispr specs, because the god damn thing floats in and out of IETF. almost everybody who does hotspots deals with it, but that's it. couple of things: - "wispr" is a configurable keyword. thats not how wispr works or is detected. - the probeurl (i.e. the url that a captive network checks for) changes with a wide variety of hotspots. when I last looked, ATT provisioning had 5. - there is no security issues here as far as xml or wispr is concerned. the cached credentials on ATT, for example, are global to all ATT users. not to mention, there's a whole whackload of certificates and whitelists in there to keep you from sending a wispr request to fake access point