they very well may have a sniffer and data miner because they derive pleasure from causing others pain.
IMO if someone is using someone elses wireless connection without permission and the owner of the wireless connection does something malicious, the person using the wireless connection without permission deserves it.
It kind of reminds me of the stories you hear about a burglar breaking into someone's house, hurting himself by tripping on something or what have you, and then suing the owners of the house for his injury. Pretty damn stupid.
More like, if you come in my house without permission, whether I've got my door locked or not, you deserve anything that happens to you because of it. It's you're own damn fault for coming in.
Well, the site should be using SSL if they handle credit card info, but with enough computing power and free time, sure, why not? More likely, it starts with using an unsecure service like webmail. From there, they can reset your paypal password and find out your bank account number and so forth.
Hmm, I'm using my neighbor's wireless connection I believe. It's somebody on my block, that's for sure. I have no idea how I can just connect to it without any problems. It's sweet not paying for internet though.
So this leaves me vulnerable for anything he/she may try to do?