It's true. If you can sniff the MAC, it's nothing to spoof one. As a matter of fact, many Windows drivers allow you to enter an alternate MAC address. If they don't, there's easy ways to do it. WPA for now is the way to go. MAC filtering is a good secondary. I don't broadcast, filter the MAC, and use WPA. WEP is almost too easy to break anymore. One word: NetStumbler.

"There's too many notes!" M22ti VP150 EP350 QS8 AVR-2805 SCD595 Panasonic DVD-S35