I'm sure I read somewhere that the n900's wlan drivers were open (as opposed to the n810 and previous) so it is not that unlikely to be able to inject packets at some point.