Thank you for your honesty. I appreciate it and glad my blog and posts were of use to you. I, personally, have not used the wl12xx driver that allows live frame injection. However, I can safely stake my "reputation" behind my word, that it does exist. I have a sneaking suspicious on who wrote it. And if you doubt the the possibility of its existence - I urge you to take a look at the 50+ RFMON+injection diffs located @ http://patches.aircrack-ng.org/. I can actually remember back in the day when only one chipset had RF monitor mode, specific drivers and tertiary firmware were required to make it work. Now it's stack-controlled and it takes 30 lines of code to allow injection without association. I've been around the block.