a confirmation for unsecured ap's (when they share an ssid but not a mac address) is a good idea.

Taking it a level further, Some sort of ARP watching ability would be nice too, like DecaddeinatID or winarpwarch, to help prevent mitm deauth attacks et al.

Is there a good thread on locking down your n900 security wise? Ive yet to see one but i may be wrong...