Hacker News Reader

Assuming neither client and router is upgraded, can this be mitigated my making the SSID hidden, so the attacker wouldn't know which AP to spoof?

The attack doesn't need to know the SSID to find and replay the affected packet.

hidden APs can be easily seen

Thanks, didn't know that :)