phys.org
Yes, you can spoof management packets such as Deauth. Also very widely known.
Reply on news.ycombinator.com