MAC filtering just means they can't steal your connection, but they can decrypt the signal if they're up for it, which means they can do the hack described in the topic.
I can't really be bothered reading this atm, but doesn't G-Mail use SSL?
Edit: Okay, so I went and read it. Cookie snatching is pretty evul.
