ARP has no built-in authentication and accepts any reply unconditionally — two flaws that attackers can put to direct us...
