Re: can a bit of javascript really mine anything worth having ?
Yes & No ;)
If done correctly this attack becomes a little more persistent continuing to run after you have left the area of the rogue access point. Plus the attacker could grab some if not all of your login credentials (Gmail, Amazon, PayPal, XHamster etc) and if really lucky an active session token for your banking.