Article says hacker creates a WiFi hotspot using the same SSID as the open WiFi network. Your unsuspecting device connects to his hotspot instead, and he grabs your authentication token and uses it.
There are also programs that can sniff packets as they are transferred over networks. If packets are not encrypted, the information is easily visible and can be re-used by a hacker sniffing packets.
Sent from my unrooted DroidX using DroidForums app