Thai
Elite Member
Man in the middle attack involves the hacker providing his public key to one or both endpoints, that's how he gets in. Key management can be hard, regardless of where they are.
The other hacking way is to have gained access to the device/computer prior to the message being encrypted.
It's pretty interesting stuff.
Read above link.
As for your second point, it is called a mugging!