If a WiFi pineapple does a karma attack and a client connects to it, would you get the password (for the original WiFi) or would the client just connect to you? Is there anyway to stop it?
Karma primarily works against "Open" wireless networks (things like hotspots) where there is no encryption or authentication at the wireless networks. Encrypted wireless networks have handshakes that prevent basic MITM attacks, unless the attacker already knows the shared key.
In terms of stopping the attack, really the only foolproof way to do that is don't connect to any open networks, only connect to encrypted wireless networks. If that's not an option, ensure that the first thing you do after connecting to the network is establish a VPN tunnel to a system that you trust and then send all traffic over that connection. The attacker can try to MITM the VPN connection but once you've connected to that you should be relatively ok.