exploits 4a and 4b