update #2 for exploit