oops, omitted a couple important features/vulnerabilities