make potential attack more obvious in example