new attack vector, utilizing 'normalize'