The kind of vulnerabilities that are basically just subverting a user's trust are totally fascinating to me.