exploited by x_0hz and streex