Passing a test shows that you can memorize things, not that you can think. Real security engineering requires thought. _H*