Hackers Score Big by Thinking Small