Fake attack, real lessons