True tales of (mostly) white-hat hacking