You&#x27;re failing to see the charm here. Social engineering is a confidence trick that exploits gaps in someone&#x27;s personal trust system.<p>Surely you are right that when he presented the challenge he had something different in mind. But that&#x27;s exactly the point! The winner realized that the website itself might be a gap in the challenger&#x27;s trust system; a place where he would have his guard down.<p>Eschewing the <i>implied</i> parameters of a problem and cheating expectations are what vulnerability detection is all about.