You don't really understand a security issue until you've written an exploit yourself.