Each security breach, however small, paves the way for a bigger breach. Even if the information gathered in this case seems innocuous, these impromptu social en

Each security breach, however small, paves the way for a bigger breach. Even if the information gathered in this case seems innocuous, these impromptu social engineering attacks do demonstrate a real vulnerability. Also keep in mind that the contestants weren't allowed to ask for anything more sensitive: Contest rules prohibited asking for any sensitive information, or targeting certain types of organizations such as government or financial institutions. Given these constraints, I'd say getting a rundown of version numbers and getting a user to visit a page is about as good as anybody could do.