You have to understand three things: 1. Not all the hacks require ninja skills, there's plenty of big targets with really low security that you can hack just b

You have to understand three things: 1. Not all the hacks require ninja skills, there's plenty of big targets with really low security that you can hack just by using publicly available automated tools. Also you need to consider that lots of crackers don't carry out targeted attacks. They need to hack a CA, there's plenty CAs in the world, all you need to find is one with bad security. You don't need to go after a big one, you don't need to go after the most protected application/infrastructure of them. 2. A person can have great skills and publicly brag about his hacks (Kevin Mitnick is a good example) 3. Another version of this, someone can have ninja skills and can be an ass at the same time (quite common in security industry)