This attack could have been so, so much worse. We were saved by the attacker's lack of creativity and competence.