Attackers Follow Security Principles Too