Or perhaps a [:white, :grey, :black].sort_by{rand}.first hat attack vector list? Penetration testers love this stuff, as do I. At my job, I educate developers by documenting things like this. It helps them be aware of what crazy stuff is out there.