brute forcing secret: