How does SSI exploitation works?