Guessing vs. Not Knowing in Hacking and CTFs