@thc
break stuff, fix it. preferably your stuff, not other peoples'!

develop a hypothesis of how something works from outside (e.g. a web app), test it and validate or invalidate your hypothesis. keep going.