Also, the attacker would have to run black box against the live environment which is much more difficult and likely to be noticed than offline white box.