Reverse once, run forever: designing client-side defenses that assume the attacker has already read every line