Reflection and multiple class loaders were not accepted as answers, but deserialization and serialization was accepted as answer, only to be followed by a question related to making Singleton class un-hackable.