>>6+1
>>3In other words, they're selecting those who wouldn't sensibly think "WTF? Did my machine/browser just get pwned?" if something like that happened to them.
Then again, if on the very slim chance that I had JS enabled and it happened to me, I'd probably get the page source and reverse-engineer/crack it... I wouldn't be surprised if everything was client-side, including those "tests" and their results.