New top story on Hacker News: Ask HN: How do security researchers know where to look for vulnerabilites?

Ask HN: How do security researchers know where to look for vulnerabilites?
37 by vedanshbhartia | 10 comments on Hacker News.
Also, in a relatively open ended project, llike Google Zero, how do people there decide upon a course of research?