Ask HN: How do security researchers know where to look for vulnerabilites? | Hacker News