Bug hunting is not security research (2013)
pedramhayati.com