application security researcher / part-time bug hunter / twitter.com/canmustdie