Tavis is an excellent researcher, but it's important to remember that finding bugs and posting them publicly is his full-time job, so it's not too surprising th

Tavis is an excellent researcher, but it's important to remember that finding bugs and posting them publicly is his full-time job, so it's not too surprising that he finds a few bugs that are noteworthy every month. He seems to emphasize breadth rather than depth in his searching, which is part of the reason he finds so many! After all, bugs are dense and most software is crap... I suspect there are many others who are just as capable of doing the same work, but either A) don't have the opportunity (e.g. they have day jobs, few people work on P0) or B) aren't as public about their findings (e.g. exploit brokers, nation states, etc) Anyway, that's what I remind myself whenever I start thinking "I wish I could be as cool as Tavis". Someday I'd love to have have the opportunity to do the same work.