3 ms·

Finding the bug is 95% of the effort. The idea that reporting obscure security bugs is worthless is BS.