Attacking Chrome IPC [video]
media.ccc.de
media.ccc.de
A lot of people seem to be kept out of the field by the notion that finding these vulnerabilities can only be the result of some kind of genius
For example, I can't imagine someone being accepted to give a talk at a security conference about how they tried for 2 years to learn C++ to find a vulnerability in Chrome, but failed to even get as far as understanding enough to change a line of code.