How one bug bounty researcher chooses the features they investigate — Blankdot