https://www.eff.org/deeplinks/2008/11/grey-hat-guide-security-researchers