dkirmani comments on Self-Keeping Secrets

[dkirmani]

Though zero-day exploits themselves are precious secrets, “how to find” zero-days is public knowledge.

I’ll bite. How does one reliably find zero-days in a given system?