I can now say that I do these case studies regularly. I extract all the reports of a particular bug class from the Internet and I study them. I thought no case study will surprise me anymore - a few 5-digit payouts from big companies followed by tens of reports from...