security research & notes