Jesse Ruderman, one of Mozilla's very talented contributors, spends a few paragraphs over at his blog to talk about how he finds security holes.
Jesse's been contributing to Mozilla for years as a volunteer and an intern. He has proved his value all over the project but is probably best known for finding security vulnerabilities, maintaining the burning edge and pornzilla, as well as for his awesome collection of extremely useful bookmarklets.
