it was Mark Dowd's firm, Azimuth Security - not just some contractor, he literally wrote the book on memory safety vulnerabilities