Google Project Zero: 'Here's the secret to flagging up bugs before hackers find them'