my friend is taking a pretty high level class - mcs494 - it is a "special topic" class; this semester they are doing unix/linux security and such. 60% of their total grade consists of finding 10 security holes in current unix/linux distros that have not been found before. As soon as a person finds one, they post it on the course website, so if you find the same hole it will not count.
What do you guys think about it?