In the light of the recent revelations of Snowden about the NSA using a large library of 0days for its dark purposes, is it time for GNU, EFF and Mozilla (and probably others) to start with high priority projects to create tools for automatic/assisted vulnerability discovery?