Multiple researchers using the same tools to find the same bugs are creating ‘unnecessary pain and pointless work’