How to Spot a Vulnerable Program

(Without X-ray Vision or Magic)