add note about pwn2own

this deserves a slide