Nice post! You're right about how sometimes it is more fun to rip things apart than to build them. For example: I remember running a fuzzer on a brand new Solaris 10 install several years back and when the server spontaneously rebooted itself, I knew I had just found a remote root exploit.
Good luck!