Watching the watchers: bias and vulnerability in remote proctoring software