That is a question researchers have been asking for decades. Rain Forest Puppy, with the help of some smart, invested colleagues, put together a good framework

That is a question researchers have been asking for decades. Rain Forest Puppy, with the help of some smart, invested colleagues, put together a good framework for Full Disclosure a long time ago: http://dl.packetstormsecurity.net/papers/general/rfpolicy-2.0.txt http://dl.packetstormsecurity.net/papers/general/rfpolicy-2.... When I first found myself involved in disclosures in the mechanical security world, I turned to that document to orient myself, though mechanical security has some different challenges that make following that framework perfectly fairly hard.