I'm reminded of reading rain forest puppy's disclosure policy probably last decade, which I was surprised to find still online at its original home. I think I found it via alt.2600 at the time.

Now it reads as harsh and rigid, but at the time, I think the hackers & crackers & researchers I was interested in were doing full, immediate disclosure.

http://www.wiretrip.net/rfp/policy.html