Re: [tor-dev] Responsible disclosure