If people can't be responsible, let's just create a mailing list, call it "full-disclosure" and post everything there.