Disclose.io: A safe harbor for hackers disclosing security vulnerabilities