Good primer on NDAs, I also prefer not to sign NDAs without knowing more about the project first, in case there could be a conflict of interest.

Looks like Koz just posted this: https://groups.google.com/group/rubyonrails-security/msg/1f3...