[cgranade]

In defense of academics, it's quite common to first notify the vendor so that they can prepare a countermeasure for when the exploit is published. In general, publishing without making a reasonable attempt to contact the vendor is irresponsible at best and often down right unethical.