Fingerprinting systems with TCP source-port selection

Academics' continued employment depends upon publication in academic journals. When universities consider employment and promotion, academics are not assessed on the quality of their interaction with the Linux kernel community, on how much urgent hassle they cause for Linux distributors, or the risk their work creates for Linux users; they are assessed on the number and impact of their academic publications.

A university employer would see no problem with an academic preferring full publication of the fault in an academic journal over following some 'Linux community responsible disclosure' process which precludes such publication.

That in turn means that if the Linux kernel community wants pre-disclosure of faults, then they have to provide a process which does not create unenviable choices for academics.

You can argue that academic publishing is broken, and that academics should be evaluated using broader criteria. Neither of those arguments is new, and the Linux community isn't going to be the group which successfully corrects either of those issues.