The Duty of a Scholar

In 2004, computer security researcher Colin Percival discovered a cache-based side channel vulnerability in Intel's Hyper-Threading CPUs that could leak RSA private key information, and he spent six months responsibly notifying affected security teams before publicly disclosing the vulnerability in May 2005. Percival prioritizes responsible disclosure practices over career advancement, demonstrating that security researchers have a duty to quietly alert vendors and coordinate fixes before public disclosure rather than ignoring vulnerabilities or exploiting them for personal gain.